Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a1a53dd1-a9de-3718-8769-e5bb370676e2.roa
File:                     a1a53dd1-a9de-3718-8769-e5bb370676e2.roa (raw, json)
Hash identifier:          3uLtfE4mRfNmSDGq2pvw0q96RN/fXRTVn3h4NMahK7g=
Subject key identifier:   24:CC:F0:F1:5C:0E:1D:2E:7C:9F:F9:EB:DE:E6:02:4D:F7:3B:8B:06
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584DC29AEC982449842CCA3910C0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a1a53dd1-a9de-3718-8769-e5bb370676e2.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     10430
IP address blocks:        192.206.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ec:98:24:49:84:2c:ca:39:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=855d0bd6-221c-4d72-8f14-08b05fa02fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:b1:a5:d9:36:4a:f4:f9:77:f5:52:8d:81:
                    9c:d2:d6:a4:28:b3:7d:46:19:b5:5b:4f:5d:de:2c:
                    8a:64:36:6f:6b:bf:7b:60:cf:90:2d:a6:20:3f:c9:
                    fc:4b:3d:5a:5a:55:6e:24:7c:8f:85:02:d4:68:26:
                    47:66:17:2b:51:b2:b8:aa:9a:21:2b:5e:1f:5b:37:
                    be:17:3a:c9:82:f5:55:e6:cc:11:96:d7:fd:88:be:
                    5e:22:d9:d3:4d:91:49:ec:aa:50:47:5e:84:95:e4:
                    47:c2:40:6e:8f:22:54:14:9e:26:79:5d:c1:b2:e2:
                    d1:87:a4:36:71:f6:d8:af:d1:a3:c9:96:bf:27:4d:
                    ee:aa:bf:e2:65:61:23:dd:c0:37:5e:bc:c9:8a:36:
                    2b:f2:29:d7:de:b4:fe:24:9b:36:cc:57:e6:df:24:
                    ae:20:11:56:ff:bf:8c:d7:db:56:1d:f9:2c:25:23:
                    b6:b8:59:ff:a2:96:43:9c:8e:02:c0:19:45:79:12:
                    6a:a8:78:38:37:fd:b7:ba:b0:d7:2f:ca:6d:47:86:
                    33:93:96:a7:47:78:e0:8a:e0:47:30:c1:b4:62:d6:
                    be:09:6e:05:37:97:ff:dd:f2:ac:96:cc:cd:9a:2c:
                    aa:43:54:d0:ff:7a:71:ee:3b:07:ef:a6:5b:87:d0:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:F0:F1:5C:0E:1D:2E:7C:9F:F9:EB:DE:E6:02:4D:F7:3B:8B:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a1a53dd1-a9de-3718-8769-e5bb370676e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:37:e8:13:04:a2:65:30:05:14:48:7c:9a:7d:4f:ea:d2:
         ba:b3:ab:ad:ab:17:b6:9e:2a:a6:d7:a2:13:4e:ba:37:d3:f0:
         de:b1:8c:d5:94:6b:89:74:f6:e9:93:f0:29:f0:48:c4:c0:41:
         6e:b7:c3:0e:52:9d:81:0a:6b:44:d8:94:60:a6:48:c1:81:c8:
         05:06:07:30:cc:98:2b:8b:8a:27:d8:77:00:cd:3d:48:6d:80:
         3c:d4:59:09:f5:fa:1a:06:20:5b:42:91:01:29:4b:02:22:6d:
         87:84:84:55:8a:0b:2f:a5:6b:9b:e4:5f:02:c9:42:1c:c3:35:
         46:ec:6f:06:b3:19:f7:eb:43:07:33:36:64:9e:f9:5f:6f:71:
         e1:d9:c8:c6:5d:c5:9e:74:d1:18:04:f5:39:a0:79:45:f5:63:
         26:aa:bf:bb:0c:60:75:1b:24:8d:a3:0c:c6:dc:a0:4f:83:4f:
         62:95:cb:cc:ba:9e:8f:a7:b1:2b:45:b9:a9:b0:63:fb:d5:1e:
         ce:9b:31:38:0a:8f:10:27:d5:d1:b5:bd:c5:c7:78:40:1f:ef:
         af:0a:9b:a8:34:1f:4a:51:f9:47:06:ee:42:30:93:4b:c0:8f:
         38:33:90:5e:b6:d6:54:26:0a:05:34:6f:c5:82:92:07:22:0b:
         2a:b2:8a:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuyYJEmELMo5EMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
ODU1ZDBiZDYtMjIxYy00ZDcyLThmMTQtMDhiMDVmYTAyZmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNmxpdk2SvT5d/VSjYGc0takKLN9Rhm1W09d
3iyKZDZva797YM+QLaYgP8n8Sz1aWlVuJHyPhQLUaCZHZhcrUbK4qpohK14fWze+
FzrJgvVV5swRltf9iL5eItnTTZFJ7KpQR16EleRHwkBujyJUFJ4meV3BsuLRh6Q2
cfbYr9GjyZa/J03uqr/iZWEj3cA3XrzJijYr8inX3rT+JJs2zFfm3ySuIBFW/7+M
19tWHfksJSO2uFn/opZDnI4CwBlFeRJqqHg4N/23urDXL8ptR4Yzk5anR3jgiuBH
MMG0Yta+CW4FN5f/3fKslszNmiyqQ1TQ/3px7jsH76Zbh9DtIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCTM8PFcDh0ufJ/5697mAk33O4sGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvYTFhNTNkZDEtYTlkZS0z
NzE4LTg3NjktZTViYjM3MDY3NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM7JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEEcN+gTBKJlMAUUSHyafU/q0rqzq62rF7aeKqbXohNOujfT8N6xjNWU
a4l09umT8CnwSMTAQW63ww5SnYEKa0TYlGCmSMGByAUGBzDMmCuLiifYdwDNPUht
gDzUWQn1+hoGIFtCkQEpSwIibYeEhFWKCy+la5vkXwLJQhzDNUbsbwazGffrQwcz
NmSe+V9vceHZyMZdxZ500RgE9TmgeUX1Yyaqv7sMYHUbJI2jDMbcoE+DT2KVy8y6
no+nsStFuamwY/vVHs6bMTgKjxAn1dG1vcXHeEAf768Km6g0H0pR+UcG7kIwk0vA
jzgzkF621lQmCgU0b8WCkgciCyqyiqM=
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:33 2026 by rpki-client