Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa
File:                     04ca4493-92f5-337d-b186-db2cfa6ac49b.roa (raw, json)
Hash identifier:          0EkHoGpwzU06aTou1vwRhxghqklEBJpK/i1IxDzHLbk=
Subject key identifier:   0F:52:E5:80:7D:BD:03:28:16:E5:A8:5D:C4:88:CF:A9:CE:A7:3D:13
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584F5E62C008B1333977719875C0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     397422
IP address blocks:        67.210.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c0:08:b1:33:39:77:71:98:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2a52ffec-351a-47df-a9b2-22de03e1a23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:5b:8c:4e:3d:d9:68:d7:4e:28:e3:9e:84:
                    01:c1:de:d3:78:b1:b8:06:08:48:d0:21:be:f9:81:
                    ba:75:2e:c8:e4:f5:9c:52:26:b7:66:4e:71:70:f8:
                    af:19:fe:d3:43:59:02:94:2e:83:df:36:88:48:06:
                    57:ea:ba:a7:3e:3b:79:7c:17:c0:85:85:00:1a:96:
                    30:e2:61:29:9f:71:a1:c5:da:97:9a:c6:04:79:c6:
                    ce:d3:19:3b:cb:21:38:81:eb:cb:fe:69:57:df:1a:
                    c0:0d:0a:f8:34:b1:88:78:19:bf:0c:c2:0a:ea:a4:
                    98:85:19:8c:2d:31:79:c0:9c:1d:cf:54:7f:1c:3f:
                    a1:d5:ae:12:ff:46:71:16:41:07:9f:13:5a:25:0e:
                    1a:ad:e6:d8:60:c5:61:fa:3d:c2:90:cd:17:3e:27:
                    96:7f:c3:58:57:1f:76:a3:e6:b4:d4:1e:71:67:3d:
                    dc:aa:84:21:bb:ef:ad:60:13:53:64:21:d6:e4:f1:
                    e4:0c:70:7b:a3:b2:a0:11:2f:08:8d:e2:b1:f9:77:
                    6a:11:0d:01:79:75:13:6e:26:b8:ae:21:ea:53:5d:
                    a7:2d:53:2b:fb:10:bc:35:f2:b7:46:38:db:cf:d1:
                    6b:1e:ea:0a:f0:79:de:13:2b:a3:e7:13:a3:41:db:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:52:E5:80:7D:BD:03:28:16:E5:A8:5D:C4:88:CF:A9:CE:A7:3D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b9:9d:06:8c:46:7a:fb:f6:be:de:6f:b6:84:98:6d:dc:be:
         29:2f:be:bf:03:66:db:1a:53:b4:86:de:51:6e:d3:1e:d5:0d:
         8d:01:af:35:6e:92:f1:9b:7b:48:b3:47:48:9e:09:3d:08:c8:
         a4:44:c0:dd:fb:1c:e1:70:33:7d:61:ea:29:d2:4c:3b:bb:d2:
         94:c9:7b:ac:e3:61:4e:a0:1b:f8:7c:45:ec:9c:80:d1:77:99:
         f9:6e:28:06:ec:7f:89:83:69:06:24:8b:39:4b:b2:68:36:17:
         fc:ab:e9:6e:d3:07:82:6a:cf:05:8e:be:f9:46:10:2b:76:6c:
         1e:d4:f7:7e:35:4e:0f:6b:63:97:9f:ee:f1:ba:b1:63:f3:96:
         8c:a6:c4:90:6a:7e:0c:f0:1e:b6:d4:fc:6b:31:45:11:07:a2:
         e2:a0:ac:87:98:d5:0c:24:8f:16:ae:92:dc:c5:be:41:0c:71:
         af:19:4e:6d:67:69:09:ca:2d:43:4d:90:27:58:89:bd:54:ee:
         a9:48:fd:bd:cc:9b:65:23:da:ab:77:6e:d8:41:57:78:2a:93:
         6d:78:87:90:7b:fd:ff:8d:7b:c8:ec:92:43:4d:19:9e:e8:51:
         f7:24:4c:6c:0c:e3:6a:3f:94:39:b4:52:a6:3d:5e:c5:10:54:
         d0:01:dd:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsAIsTM5d3GYdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz
ZmY0MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
MmE1MmZmZWMtMzUxYS00N2RmLWE5YjItMjJkZTAzZTFhMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8lbjE492WjXTijjnoQBwd7TeLG4BghI0CG+
+YG6dS7I5PWcUia3Zk5xcPivGf7TQ1kClC6D3zaISAZX6rqnPjt5fBfAhYUAGpYw
4mEpn3GhxdqXmsYEecbO0xk7yyE4gevL/mlX3xrADQr4NLGIeBm/DMIK6qSYhRmM
LTF5wJwdz1R/HD+h1a4S/0ZxFkEHnxNaJQ4arebYYMVh+j3CkM0XPieWf8NYVx92
o+a01B5xZz3cqoQhu++tYBNTZCHW5PHkDHB7o7KgES8IjeKx+XdqEQ0BeXUTbia4
riHqU12nLVMr+xC8NfK3Rjjbz9FrHuoK8HneEyuj5xOjQdvS3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9S5YB9vQMoFuWoXcSIz6nOpz0TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3
MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvMDRjYTQ0OTMtOTJmNS0z
MzdkLWIxODYtZGIyY2ZhNmFjNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl
ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl
M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx
MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9LIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO5nQaMRnr79r7eb7aEmG3cvikvvr8DZtsaU7SG3lFu0x7VDY0BrzVu
kvGbe0izR0ieCT0IyKREwN37HOFwM31h6inSTDu70pTJe6zjYU6gG/h8ReycgNF3
mfluKAbsf4mDaQYkizlLsmg2F/yr6W7TB4JqzwWOvvlGECt2bB7U9341Tg9rY5ef
7vG6sWPzloymxJBqfgzwHrbU/GsxRREHouKgrIeY1QwkjxauktzFvkEMca8ZTm1n
aQnKLUNNkCdYib1U7qlI/b3Mm2Uj2qt3bthBV3gqk214h5B7/f+Ne8jskkNNGZ7o
UfckTGwM42o/lDm0UqY9XsUQVNAB3Vg=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:05:20 2026 by rpki-client