Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb5a320e-c9df-35e2-812c-a20819739d92.roa
File:                     eb5a320e-c9df-35e2-812c-a20819739d92.roa (raw, json)
Hash identifier:          3HDWdK/Uv/k+0Y+FXmGXlXzZcYJiJQ+92J9G7aF2EPE=
Subject key identifier:   9A:ED:AE:AA:85:85:37:E0:0D:2E:D9:23:7D:EC:3E:C0:F7:B1:10:61
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F49735AA178AD84E937F69A70
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb5a320e-c9df-35e2-812c-a20819739d92.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.22.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:5a:a1:78:ad:84:e9:37:f6:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5fec4412-d89b-4776-a360-2b69c4368b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:1e:22:ea:4d:a2:98:ba:59:b0:b1:f5:2c:
                    fd:e8:a3:a2:a3:40:0f:9b:90:20:3a:14:5a:26:74:
                    cc:2a:4d:81:a8:77:de:a9:de:1d:5d:84:29:e2:9a:
                    61:b8:2c:1c:23:24:c4:3c:92:a6:03:d8:3a:41:3a:
                    25:e4:f1:63:80:7d:e9:f7:73:55:78:6e:32:83:e5:
                    2a:69:d5:76:46:61:60:9b:92:53:6e:a8:f8:af:61:
                    f1:b6:7a:49:f9:b0:4b:63:71:be:f2:4c:7d:22:4b:
                    0f:a2:4f:69:48:30:be:b0:9a:7a:b1:70:4d:1f:77:
                    e4:fa:b3:5b:66:bd:b7:f5:24:72:53:45:cc:3a:98:
                    7f:39:b4:1a:6a:4e:a3:9c:40:17:20:7d:1d:88:24:
                    56:9c:b0:f7:1c:7b:ad:1b:7b:2a:d3:af:6c:85:38:
                    0e:ac:ae:92:c3:85:86:72:0e:d4:8a:b6:d9:25:ee:
                    a5:1e:5b:1d:ba:c1:62:0e:80:00:e7:fe:61:08:52:
                    5f:8b:af:09:47:9b:8d:f3:88:40:25:cd:24:2f:b4:
                    9f:28:53:7d:31:89:26:b3:4d:e4:c4:7e:a0:87:4d:
                    a1:59:c9:a5:11:d0:b9:3d:b4:73:bc:06:3f:75:5d:
                    58:2c:c3:ad:be:7c:5c:40:a5:a7:0d:c5:34:7f:1a:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:ED:AE:AA:85:85:37:E0:0D:2E:D9:23:7D:EC:3E:C0:F7:B1:10:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb5a320e-c9df-35e2-812c-a20819739d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:64:78:29:21:db:b6:a4:d6:44:83:c4:42:e6:39:7d:57:
         b7:1a:e3:c1:d7:50:c4:8a:bc:8f:8a:31:0c:f3:5c:a8:f5:96:
         c8:f4:17:3a:1e:a8:f1:48:e0:89:d0:fd:9d:73:10:99:7a:0f:
         34:a7:15:6b:f0:bc:65:bd:da:0d:5c:30:95:47:41:9b:16:cc:
         86:a2:81:d0:d8:54:14:c1:7e:db:ee:0f:17:11:78:46:54:5a:
         78:49:40:f1:8a:ec:b7:94:ce:78:06:11:6d:ae:52:8c:bf:66:
         dc:69:e2:04:46:16:2f:2d:8b:e5:0f:0f:8c:0e:6b:98:52:9b:
         bf:00:a2:71:45:4a:d4:70:ec:f1:cb:9d:74:62:a7:18:3b:74:
         c4:06:aa:23:fe:98:10:39:d3:dc:3d:b3:62:e0:a4:a1:81:b7:
         00:94:9b:4b:60:7c:ea:c0:4a:78:9a:d7:77:8d:f5:fa:2f:93:
         3e:79:65:56:7b:48:77:d4:8d:11:f3:f9:58:ab:e0:d4:46:c0:
         f6:2d:f3:80:86:d7:65:79:1c:90:37:cf:6b:9a:44:f6:43:9b:
         55:b0:85:28:21:81:52:d4:2c:ad:2a:4d:66:19:af:e1:27:07:
         bd:71:c1:09:7f:62:4d:02:24:fb:a5:90:cb:71:3e:04:aa:a7:
         8e:cf:bb:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1qheK2E6Tf2mnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWZlYzQ0MTItZDg5Yi00Nzc2LWEzNjAtMmI2OWM0MzY4YjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD0eIupNopi6WbCx9Sz96KOio0APm5AgOhRa
JnTMKk2BqHfeqd4dXYQp4pphuCwcIyTEPJKmA9g6QTol5PFjgH3p93NVeG4yg+Uq
adV2RmFgm5JTbqj4r2HxtnpJ+bBLY3G+8kx9IksPok9pSDC+sJp6sXBNH3fk+rNb
Zr239SRyU0XMOph/ObQaak6jnEAXIH0diCRWnLD3HHutG3sq069shTgOrK6Sw4WG
cg7UirbZJe6lHlsdusFiDoAA5/5hCFJfi68JR5uN84hAJc0kL7SfKFN9MYkms03k
xH6gh02hWcmlEdC5PbRzvAY/dV1YLMOtvnxcQKWnDcU0fxonlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJrtrqqFhTfgDS7ZI33sPsD3sRBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI1YTMyMGUtYzlkZi0z
NWUyLTgxMmMtYTIwODE5NzM5ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRY4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHo/ZHgpIdu2pNZEg8RC5jl9V7ca48HXUMSKvI+KMQzzXKj1lsj0Fzoe
qPFI4InQ/Z1zEJl6DzSnFWvwvGW92g1cMJVHQZsWzIaigdDYVBTBftvuDxcReEZU
WnhJQPGK7LeUzngGEW2uUoy/Ztxp4gRGFi8ti+UPD4wOa5hSm78AonFFStRw7PHL
nXRipxg7dMQGqiP+mBA509w9s2LgpKGBtwCUm0tgfOrASnia13eN9fovkz55ZVZ7
SHfUjRHz+Vir4NRGwPYt84CG12V5HJA3z2uaRPZDm1WwhSghgVLULK0qTWYZr+En
B71xwQl/Yk0CJPulkMtxPgSqp47Puy0=
-----END CERTIFICATE-----
Generated at Fri Oct 2 10:22:49 2026 by rpki-client