Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0f0b1cbc-c31f-3910-89a1-df5e5beda768.roa
File:                     0f0b1cbc-c31f-3910-89a1-df5e5beda768.roa (raw, json)
Hash identifier:          T8zKvd7dOJKFIaXgCtJqtI9gV+ZOejlyaK0xZ30YfvU=
Subject key identifier:   24:72:D5:9E:14:62:07:70:AB:C7:17:CF:6E:0E:79:08:06:CA:10:7B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584DCAFAF0B4855BC5E32CC66D40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0f0b1cbc-c31f-3910-89a1-df5e5beda768.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     53338
IP address blocks:        216.191.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f0:b4:85:5b:c5:e3:2c:c6:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=3dc41166-3960-40a2-9664-c2f6d67b4974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:f9:0f:17:05:9b:16:88:4d:33:2e:27:b0:
                    25:53:4c:b3:4b:17:01:13:73:15:a1:8e:6d:60:3b:
                    ee:4f:59:d4:f4:b5:a0:f9:25:f2:8d:80:ee:f2:9b:
                    95:e0:f1:5f:80:b3:4f:19:5c:50:a7:f6:fe:6f:e1:
                    f7:86:e9:37:7f:a0:e4:3d:b7:55:db:43:44:c9:11:
                    69:57:d8:66:ec:f2:2a:f1:85:83:7a:c7:d0:b0:ab:
                    36:4f:30:48:5c:59:50:c3:2b:09:ae:04:a4:84:40:
                    a9:36:90:fe:fa:28:e0:00:92:d6:87:6a:d7:5b:aa:
                    6b:e8:f3:71:15:e0:db:ab:1f:ed:68:ae:60:22:0e:
                    1f:5a:e0:e7:d8:7f:55:c1:a9:12:2b:cc:82:87:c8:
                    fc:66:af:f1:1d:4e:51:fe:1c:4b:6a:12:4c:9b:60:
                    74:d6:c2:29:be:d7:bc:6d:8f:b9:30:74:f9:80:91:
                    f4:97:78:7f:08:a6:d2:03:14:a4:34:fe:02:1a:29:
                    19:dd:9f:66:df:f8:99:d1:ae:e9:4b:81:5a:86:ad:
                    d4:7c:ba:db:12:43:35:e9:52:48:dd:ea:f5:c0:34:
                    a5:a5:9f:a7:95:41:b7:fb:59:82:40:cc:51:4f:e2:
                    17:1a:0c:5a:0f:a9:6e:c6:96:b6:5a:1b:ab:ab:87:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:72:D5:9E:14:62:07:70:AB:C7:17:CF:6E:0E:79:08:06:CA:10:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0f0b1cbc-c31f-3910-89a1-df5e5beda768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:34:d5:a3:e8:96:4c:b3:4c:a3:7c:1a:4d:ef:c6:5d:bb:fe:
         0d:23:c8:ea:e6:3f:45:9e:0c:3c:ad:f3:b0:c8:bc:6b:0d:67:
         ee:c0:2a:80:04:c3:7a:d8:2c:10:66:14:19:49:f5:cd:31:3c:
         f5:3b:da:7f:f8:cd:11:8d:4c:a6:e4:0d:8c:3f:49:36:24:85:
         96:36:58:c6:fa:67:81:f9:56:01:20:20:6a:39:e6:67:9e:be:
         d2:ee:28:9f:23:8e:31:47:96:d3:31:0e:81:a7:e1:c9:30:4b:
         67:40:da:83:18:ec:0e:d4:bf:02:78:43:8f:33:6e:fc:3a:98:
         89:b8:36:4c:ef:62:35:30:58:2e:71:27:48:d9:2e:d4:a7:9d:
         3e:da:18:be:f6:ed:ef:c0:22:7d:e8:3c:6a:21:ca:fc:29:65:
         1e:db:25:dd:2c:f2:97:35:52:2b:0f:fe:3d:3a:18:cc:3b:86:
         af:b6:0f:4e:ee:15:4b:7e:dc:97:f2:30:23:b0:e3:63:54:05:
         10:64:bf:4f:f0:0d:8f:5c:50:2c:74:74:55:1f:a1:45:bc:a7:
         9d:29:c4:0a:5e:69:e9:e9:27:78:01:1c:68:17:b6:25:c3:7a:
         95:e0:2b:e6:24:2a:21:f0:4e:7e:fb:55:67:c2:b5:6e:08:22:
         f0:31:aa:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vC0hVvF4yzGbUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
M2RjNDExNjYtMzk2MC00MGEyLTk2NjQtYzJmNmQ2N2I0OTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lr5DxcFmxaITTMuJ7AlU0yzSxcBE3MVoY5t
YDvuT1nU9LWg+SXyjYDu8puV4PFfgLNPGVxQp/b+b+H3huk3f6DkPbdV20NEyRFp
V9hm7PIq8YWDesfQsKs2TzBIXFlQwysJrgSkhECpNpD++ijgAJLWh2rXW6pr6PNx
FeDbqx/taK5gIg4fWuDn2H9VwakSK8yCh8j8Zq/xHU5R/hxLahJMm2B01sIpvte8
bY+5MHT5gJH0l3h/CKbSAxSkNP4CGikZ3Z9m3/iZ0a7pS4Fahq3UfLrbEkM16VJI
3er1wDSlpZ+nlUG3+1mCQMxRT+IXGgxaD6luxpa2Whurq4e5OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRy1Z4UYgdwq8cXz24OeQgGyhB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMGYwYjFjYmMtYzMxZi0z
OTEwLTg5YTEtZGY1ZTViZWRhNzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L8VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK801aPolkyzTKN8Gk3vxl27/g0jyOrmP0WeDDyt87DIvGsNZ+7AKoAE
w3rYLBBmFBlJ9c0xPPU72n/4zRGNTKbkDYw/STYkhZY2WMb6Z4H5VgEgIGo55mee
vtLuKJ8jjjFHltMxDoGn4ckwS2dA2oMY7A7UvwJ4Q48zbvw6mIm4NkzvYjUwWC5x
J0jZLtSnnT7aGL727e/AIn3oPGohyvwpZR7bJd0s8pc1UisP/j06GMw7hq+2D07u
FUt+3JfyMCOw42NUBRBkv0/wDY9cUCx0dFUfoUW8p50pxApeaenpJ3gBHGgXtiXD
epXgK+YkKiHwTn77VWfCtW4IIvAxqh4=
-----END CERTIFICATE-----
Generated at Wed May 13 05:08:15 2026 by rpki-client