Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11ccff52-06c6-389d-ac1b-b4e862b940de.roa
File:                     11ccff52-06c6-389d-ac1b-b4e862b940de.roa (raw, json)
Hash identifier:          GMVZKe/aT3eb2k/jCkctjoyAmsdlveJdIvFlTbdgaR0=
Subject key identifier:   52:E2:2C:4A:0A:BA:E4:4C:64:87:BD:B6:44:C4:8A:E4:27:8D:D6:88
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DC995AA38894B3F5A5B014740
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11ccff52-06c6-389d-ac1b-b4e862b940de.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     8987
IP address blocks:        170.85.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:aa:38:89:4b:3f:5a:5b:01:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=f1cc8b74-be4c-4488-ae03-4be316f491b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:80:a0:33:32:e6:c7:4e:a7:e7:3f:c0:a6:
                    e8:d1:7e:c1:3b:a5:fd:c7:75:74:0e:9f:b1:46:28:
                    e3:cb:c0:2d:8d:ca:f5:72:43:dd:0b:c3:44:77:ad:
                    77:f2:04:5c:ac:ef:d3:68:e7:2e:42:34:ce:2a:d0:
                    7f:59:4b:76:74:50:0c:4f:0e:14:58:37:39:41:45:
                    dd:56:f4:3c:08:e9:65:b2:76:20:e3:e3:bf:9e:24:
                    29:bf:c7:66:f6:84:29:07:33:7c:5d:ab:ad:d4:46:
                    ef:86:55:1a:24:aa:43:e5:a4:7d:f6:3d:11:51:cf:
                    4d:42:28:09:b7:4e:e4:83:02:e7:6d:46:64:d1:74:
                    59:89:a1:6f:c4:7a:44:f8:f5:4d:cb:01:08:4e:8b:
                    9f:45:e0:2b:6f:01:ec:1f:26:78:58:cb:1e:be:7c:
                    78:9e:95:73:c4:d0:ee:40:22:10:77:a9:c3:4f:e2:
                    d8:9c:42:da:3e:1c:bd:56:8c:fe:a1:0c:e6:73:75:
                    76:b2:b3:5b:2e:c9:47:e8:22:64:1d:cc:3f:9a:1c:
                    a0:a3:74:33:79:f7:a6:b0:fd:dd:fb:82:32:8e:88:
                    96:cd:bd:fc:83:41:56:57:ca:cd:23:e4:cb:8d:f5:
                    9b:28:d2:61:ac:6d:df:3a:29:dd:56:7a:75:18:61:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E2:2C:4A:0A:BA:E4:4C:64:87:BD:B6:44:C4:8A:E4:27:8D:D6:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/11ccff52-06c6-389d-ac1b-b4e862b940de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:8e:48:73:3e:d7:8f:a6:03:b5:ba:f0:ab:d9:25:b7:26:f6:
         cd:24:a2:c0:8c:9e:a8:1f:89:19:07:0a:61:ea:fb:75:e3:34:
         46:89:35:34:30:04:c0:49:bd:1a:e0:6a:99:19:63:9c:3c:ac:
         58:9b:41:d5:3c:ec:c3:e0:0c:e5:d2:c5:25:70:71:72:a9:d3:
         c9:81:e7:f1:95:1b:10:e5:b6:42:fa:44:9a:23:44:95:c0:b1:
         4a:d0:23:a5:e6:2e:f6:f8:78:94:85:49:77:b7:10:c1:b9:75:
         8a:62:87:c5:ad:36:b9:c0:68:4d:0d:14:3b:84:ae:0f:44:92:
         b7:97:42:34:22:28:ab:87:60:68:e6:21:ca:45:b1:4f:e6:b9:
         da:8d:5f:e7:49:62:a8:75:c7:56:4e:7b:89:49:0a:4c:74:c7:
         77:e2:3d:90:66:94:44:3c:2c:d8:84:37:a0:b4:14:f6:d3:d6:
         86:2a:ab:3f:56:7a:0c:97:ba:3d:ad:90:58:2a:cb:dd:f7:f6:
         19:3e:5e:1d:2e:80:19:a7:63:57:1b:48:be:58:76:4a:9c:b0:
         75:49:fe:fa:57:a6:5c:99:f8:bc:b6:e7:aa:16:c0:95:e7:df:
         02:a6:44:60:8a:01:a3:81:3a:e0:bb:2b:3c:f6:41:cb:c4:f6:
         32:0e:91:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlao4iUs/WlsBR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
ZjFjYzhiNzQtYmU0Yy00NDg4LWFlMDMtNGJlMzE2ZjQ5MWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09eAoDMy5sdOp+c/wKbo0X7BO6X9x3V0Dp+x
Rijjy8Atjcr1ckPdC8NEd6138gRcrO/TaOcuQjTOKtB/WUt2dFAMTw4UWDc5QUXd
VvQ8COllsnYg4+O/niQpv8dm9oQpBzN8Xaut1EbvhlUaJKpD5aR99j0RUc9NQigJ
t07kgwLnbUZk0XRZiaFvxHpE+PVNywEIToufReArbwHsHyZ4WMsevnx4npVzxNDu
QCIQd6nDT+LYnELaPhy9Voz+oQzmc3V2srNbLslH6CJkHcw/mhygo3QzefemsP3d
+4IyjoiWzb38g0FWV8rNI+TLjfWbKNJhrG3fOindVnp1GGEcLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLiLEoKuuRMZIe9tkTEiuQnjdaIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMTFjY2ZmNTItMDZjNi0z
ODlkLWFjMWItYjRlODYyYjk0MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMKOSHM+14+mA7W68KvZJbcm9s0kosCMnqgfiRkHCmHq+3XjNEaJNTQw
BMBJvRrgapkZY5w8rFibQdU87MPgDOXSxSVwcXKp08mB5/GVGxDltkL6RJojRJXA
sUrQI6XmLvb4eJSFSXe3EMG5dYpih8WtNrnAaE0NFDuErg9EkreXQjQiKKuHYGjm
IcpFsU/mudqNX+dJYqh1x1ZOe4lJCkx0x3fiPZBmlEQ8LNiEN6C0FPbT1oYqqz9W
egyXuj2tkFgqy9339hk+Xh0ugBmnY1cbSL5YdkqcsHVJ/vpXplyZ+Ly256oWwJXn
3wKmRGCKAaOBOuC7Kzz2QcvE9jIOkeA=
-----END CERTIFICATE-----
Generated at Wed May 13 06:20:47 2026 by rpki-client