Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/389145a8-b9f3-3b5e-9649-55f0c8917e42.roa
File:                     389145a8-b9f3-3b5e-9649-55f0c8917e42.roa (raw, json)
Hash identifier:          oaulxFg7ctmEO9Ohr3J69BmHbycrMbDz9QneoUlP+/k=
Subject key identifier:   33:84:6A:44:0F:2F:BB:D5:8B:B8:1E:F2:F6:C9:17:3A:C8:17:D4:5A
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584DC40044951E1D2795483DD8C0
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/389145a8-b9f3-3b5e-9649-55f0c8917e42.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     396998
IP address blocks:        172.111.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:44:95:1e:1d:27:95:48:3d:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=c8daa12d-38f4-49a2-a4ac-663dd1ebbfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:1a:10:6f:0c:d7:fc:44:72:47:93:bb:c9:
                    19:25:ce:44:28:15:94:c5:a2:81:d2:48:38:78:60:
                    97:15:4a:b2:5f:ec:ad:58:d9:d9:c5:41:af:cd:90:
                    ed:f0:2d:b9:42:1a:d7:c0:6c:f0:67:57:60:d9:1c:
                    9d:b8:7c:5c:0c:26:62:4c:fc:11:cd:45:28:f4:2a:
                    d4:33:54:1e:a9:50:5c:e7:08:ea:e5:9d:9d:7f:65:
                    af:d7:4d:c1:a3:84:10:87:48:2f:a6:18:f5:36:5b:
                    11:12:66:aa:8f:dd:6d:c6:f8:b2:74:51:7a:1b:39:
                    fb:05:f2:8d:82:af:bb:3e:b3:73:44:98:3f:2c:c4:
                    b5:b3:8b:f1:6b:6d:39:c0:85:ef:7f:84:28:51:10:
                    47:e6:84:ae:8b:37:5a:88:51:07:ee:f7:2a:4e:b7:
                    c5:b2:51:33:be:5a:8b:99:2e:21:6d:c9:8d:61:af:
                    43:ec:27:18:b4:95:07:9b:1c:18:ca:f9:24:5b:5c:
                    90:56:a5:83:be:86:40:7b:6f:78:55:60:a9:4c:b7:
                    ee:a6:50:62:91:d1:e7:72:9d:1c:44:05:a2:5d:f6:
                    91:8a:a0:47:69:c2:45:21:a1:97:8e:37:37:6c:a7:
                    77:95:46:5d:0b:61:0b:59:80:a6:77:37:cb:2f:c4:
                    15:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:6A:44:0F:2F:BB:D5:8B:B8:1E:F2:F6:C9:17:3A:C8:17:D4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/389145a8-b9f3-3b5e-9649-55f0c8917e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:80:3d:55:80:ec:8d:e9:89:f4:39:1e:ae:5e:e3:46:28:
         bc:26:1d:68:6f:03:8e:56:21:94:85:a6:6b:c9:0c:40:c4:ac:
         a6:ce:0c:b3:aa:6d:8c:41:ac:92:34:5a:6e:84:dc:5b:b4:2b:
         70:3a:ff:76:da:9b:f0:47:9d:b8:09:3e:85:34:69:df:12:bb:
         a5:c2:22:2c:44:49:e6:17:dc:9e:66:cc:6b:d7:1d:1b:2e:fb:
         4a:b1:e4:b4:db:c2:0b:ba:76:64:71:3b:ce:5f:41:f0:61:77:
         f0:3f:9a:6b:17:73:40:aa:55:fd:5f:a7:6a:0a:1e:d1:e9:34:
         84:5e:9a:e5:78:e6:fc:af:92:4a:10:d6:9b:e8:84:4d:43:83:
         ef:5c:18:dd:a0:4f:0b:8e:66:72:74:f2:bc:fc:82:36:60:66:
         03:78:87:c6:f9:ce:a4:de:3c:f6:c9:97:9c:b9:82:29:c4:ec:
         21:a4:fc:8a:28:0a:31:97:e6:b8:26:21:93:ab:dd:42:f3:20:
         8b:4c:6b:90:26:3a:ff:3a:71:c4:53:9d:e1:dc:00:ce:c9:9d:
         60:a6:80:50:b2:23:8b:be:f2:e1:17:82:1f:2f:3f:e6:61:53:
         83:d7:44:aa:07:4c:30:50:62:78:2a:a8:14:56:57:6d:59:96:
         d0:ed:1d:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3EAESVHh0nlUg92MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk
YzhkYWExMmQtMzhmNC00OWEyLWE0YWMtNjYzZGQxZWJiZmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshYaEG8M1/xEckeTu8kZJc5EKBWUxaKB0kg4
eGCXFUqyX+ytWNnZxUGvzZDt8C25QhrXwGzwZ1dg2RyduHxcDCZiTPwRzUUo9CrU
M1QeqVBc5wjq5Z2df2Wv103Bo4QQh0gvphj1NlsREmaqj91txviydFF6Gzn7BfKN
gq+7PrNzRJg/LMS1s4vxa205wIXvf4QoURBH5oSuizdaiFEH7vcqTrfFslEzvlqL
mS4hbcmNYa9D7CcYtJUHmxwYyvkkW1yQVqWDvoZAe294VWCpTLfuplBikdHncp0c
RAWiXfaRiqBHacJFIaGXjjc3bKd3lUZdC2ELWYCmdzfLL8QV6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOEakQPL7vVi7ge8vbJFzrIF9RaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMzg5MTQ1YTgtYjlmMy0z
YjVlLTk2NDktNTVmMGM4OTE3ZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7jgD1VgOyN6Yn0OR6uXuNGKLwmHWhvA45WIZSFpmvJDEDErKbODLOq
bYxBrJI0Wm6E3Fu0K3A6/3bam/BHnbgJPoU0ad8Su6XCIixESeYX3J5mzGvXHRsu
+0qx5LTbwgu6dmRxO85fQfBhd/A/mmsXc0CqVf1fp2oKHtHpNIRemuV45vyvkkoQ
1pvohE1Dg+9cGN2gTwuOZnJ08rz8gjZgZgN4h8b5zqTePPbJl5y5ginE7CGk/Ioo
CjGX5rgmIZOr3ULzIItMa5AmOv86ccRTneHcAM7JnWCmgFCyI4u+8uEXgh8vP+Zh
U4PXRKoHTDBQYngqqBRWV21ZltDtHcU=
-----END CERTIFICATE-----
Generated at Wed May 13 12:29:52 2026 by rpki-client