Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
File:                     9872dc64-0988-3b5c-9553-f5d1b290496b.roa (raw, json)
Hash identifier:          UUsvXcGr8fBaNCZZNEdVvVaPKaaTu5PmM9OlVfsBA/8=
Subject key identifier:   D6:79:B6:6B:3F:96:32:80:E2:2A:8E:8C:63:24:BA:B7:FF:0B:31:FD
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584D40CA3D7E32FEADA82E52C8E0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     397514
IP address blocks:        208.109.153.0/24 maxlen: 24
                          208.109.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:3d:7e:32:fe:ad:a8:2e:52:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=da8e870b-f78d-4ab9-b0e5-e446e03ec451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:cc:8e:e7:e4:6f:9c:c8:ea:cc:f4:f4:88:
                    98:91:90:4d:08:07:2b:82:f1:3a:40:e5:50:52:a8:
                    f8:79:ff:07:f0:08:95:33:7b:44:56:ee:fe:cb:a5:
                    20:8a:b2:c9:4d:06:30:7f:11:5c:45:19:d4:50:01:
                    dd:92:ac:ed:05:52:3b:e6:46:96:4b:23:7b:73:37:
                    b8:cb:04:52:8c:19:f7:04:20:29:7a:e4:1b:e3:10:
                    be:46:3f:83:ac:53:4e:9f:8f:d3:45:0a:69:69:58:
                    28:15:8b:d6:c6:09:49:90:69:47:82:43:bb:fe:ac:
                    45:94:79:57:e7:d2:b1:32:18:a0:9e:6f:36:88:e3:
                    20:a1:98:56:36:5e:00:51:91:25:45:94:6f:48:4e:
                    ed:1c:bb:e6:96:f0:6c:b3:8d:e5:ba:f9:85:3b:0a:
                    2d:0d:11:bf:6c:da:5f:d8:37:44:bf:f0:a2:48:60:
                    2f:f6:02:83:9a:7c:35:36:05:5c:ce:77:7d:15:34:
                    1e:0f:6a:ef:ce:67:c6:77:b9:61:c5:c8:70:40:ab:
                    5e:33:37:0e:cf:87:b5:b0:1e:96:f1:30:fc:55:08:
                    9a:14:92:77:33:b2:f4:b2:1d:c7:2f:b9:8e:14:a7:
                    20:0f:0f:c2:1c:02:48:e9:8d:41:3e:b7:88:8a:aa:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:79:B6:6B:3F:96:32:80:E2:2A:8E:8C:63:24:BA:B7:FF:0B:31:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9872dc64-0988-3b5c-9553-f5d1b290496b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.153.0-208.109.154.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:0f:f9:8b:0b:c0:92:af:20:7a:fe:82:e2:86:c3:7f:02:
         87:f0:9a:05:6f:f6:5c:a3:bd:78:d8:d9:0e:ce:2b:1e:4d:45:
         e0:c3:09:7a:42:e9:57:a0:f7:05:f3:67:93:de:d9:84:fc:f2:
         89:d6:81:47:6f:7f:0a:99:61:42:95:55:2d:c9:44:f8:f8:91:
         45:1a:22:69:41:5a:27:41:3b:29:c4:56:ff:3a:11:29:0a:43:
         cd:4a:f8:73:0b:e2:2c:f2:32:b7:81:fe:f9:99:e1:f9:55:77:
         1d:19:12:d2:36:55:b2:ff:33:15:ab:53:c7:6a:eb:1a:c6:e2:
         63:66:c5:c1:d3:60:b6:0e:ae:a5:47:13:46:5e:45:ed:14:f6:
         df:f9:89:19:e6:a6:e0:dc:55:bf:77:6d:f5:71:85:50:5a:71:
         b7:16:9a:71:53:24:d7:94:8f:9c:4e:e9:7f:2d:a7:ec:ef:49:
         97:e0:41:cb:5d:02:6a:82:39:3e:27:ec:3e:50:d3:e5:77:e4:
         0c:5a:d0:ec:3a:c4:28:45:17:55:58:cc:a3:5d:b8:a0:8b:9e:
         7d:ea:70:33:4d:ab:a9:6e:4f:0d:ef:f7:c2:11:9a:b2:de:7a:
         59:a3:3f:c4:9f:9c:f2:d3:a1:4f:4e:f8:d4:1c:99:57:23:e4:
         8c:76:06:88
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1Ayj1+Mv6tqC5SyOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZGE4ZTg3MGItZjc4ZC00YWI5LWIwZTUtZTQ0NmUwM2VjNDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoTMjufkb5zI6sz09IiYkZBNCAcrgvE6QOVQ
Uqj4ef8H8AiVM3tEVu7+y6UgirLJTQYwfxFcRRnUUAHdkqztBVI75kaWSyN7cze4
ywRSjBn3BCApeuQb4xC+Rj+DrFNOn4/TRQppaVgoFYvWxglJkGlHgkO7/qxFlHlX
59KxMhignm82iOMgoZhWNl4AUZElRZRvSE7tHLvmlvBss43luvmFOwotDRG/bNpf
2DdEv/CiSGAv9gKDmnw1NgVcznd9FTQeD2rvzmfGd7lhxchwQKteMzcOz4e1sB6W
8TD8VQiaFJJ3M7L0sh3HL7mOFKcgDw/CHAJI6Y1BPreIiqotfwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNZ5tms/ljKA4iqOjGMkurf/CzH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvOTg3MmRjNjQtMDk4OC0z
YjVjLTk1NTMtZjVkMWIyOTA0OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQbZkD
BADQbZowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAfH8P+YsLwJKvIHr+guKGw38Ch/CaBW/2XKO9eNjZDs4r
Hk1F4MMJekLpV6D3BfNnk97ZhPzyidaBR29/CplhQpVVLclE+PiRRRoiaUFaJ0E7
KcRW/zoRKQpDzUr4cwviLPIyt4H++Znh+VV3HRkS0jZVsv8zFatTx2rrGsbiY2bF
wdNgtg6upUcTRl5F7RT23/mJGeam4NxVv3dt9XGFUFpxtxaacVMk15SPnE7pfy2n
7O9Jl+BBy10CaoI5PifsPlDT5XfkDFrQ7DrEKEUXVVjMo124oIuefepwM02rqW5P
De/3whGast56WaM/xJ+c8tOhT0741ByZVyPkjHYGiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:51:23 2026 by rpki-client