Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/063d6518-1049-3d36-8e3c-712839699332.roa
File:                     063d6518-1049-3d36-8e3c-712839699332.roa (raw, json)
Hash identifier:          ZSVpKg6dRnH1bDFQXqLdzCb+No4dzButplhIVB31GRk=
Subject key identifier:   C2:3D:EE:DD:8D:4A:DF:86:FE:AC:E9:4F:0D:2E:04:FF:0A:53:AA:B5
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584F4972EAEE331CDFB592092980
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/063d6518-1049-3d36-8e3c-712839699332.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     10794
IP address blocks:        171.162.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ea:ee:33:1c:df:b5:92:09:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=226103fe-51e0-4c33-b54a-efd2e9d51672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bb:ae:57:d5:d5:3e:7a:7f:22:e5:04:31:63:
                    7c:06:6b:e5:d3:0a:dc:8b:38:f1:a6:8b:0a:bf:b6:
                    2c:ab:0b:b3:32:27:3b:28:02:ce:14:8a:f9:76:d4:
                    a4:12:f7:bf:20:8a:28:31:7f:20:41:ba:7a:c0:77:
                    e6:dd:4b:1d:77:b5:08:14:9b:4e:86:80:54:09:00:
                    31:31:79:48:51:59:85:df:a8:22:3a:0e:a5:97:b1:
                    2f:5a:c6:19:6f:3c:1e:0b:15:a1:db:4b:89:22:94:
                    e3:f0:85:55:5e:4e:af:9c:61:48:a0:9d:58:6d:a9:
                    6d:ff:c9:ff:8d:7a:5f:e9:51:60:30:d0:ce:49:a6:
                    9f:f5:5f:dd:77:bf:e6:1b:1b:f5:ea:e7:df:0a:8d:
                    14:ca:58:8f:92:3f:f0:99:b5:2b:b8:6c:65:2d:82:
                    3f:d5:e3:4b:09:52:9f:2f:7f:20:d0:47:e5:be:29:
                    77:30:43:1c:f7:aa:0c:94:d0:1b:ae:57:4c:e8:95:
                    19:93:71:c0:f6:ab:10:b7:89:5c:c7:9e:01:55:33:
                    eb:bf:c1:b9:c9:d7:d5:ac:8b:09:4b:e5:13:f4:28:
                    7b:1e:d3:e2:0b:59:f5:00:e3:7b:c7:84:b5:db:6e:
                    f0:97:78:71:7f:10:df:5d:d5:0d:23:77:42:98:dc:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3D:EE:DD:8D:4A:DF:86:FE:AC:E9:4F:0D:2E:04:FF:0A:53:AA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/063d6518-1049-3d36-8e3c-712839699332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:d4:7b:6a:7e:32:92:07:dd:5b:1b:3f:c2:90:d9:fe:64:
         f4:7f:0d:b8:a3:4f:3c:75:e2:db:11:3b:e3:8b:33:d3:24:65:
         f0:dc:a2:d7:29:f8:ce:87:52:ad:12:60:12:59:1c:21:03:bc:
         e6:79:f8:e9:7f:aa:d0:bd:e7:98:1d:34:0d:58:11:aa:20:5c:
         06:90:6f:21:0b:5a:00:4e:35:2b:75:ca:2c:0d:58:d4:e0:47:
         39:be:63:71:8d:0f:c9:b6:78:bf:39:2f:9a:fa:2d:a2:9d:0b:
         ef:11:db:57:26:eb:06:de:db:9f:3a:99:1a:2e:47:75:13:e4:
         3b:13:72:8c:82:7b:b3:02:ec:19:a7:22:70:97:23:a5:0e:2a:
         ed:a0:97:a5:fa:03:45:eb:63:c7:ee:7e:30:f5:5a:0f:95:87:
         40:b6:00:ea:b5:6b:d0:7d:06:24:1c:9e:7c:1a:83:b0:f3:5f:
         0a:3e:96:74:e0:17:ff:c8:0e:e5:da:18:72:c4:b3:66:57:32:
         84:b3:db:1b:6b:e8:4c:69:03:e7:13:be:a4:ea:52:f7:bc:28:
         16:3a:92:02:53:6f:5f:ce:17:87:19:4e:bb:6b:7e:17:32:a5:
         06:18:81:97:96:60:31:28:3f:4c:ed:7c:55:14:9f:80:c6:d6:
         ec:3e:18:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuruMxzftZIJKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjI2MTAzZmUtNTFlMC00YzMzLWI1NGEtZWZkMmU5ZDUxNjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtruuV9XVPnp/IuUEMWN8Bmvl0wrcizjxposK
v7YsqwuzMic7KALOFIr5dtSkEve/IIooMX8gQbp6wHfm3Usdd7UIFJtOhoBUCQAx
MXlIUVmF36giOg6ll7EvWsYZbzweCxWh20uJIpTj8IVVXk6vnGFIoJ1Ybalt/8n/
jXpf6VFgMNDOSaaf9V/dd7/mGxv16uffCo0UyliPkj/wmbUruGxlLYI/1eNLCVKf
L38g0Eflvil3MEMc96oMlNAbrldM6JUZk3HA9qsQt4lcx54BVTPrv8G5ydfVrIsJ
S+UT9Ch7HtPiC1n1AON7x4S1227wl3hxfxDfXdUNI3dCmNwlzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMI97t2NSt+G/qzpTw0uBP8KU6q1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMDYzZDY1MTgtMTA0OS0z
ZDM2LThlM2MtNzEyODM5Njk5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAv01HtqfjKSB91bGz/CkNn+ZPR/DbijTzx14tsRO+OLM9MkZfDcotcp
+M6HUq0SYBJZHCEDvOZ5+Ol/qtC955gdNA1YEaogXAaQbyELWgBONSt1yiwNWNTg
Rzm+Y3GND8m2eL85L5r6LaKdC+8R21cm6wbe2586mRouR3UT5DsTcoyCe7MC7Bmn
InCXI6UOKu2gl6X6A0XrY8fufjD1Wg+Vh0C2AOq1a9B9BiQcnnwag7DzXwo+lnTg
F//IDuXaGHLEs2ZXMoSz2xtr6ExpA+cTvqTqUve8KBY6kgJTb1/OF4cZTrtrfhcy
pQYYgZeWYDEoP0ztfFUUn4DG1uw+GE4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:01 2026 by rpki-client