Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f682982f-95dd-3510-9ccb-847695c6ea56.roa
File:                     f682982f-95dd-3510-9ccb-847695c6ea56.roa (raw, json)
Hash identifier:          +Oal7bhJmICZDGY/KpWJ4wGyDA4mdqMGifOiqbbsylk=
Subject key identifier:   6D:A5:99:64:F6:E0:72:36:F4:32:B8:81:90:58:DD:6B:39:D0:34:79
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584DCAFB1B8F8DD555D94C1EE3C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f682982f-95dd-3510-9ccb-847695c6ea56.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     14114
IP address blocks:        157.133.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1b:8f:8d:d5:55:d9:4c:1e:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=f096c64a-f343-43a9-a09f-16eb4eb8da6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:56:74:df:75:73:cb:c0:71:90:74:44:01:
                    b4:ad:63:06:c7:05:bb:98:8b:5f:35:42:6e:67:d2:
                    fe:d1:bb:24:05:5c:9e:bf:fd:09:51:13:cd:ca:5f:
                    54:c9:67:b4:89:e6:cf:d8:de:a6:bb:9c:80:90:62:
                    bc:85:39:87:21:c8:f1:ef:fe:bf:bb:3f:c9:ab:5b:
                    7e:9a:d5:dc:6c:91:b0:bb:3d:3a:6f:d4:28:c0:20:
                    37:77:65:04:ea:b2:6e:74:d6:82:64:ea:8f:4e:ea:
                    7b:76:54:1a:f0:d9:19:88:0c:66:5d:b8:78:33:c0:
                    b2:73:89:99:e6:e8:f4:c9:8c:10:f2:dd:4a:da:70:
                    d6:3a:57:e1:13:c6:e1:cb:2b:24:ed:04:47:d9:34:
                    2c:d6:27:79:5b:d6:b5:a0:30:c8:47:23:eb:4f:02:
                    74:74:77:73:b3:62:80:31:ce:96:6e:41:ba:ee:bd:
                    ca:51:1e:39:57:ff:2a:68:61:8c:42:97:02:92:c6:
                    72:d9:4f:b9:b6:52:05:66:8d:69:c9:6b:9d:3a:db:
                    43:bd:77:e2:f9:22:9a:f0:ee:30:3d:ff:bf:7e:58:
                    89:bf:b3:3b:9f:dd:4d:88:e5:01:35:15:f8:a5:84:
                    da:0d:25:c0:18:03:04:83:90:e8:8a:1b:19:d6:aa:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:99:64:F6:E0:72:36:F4:32:B8:81:90:58:DD:6B:39:D0:34:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f682982f-95dd-3510-9ccb-847695c6ea56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:58:2d:69:69:98:0c:5e:27:fd:11:ee:bf:83:05:0f:40:f3:
         12:a1:f8:9a:d2:57:24:67:59:25:1c:d2:8d:7f:56:31:76:42:
         b9:42:36:37:ae:4b:7e:b6:f5:33:e8:e0:af:78:66:e6:9d:db:
         ee:42:a9:b5:f0:4f:70:05:2c:83:9e:58:2d:2e:e9:cc:9d:ba:
         8e:a2:e4:dd:cc:28:a8:90:02:09:a0:86:4d:38:ca:07:f3:cb:
         84:36:24:51:64:3a:7c:93:f3:e3:78:7e:9a:95:9b:d4:5c:df:
         66:ae:02:cd:a7:3f:29:ab:94:72:41:a9:93:e5:41:a2:9d:e6:
         1f:68:2d:26:11:50:73:3d:a9:54:63:ce:97:20:d5:60:21:50:
         22:05:1b:1d:bf:99:66:c6:06:87:ad:7c:de:30:15:6a:d5:d9:
         db:de:23:a2:9b:b8:0f:95:f3:fe:03:f7:6a:a8:a6:ed:cd:aa:
         c2:eb:ee:4f:2b:60:03:5a:72:58:3c:e3:6d:e5:72:ea:49:cc:
         64:63:11:3a:12:fb:73:44:19:dd:30:d9:a6:e0:5d:24:04:ba:
         bc:41:a0:14:4e:0b:48:a4:99:19:bc:6d:09:d8:18:c8:27:dd:
         db:95:2f:3c:c1:a4:79:c1:c5:09:8e:f3:12:a4:a4:3c:f9:95:
         cd:d8:c8:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xuPjdVV2Uwe48AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZjA5NmM2NGEtZjM0My00M2E5LWEwOWYtMTZlYjRlYjhkYTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+pWdN91c8vAcZB0RAG0rWMGxwW7mItfNUJu
Z9L+0bskBVyev/0JURPNyl9UyWe0iebP2N6mu5yAkGK8hTmHIcjx7/6/uz/Jq1t+
mtXcbJGwuz06b9QowCA3d2UE6rJudNaCZOqPTup7dlQa8NkZiAxmXbh4M8Cyc4mZ
5uj0yYwQ8t1K2nDWOlfhE8bhyysk7QRH2TQs1id5W9a1oDDIRyPrTwJ0dHdzs2KA
Mc6WbkG67r3KUR45V/8qaGGMQpcCksZy2U+5tlIFZo1pyWudOttDvXfi+SKa8O4w
Pf+/fliJv7M7n91NiOUBNRX4pYTaDSXAGAMEg5DoihsZ1qolIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2lmWT24HI29DK4gZBY3Ws50DR5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZjY4Mjk4MmYtOTVkZC0z
NTEwLTljY2ItODQ3Njk1YzZlYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYVoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEhYLWlpmAxeJ/0R7r+DBQ9A8xKh+JrSVyRnWSUc0o1/VjF2QrlCNjeu
S3629TPo4K94Zuad2+5CqbXwT3AFLIOeWC0u6cyduo6i5N3MKKiQAgmghk04ygfz
y4Q2JFFkOnyT8+N4fpqVm9Rc32auAs2nPymrlHJBqZPlQaKd5h9oLSYRUHM9qVRj
zpcg1WAhUCIFGx2/mWbGBoetfN4wFWrV2dveI6KbuA+V8/4D92qopu3NqsLr7k8r
YANaclg8423lcupJzGRjEToS+3NEGd0w2abgXSQEurxBoBROC0ikmRm8bQnYGMgn
3duVLzzBpHnBxQmO8xKkpDz5lc3YyCs=
-----END CERTIFICATE-----
Generated at Wed May 13 10:28:25 2026 by rpki-client