Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/956f46e2-13be-3cfc-8bce-c710f570c0ed.roa
File:                     956f46e2-13be-3cfc-8bce-c710f570c0ed.roa (raw, json)
Hash identifier:          XIBgA+5daVBRglJFUbeFTQ9+c8upQXadYkjGaaWN0PA=
Subject key identifier:   45:90:10:A7:2C:12:B0:05:20:D8:09:D5:7A:2B:E7:5D:7B:98:8F:99
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584EF1822EDED08D1EFBF5E5C300
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/956f46e2-13be-3cfc-8bce-c710f570c0ed.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        137.184.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:2e:de:d0:8d:1e:fb:f5:e5:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=85570018-fa1e-4217-8ed5-0e5dd7bbd655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:16:84:c1:de:5b:d4:bb:f1:fe:d9:87:01:
                    ba:f2:26:14:05:8f:bd:11:0f:ce:0c:94:81:5c:02:
                    b9:5e:fd:87:f8:bd:0b:16:ef:08:18:75:ae:5f:2e:
                    13:95:6d:55:69:6a:27:fc:96:9f:b6:d4:08:7c:d3:
                    9b:77:b3:11:33:da:33:16:b3:73:bd:88:bc:84:cc:
                    39:d8:5f:68:d6:35:ae:98:0e:10:a4:6c:a1:89:bd:
                    7f:47:95:53:0d:fc:e6:21:c5:e6:b4:aa:40:10:c3:
                    f9:05:92:3e:ee:71:39:41:7f:b9:8d:f9:35:93:91:
                    e1:e8:7d:08:a1:ef:16:36:96:00:06:9f:ef:ea:5a:
                    f1:39:d3:4e:40:86:f5:dc:f9:58:b4:fe:47:66:01:
                    b5:e6:e5:2d:f7:02:88:75:d0:e2:9a:7a:f0:bf:6b:
                    24:22:b6:6d:33:5b:9c:fe:77:34:c5:58:b6:a4:a3:
                    11:57:bb:70:b3:65:d7:68:8c:87:d9:fd:bc:d4:f7:
                    32:30:ac:8c:1d:b8:66:6c:06:9c:31:27:4a:ab:a4:
                    3a:49:c0:d8:94:76:a1:c4:ba:45:fa:f6:0a:ec:5a:
                    9f:f4:52:dd:d4:e0:4e:54:74:fe:c0:bf:ed:47:cc:
                    d5:36:f2:18:c2:f3:73:a0:40:8e:72:9f:bf:a8:e0:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:90:10:A7:2C:12:B0:05:20:D8:09:D5:7A:2B:E7:5D:7B:98:8F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/956f46e2-13be-3cfc-8bce-c710f570c0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.184.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:5b:9f:ce:b6:d9:92:7a:c9:b3:dc:f0:aa:89:7a:fa:16:
         e1:62:45:a3:2b:05:52:47:4b:6f:7d:94:13:40:75:23:1a:d9:
         79:a2:eb:3d:35:cf:41:82:31:21:4a:41:61:73:5e:28:1b:f2:
         72:d3:6c:d5:58:72:9f:9d:c1:1b:66:aa:9f:0a:6f:0b:20:02:
         7f:ce:20:0d:54:6e:ff:90:ec:e3:d6:02:56:8a:29:e0:fc:9d:
         c4:9b:26:a5:99:96:24:8f:54:28:97:9b:41:83:1e:bf:d9:7b:
         4a:e9:54:53:8f:86:e2:1d:57:16:c6:28:43:0d:da:cb:6b:0a:
         a0:e7:77:d7:23:05:97:b0:79:41:da:80:5d:42:cd:f8:db:cd:
         f5:16:12:2f:3f:72:fe:9d:aa:93:81:c4:26:42:c0:d5:71:e4:
         9d:ad:77:6c:95:ea:02:3e:81:76:08:be:59:2a:96:18:ad:f4:
         df:60:8c:8e:aa:f7:df:0b:91:74:04:c3:6b:2f:43:0e:5b:8b:
         7a:19:54:10:09:46:f1:99:e0:04:d9:71:4d:40:1a:2d:e8:0f:
         4d:16:cf:9a:ec:4f:bd:19:e7:03:97:50:b1:11:68:90:57:d2:
         8f:f6:aa:ab:13:94:5e:a3:d4:05:9c:d3:a2:ab:59:2e:ff:d9:
         46:d5:7c:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgi7e0I0e+/XlwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ODU1NzAwMTgtZmExZS00MjE3LThlZDUtMGU1ZGQ3YmJkNjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vEWhMHeW9S78f7ZhwG68iYUBY+9EQ/ODJSB
XAK5Xv2H+L0LFu8IGHWuXy4TlW1VaWon/JafttQIfNObd7MRM9ozFrNzvYi8hMw5
2F9o1jWumA4QpGyhib1/R5VTDfzmIcXmtKpAEMP5BZI+7nE5QX+5jfk1k5Hh6H0I
oe8WNpYABp/v6lrxOdNOQIb13PlYtP5HZgG15uUt9wKIddDimnrwv2skIrZtM1uc
/nc0xVi2pKMRV7tws2XXaIyH2f281PcyMKyMHbhmbAacMSdKq6Q6ScDYlHahxLpF
+vYK7Fqf9FLd1OBOVHT+wL/tR8zVNvIYwvNzoECOcp+/qODa1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWQEKcsErAFINgJ1Xor5117mI+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvOTU2ZjQ2ZTItMTNiZS0z
Y2ZjLThiY2UtYzcxMGY1NzBjMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAibj9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWpW5/OttmSesmz3PCqiXr6FuFiRaMrBVJHS299lBNAdSMa2Xmi6z01
z0GCMSFKQWFzXigb8nLTbNVYcp+dwRtmqp8KbwsgAn/OIA1Ubv+Q7OPWAlaKKeD8
ncSbJqWZliSPVCiXm0GDHr/Ze0rpVFOPhuIdVxbGKEMN2strCqDnd9cjBZeweUHa
gF1CzfjbzfUWEi8/cv6dqpOBxCZCwNVx5J2td2yV6gI+gXYIvlkqlhit9N9gjI6q
998LkXQEw2svQw5bi3oZVBAJRvGZ4ATZcU1AGi3oD00Wz5rsT70Z5wOXULERaJBX
0o/2qqsTlF6j1AWc06KrWS7/2UbVfKE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:27:51 2026 by rpki-client