Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b01b506-676b-30ad-b43a-08d657bab22e.roa
File:                     9b01b506-676b-30ad-b43a-08d657bab22e.roa (raw, json)
Hash identifier:          BiWbd7GweSEHkvxuZLmBePXydrsP9UoVpCP32XtguQk=
Subject key identifier:   B5:46:AA:F7:50:5C:44:DD:10:DA:D4:45:2F:B3:ED:D0:A8:9A:D2:BA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F2ABD2EDD09A2ECB9A9D6BD80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b01b506-676b-30ad-b43a-08d657bab22e.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        204.101.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:2e:dd:09:a2:ec:b9:a9:d6:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=644609f8-5cd5-461b-91bb-d0d2d2049786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:fe:e3:bd:89:f9:3c:b1:e0:1a:ff:7b:86:
                    d0:4d:d3:85:c3:8e:18:ae:32:d7:06:63:54:4c:3e:
                    4b:52:21:f7:ac:98:8b:99:ff:6f:c2:db:b4:cd:56:
                    e4:17:16:a9:42:ce:d7:f9:c6:f8:8d:88:45:0b:1a:
                    82:bd:45:a2:c5:65:fe:f1:2a:1e:f8:f5:88:1c:c0:
                    6b:26:38:ed:25:15:5e:c9:f8:98:02:33:80:3e:e6:
                    d9:bd:ab:ff:c4:ea:46:b3:0f:e4:27:bf:c4:53:3d:
                    63:01:6c:9f:3b:68:74:a4:35:48:b3:fb:2b:c3:3f:
                    2c:ed:a4:63:c4:64:2a:1a:66:16:f5:1e:02:98:a9:
                    ee:cf:6c:32:52:d5:32:ef:f0:d6:e4:dd:e1:c2:95:
                    d9:53:75:23:a8:c7:86:07:aa:55:bb:be:e2:1d:90:
                    d3:74:63:75:f5:51:5c:15:6f:56:b3:bc:bd:c3:d5:
                    f2:c8:9c:c0:aa:ca:0b:5a:5a:e7:8f:c1:93:4d:91:
                    6e:5d:5a:06:f3:cb:3c:19:d3:58:25:48:09:b0:fa:
                    1d:f5:47:a7:f6:db:07:18:e3:57:43:33:94:6b:cd:
                    6d:55:12:6c:a7:c8:b3:71:3b:69:3d:96:5d:21:a7:
                    1f:f8:7e:2d:b5:af:ad:2b:19:79:90:09:53:99:ae:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:AA:F7:50:5C:44:DD:10:DA:D4:45:2F:B3:ED:D0:A8:9A:D2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9b01b506-676b-30ad-b43a-08d657bab22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:95:20:00:82:c4:8b:97:81:68:0e:9d:c8:27:53:f0:c5:
         8b:74:eb:0a:ea:62:f9:78:e9:eb:e0:35:e0:74:e1:71:9a:b6:
         9c:09:fb:18:2e:c6:16:fa:47:cc:7d:b6:70:92:54:13:7d:f1:
         be:0b:f8:57:46:61:bd:cf:4b:fc:d6:3e:65:cc:cc:15:59:b9:
         d1:fd:f9:55:96:f0:78:99:08:6a:e0:23:89:ac:fd:7e:e1:b1:
         ab:fc:16:28:f0:d2:31:6b:be:8c:c5:78:95:83:33:53:ae:6d:
         4c:a6:f1:44:a9:26:c8:7d:b1:d1:9a:da:56:6c:9a:94:58:04:
         ab:34:11:16:67:84:9c:99:19:9b:f5:c6:9c:01:82:1a:d6:8f:
         6e:fa:43:8b:83:8a:a3:ac:7e:43:55:fa:39:44:a9:75:c2:ea:
         f2:72:a6:9f:7c:b3:73:06:e9:2f:fa:25:c7:33:c8:68:05:ac:
         15:04:04:66:24:61:ac:54:3a:ff:cd:2b:73:1a:2f:6c:5c:9d:
         f1:bf:4d:cc:03:59:f8:7e:63:11:02:83:da:b9:a9:fc:7e:81:
         3b:45:cd:ed:72:5b:3c:1a:de:2a:0f:52:89:31:ca:a2:74:74:
         5a:24:68:72:4d:00:da:6c:33:03:a0:ed:40:66:4c:fa:11:7e:
         06:92:94:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS7dCaLsuanWvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
NjQ0NjA5ZjgtNWNkNS00NjFiLTkxYmItZDBkMmQyMDQ5Nzg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirr+472J+Tyx4Br/e4bQTdOFw44YrjLXBmNU
TD5LUiH3rJiLmf9vwtu0zVbkFxapQs7X+cb4jYhFCxqCvUWixWX+8Soe+PWIHMBr
JjjtJRVeyfiYAjOAPubZvav/xOpGsw/kJ7/EUz1jAWyfO2h0pDVIs/srwz8s7aRj
xGQqGmYW9R4CmKnuz2wyUtUy7/DW5N3hwpXZU3UjqMeGB6pVu77iHZDTdGN19VFc
FW9Ws7y9w9XyyJzAqsoLWlrnj8GTTZFuXVoG88s8GdNYJUgJsPod9Uen9tsHGONX
QzOUa81tVRJsp8izcTtpPZZdIacf+H4tta+tKxl5kAlTma6vPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVGqvdQXETdENrURS+z7dComtK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOWIwMWI1MDYtNjc2Yi0z
MGFkLWI0M2EtMDhkNjU3YmFiMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAKlSAAgsSLl4FoDp3IJ1PwxYt06wrqYvl46evgNeB04XGatpwJ+xgu
xhb6R8x9tnCSVBN98b4L+FdGYb3PS/zWPmXMzBVZudH9+VWW8HiZCGrgI4ms/X7h
sav8Fijw0jFrvozFeJWDM1OubUym8USpJsh9sdGa2lZsmpRYBKs0ERZnhJyZGZv1
xpwBghrWj276Q4uDiqOsfkNV+jlEqXXC6vJypp98s3MG6S/6JcczyGgFrBUEBGYk
YaxUOv/NK3MaL2xcnfG/TcwDWfh+YxECg9q5qfx+gTtFze1yWzwa3ioPUokxyqJ0
dFokaHJNANpsMwOg7UBmTPoRfgaSlEk=
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:53:24 2026 by rpki-client