Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
File:                     1fb97d52-90b2-3f47-b40b-69c650bf9738.roa (raw, json)
Hash identifier:          FEB01XdtMG2sYf2YDLtSKnIoPjJDj/z1nL3J20JLcFM=
Subject key identifier:   D3:DF:A6:EC:D8:E7:CC:F6:65:11:F6:FB:89:F1:22:04:53:B4:F0:C3
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F4328584F225D02547BA8786C682D3480
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        104.128.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:02:54:7b:a8:78:6c:68:2d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=30074441-ade2-43e4-a163-1bfa8b084d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:10:e0:08:0f:a3:6b:7b:87:6c:eb:bc:25:
                    e4:da:a6:26:67:92:d2:4c:b3:17:8c:23:77:2d:48:
                    b5:5d:87:62:65:7c:43:88:bc:f7:40:52:73:ba:9a:
                    d5:d8:05:86:be:b7:17:fb:7b:51:08:12:01:a3:d8:
                    8d:34:04:d0:26:12:2a:25:de:1b:25:4e:e9:61:af:
                    17:fd:ae:45:d8:3d:30:83:65:3b:e9:e8:97:26:89:
                    a5:d7:62:68:50:c3:38:a1:f5:6a:bc:14:cb:00:55:
                    84:1e:46:a5:3b:e8:f7:50:7b:c6:37:8a:4b:d2:75:
                    5d:6d:94:ae:cf:a7:34:4a:12:cc:2f:e4:d6:a9:69:
                    93:37:f7:e0:a3:77:43:f8:b2:3c:0c:2d:0a:cd:d9:
                    be:e5:c0:58:55:8d:c6:7b:e3:56:29:49:92:d3:79:
                    b8:0d:3e:eb:8c:f6:b9:fe:2c:06:f9:52:18:3c:f9:
                    ef:43:25:d0:ac:e9:08:b6:52:f8:42:fc:18:b2:c1:
                    45:ac:06:db:25:af:2e:76:fd:53:ab:8f:16:6a:0c:
                    c9:a1:e2:fb:b2:db:1f:9d:8c:a9:e5:08:68:cd:07:
                    6b:6e:20:b0:7f:a0:ca:b2:92:65:7f:5d:39:ca:02:
                    54:af:42:e7:2a:93:06:42:26:aa:15:eb:88:92:7d:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DF:A6:EC:D8:E7:CC:F6:65:11:F6:FB:89:F1:22:04:53:B4:F0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:46:54:4e:5e:f4:92:e8:b6:15:70:0f:63:5d:1d:5e:07:
         e4:c8:14:0d:a3:10:9a:6a:e1:9e:4f:8f:0b:5d:61:97:ad:c7:
         ff:f3:ff:80:75:05:90:5c:3a:cd:28:b2:3a:34:80:a3:e3:a8:
         9a:55:0d:e7:52:c9:0a:be:69:2d:4d:7c:ff:c6:c5:99:e7:14:
         48:0c:00:3f:e1:e7:49:cf:44:4e:a0:4b:37:6c:df:47:35:e5:
         37:c8:70:a1:f2:80:1d:7b:53:4e:a7:f9:dc:cf:10:1a:8a:ce:
         4d:0e:d2:d1:ab:16:5a:ee:ed:a1:f3:1d:c2:1d:aa:54:7d:4d:
         27:ee:2e:06:14:ae:bd:a1:8b:96:a4:44:ab:3e:da:37:5e:8d:
         3d:d3:5e:4c:2e:75:c5:3e:9d:d0:19:21:58:9b:f6:b7:8d:da:
         33:57:c1:5e:8e:2c:df:ed:ea:db:52:f1:25:67:1e:ae:b3:9b:
         3d:07:6e:7b:dc:7e:d6:3b:51:35:23:80:f3:ce:ca:29:8f:cb:
         d4:8d:73:3c:e3:01:4c:7f:1e:d3:f0:21:07:d0:6e:27:b1:3d:
         50:e6:00:93:35:ae:41:53:2f:04:9b:59:b7:f1:dc:59:e1:27:
         10:f7:dc:01:ec:1d:2a:2c:4d:f0:05:7c:a0:b9:d4:4e:20:6f:
         5a:48:be:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQJUe6h4bGgtNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj
ODVmMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
MzAwNzQ0NDEtYWRlMi00M2U0LWExNjMtMWJmYThiMDg0ZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgQ4AgPo2t7h2zrvCXk2qYmZ5LSTLMXjCN3
LUi1XYdiZXxDiLz3QFJzuprV2AWGvrcX+3tRCBIBo9iNNATQJhIqJd4bJU7pYa8X
/a5F2D0wg2U76eiXJoml12JoUMM4ofVqvBTLAFWEHkalO+j3UHvGN4pL0nVdbZSu
z6c0ShLML+TWqWmTN/fgo3dD+LI8DC0Kzdm+5cBYVY3Ge+NWKUmS03m4DT7rjPa5
/iwG+VIYPPnvQyXQrOkItlL4QvwYssFFrAbbJa8udv1Tq48WagzJoeL7stsfnYyp
5QhozQdrbiCwf6DKspJlf105ygJUr0LnKpMGQiaqFeuIkn3kXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPfpuzY58z2ZRH2+4nxIgRTtPDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5
ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvMWZiOTdkNTItOTBiMi0z
ZjQ3LWI0MGItNjljNjUwYmY5NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0
MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz
Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi
NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIC/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTtRlROXvSS6LYVcA9jXR1eB+TIFA2jEJpq4Z5PjwtdYZetx//z/4B1
BZBcOs0osjo0gKPjqJpVDedSyQq+aS1NfP/GxZnnFEgMAD/h50nPRE6gSzds30c1
5TfIcKHygB17U06n+dzPEBqKzk0O0tGrFlru7aHzHcIdqlR9TSfuLgYUrr2hi5ak
RKs+2jdejT3TXkwudcU+ndAZIVib9reN2jNXwV6OLN/t6ttS8SVnHq6zmz0Hbnvc
ftY7UTUjgPPOyimPy9SNczzjAUx/HtPwIQfQbiexPVDmAJM1rkFTLwSbWbfx3Fnh
JxD33AHsHSosTfAFfKC51E4gb1pIvss=
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:37:56 2026 by rpki-client