Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/350a606d-940e-30c5-834b-195460eb8f61.roa
File:                     350a606d-940e-30c5-834b-195460eb8f61.roa (raw, json)
Hash identifier:          i7vFGl8jh0nTNoouUGVHDYf6CyUK3Gy0Tzfj+7ktrZQ=
Subject key identifier:   D6:97:51:FB:5D:D9:98:56:5D:BF:3B:85:5C:05:D4:9F:45:65:22:39
Certificate issuer:       /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd
Certificate serial:       010D0C9F4328584E6F3A224CA6D2FD703E3A9E20
Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/350a606d-940e-30c5-834b-195460eb8f61.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        141.193.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:22:4c:a6:d2:fd:70:3e:3a:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8e4f3d53-3e02-45db-93d0-6fd573d7c392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:45:8a:7e:c1:da:db:2d:6c:fa:f2:a4:7d:
                    82:d2:c7:20:97:1a:9f:1b:40:0b:50:a1:07:89:d2:
                    05:5d:af:26:96:c2:e6:54:52:06:3b:e9:4f:e4:a0:
                    11:5b:71:18:9e:97:b6:7f:b7:7f:d4:68:88:7f:0a:
                    43:78:a0:82:e6:73:bc:5f:4e:c4:6b:39:2e:19:ad:
                    a6:40:f1:36:ff:92:a9:74:4e:40:08:43:89:93:81:
                    30:b8:a9:5b:15:22:08:80:2f:3a:c1:e6:0b:69:00:
                    79:60:0b:6c:b9:66:e8:f1:7b:39:02:60:eb:19:44:
                    b7:7d:80:73:7e:ff:93:1a:99:80:a2:2f:c0:f3:fd:
                    91:ed:3b:ac:45:85:6f:91:3e:d7:33:eb:1f:d7:cc:
                    fa:51:3e:1a:fe:e3:1d:27:0e:fd:07:4e:41:aa:20:
                    df:2c:41:5e:dd:1d:11:73:34:90:44:54:e8:7e:51:
                    60:90:e5:5c:28:2d:00:90:d3:76:4d:75:17:d5:3a:
                    f9:af:e2:65:fe:62:63:f8:7f:73:88:ca:c7:09:63:
                    e7:4f:c8:8d:59:5f:a7:23:a3:6b:ec:5e:4a:be:90:
                    33:b3:2e:33:b7:ae:34:65:8c:07:06:fc:9a:30:cf:
                    6f:31:03:df:f4:4b:67:c8:3c:81:74:88:3e:db:83:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:51:FB:5D:D9:98:56:5D:BF:3B:85:5C:05:D4:9F:45:65:22:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/350a606d-940e-30c5-834b-195460eb8f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl

            X509v3 Authority Key Identifier:
                keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:4f:15:c7:61:4b:be:61:c1:10:36:ea:0c:56:25:3a:06:
         15:ac:19:26:71:3c:1b:4a:9e:e2:09:5f:0c:59:70:8e:99:82:
         16:9f:76:34:2a:4f:41:96:9a:3f:58:98:f7:b9:6b:60:11:c0:
         ba:59:39:64:88:37:7b:30:14:27:a2:18:fe:97:1c:68:8d:6a:
         56:c5:5f:94:a3:88:75:5c:07:64:c3:f7:80:cb:0e:f2:da:c7:
         ac:0d:de:02:c5:d1:3c:53:35:45:a6:db:05:e4:32:ea:24:85:
         a4:e5:d0:d6:b1:94:f8:37:e9:05:c5:ff:a6:ba:28:d8:05:62:
         2a:03:18:4a:20:aa:f1:42:fc:0f:10:ec:37:e2:7e:c3:66:57:
         ca:7a:db:82:b4:bf:8b:2c:09:9d:b6:7c:69:dd:5c:ef:75:47:
         59:3f:79:9b:54:97:8c:6d:77:7d:66:71:67:9d:ea:b9:61:ca:
         a5:b0:e6:63:2a:c3:70:e7:a6:91:d4:f5:cd:00:79:9d:fe:9f:
         c2:dc:d3:26:9f:b6:4f:8b:3d:48:a6:d0:9e:e6:ab:78:e0:a8:
         58:6d:f9:59:e6:95:d7:b2:07:59:1e:9e:37:97:39:ab:5f:2c:
         ea:1b:fd:f5:14:20:cb:42:5a:28:77:23:7d:9f:c5:d9:50:39:
         54:1f:06:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOiJMptL9cD46niAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl
OWRkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
OGU0ZjNkNTMtM2UwMi00NWRiLTkzZDAtNmZkNTczZDdjMzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYFFin7B2tstbPrypH2C0scglxqfG0ALUKEH
idIFXa8mlsLmVFIGO+lP5KARW3EYnpe2f7d/1GiIfwpDeKCC5nO8X07EazkuGa2m
QPE2/5KpdE5ACEOJk4EwuKlbFSIIgC86weYLaQB5YAtsuWbo8Xs5AmDrGUS3fYBz
fv+TGpmAoi/A8/2R7TusRYVvkT7XM+sf18z6UT4a/uMdJw79B05BqiDfLEFe3R0R
czSQRFToflFgkOVcKC0AkNN2TXUX1Tr5r+Jl/mJj+H9ziMrHCWPnT8iNWV+nI6Nr
7F5KvpAzsy4zt640ZYwHBvyaMM9vMQPf9EtnyDyBdIg+24P7EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNaXUftd2ZhWXb87hVwF1J9FZSI5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh
OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvMzUwYTYwNmQtOTQwZS0z
MGM1LTgzNGItMTk1NDYwZWI4ZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3
MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm
ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3
OTJiZmU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjcHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpmTxXHYUu+YcEQNuoMViU6BhWsGSZxPBtKnuIJXwxZcI6ZghafdjQq
T0GWmj9YmPe5a2ARwLpZOWSIN3swFCeiGP6XHGiNalbFX5SjiHVcB2TD94DLDvLa
x6wN3gLF0TxTNUWm2wXkMuokhaTl0NaxlPg36QXF/6a6KNgFYioDGEogqvFC/A8Q
7DfifsNmV8p624K0v4ssCZ22fGndXO91R1k/eZtUl4xtd31mcWed6rlhyqWw5mMq
w3DnppHU9c0AeZ3+n8Lc0yaftk+LPUim0J7mq3jgqFht+VnmldeyB1kenjeXOatf
LOob/fUUIMtCWih3I32fxdlQOVQfBrU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:46:36 2026 by rpki-client