Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e7c15b5e-702d-38ab-aae4-f403d6989951.roa
File:                     e7c15b5e-702d-38ab-aae4-f403d6989951.roa (raw, json)
Hash identifier:          gE5xJRh/XNkVEDjuAswtphB4upBlFwL1nbcEWefPOpI=
Subject key identifier:   97:30:3C:BB:FF:CF:9F:97:8F:06:0C:1C:B0:51:26:07:02:27:CB:46
Certificate issuer:       /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial:       010D0C9F4328584F4976B233AC4135EE5CB35F40
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e7c15b5e-702d-38ab-aae4-f403d6989951.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        138.133.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:b2:33:ac:41:35:ee:5c:b3:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=621ed39d-ec1a-4f0e-85bd-65d7359200a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:0b:ec:af:33:8b:90:19:aa:39:ce:36:24:
                    63:6b:cf:40:b8:c4:2c:3e:b3:ac:4c:6b:3b:a9:35:
                    57:2c:e7:47:4d:17:94:38:7b:41:75:d6:27:bf:a2:
                    fb:ad:3b:76:dc:f1:ce:4f:33:e3:ba:f5:b0:79:8f:
                    b8:60:41:68:c6:da:11:d5:60:7e:95:07:7c:19:fe:
                    3a:58:87:17:b7:e8:cf:0e:9f:1c:81:46:75:d1:d3:
                    93:7d:34:e7:7e:3f:2d:41:07:81:fe:a4:e2:b9:08:
                    d4:2e:71:b2:c7:bd:a9:e9:09:10:96:25:0b:a8:21:
                    4f:94:19:6f:b7:1a:a3:43:51:c4:1b:1e:92:06:48:
                    43:4c:2b:62:59:d5:54:7d:51:81:21:7a:87:49:b3:
                    2b:69:e6:cf:7a:9c:40:80:18:63:1d:b4:b1:b5:f5:
                    93:22:7a:3b:db:32:a8:71:9f:78:02:be:a6:d3:c3:
                    09:bd:30:d5:31:d4:2e:f1:2f:22:fb:c1:c0:9c:34:
                    ff:d1:b2:a9:dd:06:e2:8d:d4:c8:aa:a4:95:ea:45:
                    ce:d3:d5:1c:3b:dc:7d:40:e9:86:9d:54:11:25:5f:
                    d0:4e:5a:79:c5:09:ae:01:61:b7:43:d1:9a:8f:38:
                    8e:26:dc:ad:bc:3e:e2:46:bb:ea:f8:d4:bb:19:1d:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:3C:BB:FF:CF:9F:97:8F:06:0C:1C:B0:51:26:07:02:27:CB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e7c15b5e-702d-38ab-aae4-f403d6989951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl

            X509v3 Authority Key Identifier:
                keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:5f:a1:5d:33:a8:55:a3:80:fc:93:98:e2:d7:a0:50:cc:
         56:84:00:6e:d3:a6:21:d9:85:aa:1c:5b:40:af:25:34:d6:99:
         82:1c:5b:09:80:e1:7b:a0:5b:4c:7c:e5:9c:87:0d:df:e3:29:
         ef:b0:64:6c:bd:ca:af:a7:31:39:28:92:46:8b:50:c2:e4:2e:
         91:b7:7d:b2:de:f1:a1:ac:08:7a:2a:80:e9:f5:94:f5:3d:03:
         4d:60:5a:53:41:7a:d4:76:b7:02:a0:41:74:5d:3a:6e:9c:9d:
         2f:49:0e:be:8f:38:ef:3b:a9:27:c3:10:2c:e4:e1:f2:51:b0:
         b7:d3:a6:24:4e:7b:94:ba:35:64:88:7b:37:34:79:3e:85:3f:
         76:cf:5f:44:66:cf:49:87:0d:17:49:3c:00:af:3a:0a:de:0c:
         85:f0:bf:c0:2c:26:a2:60:ba:3d:c0:48:e1:53:72:36:a6:72:
         7f:4e:6d:33:f9:97:77:6e:d9:0e:1c:34:02:ac:05:09:01:4a:
         65:6c:37:36:9e:58:35:77:8b:a2:dd:eb:4a:3d:f6:27:85:25:
         7a:9e:ed:f0:de:10:7b:70:51:9a:c3:53:e8:2a:2f:5d:62:80:
         e4:d8:0b:3e:2f:8b:68:2d:cc:7f:63:ba:56:2f:f7:74:58:9f:
         35:56:92:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdrIzrEE17lyzX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBjZGFjMzgtNjY4MS00YjA5LWI5OTItMzFkMjAzMGI4
Nzk2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjIxZWQzOWQtZWMxYS00ZjBlLTg1YmQtNjVkNzM1OTIwMGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxkL7K8zi5AZqjnONiRja89AuMQsPrOsTGs7
qTVXLOdHTReUOHtBddYnv6L7rTt23PHOTzPjuvWweY+4YEFoxtoR1WB+lQd8Gf46
WIcXt+jPDp8cgUZ10dOTfTTnfj8tQQeB/qTiuQjULnGyx72p6QkQliULqCFPlBlv
txqjQ1HEGx6SBkhDTCtiWdVUfVGBIXqHSbMraebPepxAgBhjHbSxtfWTIno72zKo
cZ94Ar6m08MJvTDVMdQu8S8i+8HAnDT/0bKp3QbijdTIqqSV6kXO09UcO9x9QOmG
nVQRJV/QTlp5xQmuAWG3Q9GajziOJtytvD7iRrvq+NS7GR0SYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJcwPLv/z5+XjwYMHLBRJgcCJ8tGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGNk
YWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMwYjg3OTYvZTdjMTViNWUtNzAyZC0z
OGFiLWFhZTQtZjQwM2Q2OTg5OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBjZGFjMzgtNjY4MS00YjA5LWI5
OTItMzFkMjAzMGI4Nzk2L2UwY2RhYzM4LTY2ODEtNGIwOS1iOTkyLTMxZDIwMzBi
ODc5Ni5jcmwwHwYDVR0jBBgwFoAUrlCk86BeuGcsAzm4yau8K2sXNDkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lMGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQy
MDMwYjg3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioWpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJIuX6FdM6hVo4D8k5ji16BQzFaEAG7TpiHZhaocW0CvJTTWmYIcWwmA
4XugW0x85ZyHDd/jKe+wZGy9yq+nMTkokkaLUMLkLpG3fbLe8aGsCHoqgOn1lPU9
A01gWlNBetR2twKgQXRdOm6cnS9JDr6POO87qSfDECzk4fJRsLfTpiROe5S6NWSI
ezc0eT6FP3bPX0Rmz0mHDRdJPACvOgreDIXwv8AsJqJguj3ASOFTcjamcn9ObTP5
l3du2Q4cNAKsBQkBSmVsNzaeWDV3i6Ld60o99ieFJXqe7fDeEHtwUZrDU+gqL11i
gOTYCz4vi2gtzH9julYv93RYnzVWknc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:40:11 2026 by rpki-client