Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/bd1a0bc9-8a53-3e51-918b-3f1479c76388.roa
File:                     bd1a0bc9-8a53-3e51-918b-3f1479c76388.roa (raw, json)
Hash identifier:          Nqwkcamb6yJ9Ac8zr82gsB2BF/ZJ4gEk2LglKBadPDM=
Subject key identifier:   CB:1C:84:B5:CB:34:AD:15:A4:8C:2F:78:F2:02:73:E2:12:F5:7C:BD
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F4328584DBE6AFC4CD9D2313916F37200
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/bd1a0bc9-8a53-3e51-918b-3f1479c76388.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     15404
IP address blocks:        139.138.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6a:fc:4c:d9:d2:31:39:16:f3:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=54450ba3-2b98-458e-a32f-8e82a079f38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:60:2e:37:55:a4:c5:cf:28:d7:e8:30:de:
                    58:66:72:13:7e:e2:28:78:5c:06:7c:b7:16:bf:e5:
                    07:d0:4a:35:e8:f9:ee:9e:c6:54:35:82:bb:4e:21:
                    ca:5d:be:29:b0:da:8f:78:a4:b5:c9:4b:6c:a0:69:
                    52:28:7c:b7:5c:66:55:89:53:bd:97:eb:d2:05:4c:
                    9e:cf:ba:50:91:29:0e:bc:ea:c4:82:3f:d0:d5:47:
                    d9:1f:6d:48:c0:ef:46:6d:67:9f:4e:08:58:77:64:
                    c8:57:54:e7:31:62:9d:aa:f2:48:d9:8f:d9:25:61:
                    74:d7:09:de:d8:f6:5d:5e:e1:9b:16:2c:7b:6f:e1:
                    fc:e8:f4:43:37:63:1b:df:ab:40:a1:9b:c4:df:16:
                    90:64:ef:23:a8:2d:0b:8e:17:d7:89:2c:f1:28:6a:
                    f0:6a:46:2e:13:fe:7a:76:ca:d3:bd:a9:34:cc:24:
                    cc:af:ee:a7:43:c6:bf:ea:ac:ff:03:ce:d0:a0:c2:
                    1b:b1:dd:53:72:e9:5b:37:9c:80:9f:6c:70:9a:d2:
                    f4:25:f8:29:a3:a4:0b:ed:d7:60:6e:03:07:77:c3:
                    d8:21:4e:d2:1b:5e:2f:bc:5f:41:1d:1c:37:e7:ec:
                    4f:30:e8:40:1d:fb:08:88:e2:9c:f1:26:27:41:09:
                    33:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:84:B5:CB:34:AD:15:A4:8C:2F:78:F2:02:73:E2:12:F5:7C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/bd1a0bc9-8a53-3e51-918b-3f1479c76388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:5d:fb:14:72:2b:63:ea:35:5d:b7:d5:ba:a5:3e:0e:5f:
         07:6d:c9:a7:a5:f9:bb:39:27:31:12:46:71:ca:ee:87:02:92:
         c8:60:20:19:61:f2:f7:68:49:49:64:7d:58:a5:a4:fd:b2:2a:
         41:f2:41:16:f9:68:04:70:75:a1:d0:f6:d6:4f:c6:43:37:8e:
         43:e4:44:8c:60:de:e3:61:e8:2e:f4:05:29:de:40:8f:a8:c2:
         1a:03:0e:d1:bc:54:84:40:53:e4:9c:87:cb:ad:08:b1:76:99:
         75:95:aa:9a:e7:ec:0f:a5:8d:79:9a:9f:f6:e4:c5:b5:c2:45:
         1c:a3:55:73:ca:51:ee:a3:8b:40:06:5e:d7:35:9f:d1:95:fc:
         aa:c2:37:48:f8:37:c8:fb:17:fe:09:8f:d7:63:24:a8:ec:d1:
         ef:ea:79:d8:74:a3:9e:75:02:10:a2:e2:78:6b:56:c3:3b:a6:
         f6:1b:20:3a:e7:d0:78:f3:2b:a3:fa:ff:87:ff:61:d6:ce:86:
         8c:9d:19:54:84:a9:7a:dc:cc:85:79:95:1f:8f:30:a3:c3:be:
         80:00:4c:5f:0b:c6:48:a2:8b:19:98:60:c1:a5:a4:15:ab:05:
         5d:a7:4e:e9:a1:66:eb:c8:5a:25:1b:63:da:f0:4d:e8:17:06:
         b4:76:08:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+avxM2dIxORbzcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhZGE4ZjUtNmJlMy00YTlmLTlhMmMtMWUxYWEwZTM3
NTk2MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk
NTQ0NTBiYTMtMmI5OC00NThlLWEzMmYtOGU4MmEwNzlmMzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaFgLjdVpMXPKNfoMN5YZnITfuIoeFwGfLcW
v+UH0Eo16PnunsZUNYK7TiHKXb4psNqPeKS1yUtsoGlSKHy3XGZViVO9l+vSBUye
z7pQkSkOvOrEgj/Q1UfZH21IwO9GbWefTghYd2TIV1TnMWKdqvJI2Y/ZJWF01wne
2PZdXuGbFix7b+H86PRDN2Mb36tAoZvE3xaQZO8jqC0LjhfXiSzxKGrwakYuE/56
dsrTvak0zCTMr+6nQ8a/6qz/A87QoMIbsd1TculbN5yAn2xwmtL0Jfgpo6QL7ddg
bgMHd8PYIU7SG14vvF9BHRw35+xPMOhAHfsIiOKc8SYnQQkzcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMschLXLNK0VpIwvePICc+IS9Xy9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFk
YThmNS02YmUzLTRhOWYtOWEyYy0xZTFhYTBlMzc1OTYvYmQxYTBiYzktOGE1My0z
ZTUxLTkxOGItM2YxNDc5Yzc2Mzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZhZGE4ZjUtNmJlMy00YTlmLTlh
MmMtMWUxYWEwZTM3NTk2L2U2YWRhOGY1LTZiZTMtNGE5Zi05YTJjLTFlMWFhMGUz
NzU5Ni5jcmwwHwYDVR0jBBgwFoAU7UtG3BZ/kJdyk1+1d0FQ/ZJcw20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFkYThmNS02YmUzLTRhOWYtOWEyYy0xZTFh
YTBlMzc1OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4rrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDCXfsUcitj6jVdt9W6pT4OXwdtyael+bs5JzESRnHK7ocCkshgIBlh
8vdoSUlkfVilpP2yKkHyQRb5aARwdaHQ9tZPxkM3jkPkRIxg3uNh6C70BSneQI+o
whoDDtG8VIRAU+Sch8utCLF2mXWVqprn7A+ljXman/bkxbXCRRyjVXPKUe6ji0AG
Xtc1n9GV/KrCN0j4N8j7F/4Jj9djJKjs0e/qedh0o551AhCi4nhrVsM7pvYbIDrn
0HjzK6P6/4f/YdbOhoydGVSEqXrczIV5lR+PMKPDvoAATF8LxkiiixmYYMGlpBWr
BV2nTumhZuvIWiUbY9rwTegXBrR2CPU=
-----END CERTIFICATE-----
Generated at Wed May 13 09:05:04 2026 by rpki-client