Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
File:                     9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa (raw, json)
Hash identifier:          TI5F0YdgQBD8WdJpYWqEVwZQ+lwoU+u+wYOZD+VdxNQ=
Subject key identifier:   0F:63:5A:F2:49:AB:47:F6:62:2A:65:82:9E:87:A1:30:2D:30:4A:81
Certificate issuer:       /CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Certificate serial:       010D0C9F4328584E3A2F2EFCAA749B1631A0CC80
Authority key identifier: 91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     401207
IP address blocks:        198.133.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:2e:fc:aa:74:9b:16:31:a0:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=85413d9f-2aa9-4e60-9815-2baf4c3782b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:53:49:50:29:ba:8f:17:a9:f1:be:99:1e:
                    c9:d9:1f:43:25:c4:98:3b:a3:9d:4a:9b:c6:28:fd:
                    ba:ab:43:73:0f:fb:3b:55:01:94:82:da:43:9d:9b:
                    e4:f1:6d:39:0f:37:b6:d9:ab:cf:b3:68:6d:6e:4e:
                    cf:89:24:f6:f6:ff:d5:60:e7:98:bc:9f:89:9c:71:
                    f1:5c:60:0a:5f:60:be:e9:d6:1c:75:c4:c8:30:c7:
                    77:47:5b:49:17:9c:f1:0f:13:0c:39:40:27:65:3d:
                    e8:a6:97:7f:5f:76:8c:ff:f7:f3:1c:5d:df:f4:67:
                    34:b3:d1:dc:58:f5:f4:e1:82:7d:e6:85:4d:96:36:
                    86:bc:ed:e2:e0:ee:5a:f0:e6:35:b7:27:f5:a4:c9:
                    87:bd:1a:18:0a:2b:b5:1c:49:24:31:9a:73:9d:8b:
                    00:7b:b9:b5:60:be:75:d9:16:da:97:00:21:cd:58:
                    b1:76:11:57:e0:b4:99:9d:40:76:66:5b:ee:bc:99:
                    47:5a:26:3c:da:b0:fa:f6:e8:ff:a5:20:b9:0b:73:
                    5b:b2:33:7b:4c:79:34:d8:fd:5a:b1:18:f5:70:36:
                    18:a6:60:20:85:6e:ab:80:24:5c:a7:3b:67:12:5d:
                    70:76:ef:e9:92:15:20:78:ca:a1:85:25:ab:44:06:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:63:5A:F2:49:AB:47:F6:62:2A:65:82:9E:87:A1:30:2D:30:4A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/9a4e5f01-28c8-39c8-b5a8-8a274d531b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl

            X509v3 Authority Key Identifier:
                keyid:91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:e1:f4:12:b4:ec:01:4d:85:e0:5e:6a:22:7c:dd:89:3d:
         8d:51:46:f2:5c:33:3e:1c:cc:62:0d:e6:64:35:5b:16:b5:75:
         13:dd:c9:32:62:66:37:f8:34:96:7f:72:55:65:d2:82:90:bb:
         e8:62:f9:18:78:88:59:f7:7c:c4:94:51:94:88:1d:06:eb:0a:
         f6:ac:ce:ab:7a:b2:a0:6b:4f:48:09:87:01:ce:eb:75:53:fc:
         05:07:08:05:5f:0e:9e:c5:66:85:53:a9:19:06:c7:2e:aa:c4:
         eb:6e:74:2c:cc:82:5c:85:f5:67:2f:f9:94:f4:04:71:7b:b1:
         32:09:34:fe:a3:54:05:1f:a6:1b:ba:c6:9c:96:29:19:7d:0c:
         17:41:74:06:6d:f6:f5:8d:f3:f6:f6:8f:59:da:6a:0f:e9:c8:
         62:0b:ef:fe:76:6e:ec:c7:ef:c3:90:6e:19:76:9f:c2:64:07:
         50:6a:a0:ab:a6:7b:6f:9e:77:0b:c8:97:7a:63:03:e1:d1:62:
         06:74:ad:d3:2a:0a:59:cd:02:57:1b:43:13:e7:63:10:74:00:
         c6:ff:12:f1:1e:de:b4:80:5d:32:ce:59:1d:11:b2:4b:9c:ab:
         a9:d4:70:10:e3:87:bd:1c:12:a3:e7:b3:d2:68:9b:be:9a:a1:
         8d:12:ba:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Ly78qnSbFjGgzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAzZDk2YTYtNjE2ZS00NmMxLThiYzctMmE5YWE5Nzdm
MDg4MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ODU0MTNkOWYtMmFhOS00ZTYwLTk4MTUtMmJhZjRjMzc4MmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSBTSVApuo8XqfG+mR7J2R9DJcSYO6OdSpvG
KP26q0NzD/s7VQGUgtpDnZvk8W05Dze22avPs2htbk7PiST29v/VYOeYvJ+JnHHx
XGAKX2C+6dYcdcTIMMd3R1tJF5zxDxMMOUAnZT3oppd/X3aM//fzHF3f9Gc0s9Hc
WPX04YJ95oVNljaGvO3i4O5a8OY1tyf1pMmHvRoYCiu1HEkkMZpznYsAe7m1YL51
2RbalwAhzVixdhFX4LSZnUB2ZlvuvJlHWiY82rD69uj/pSC5C3NbsjN7THk02P1a
sRj1cDYYpmAghW6rgCRcpztnEl1wdu/pkhUgeMqhhSWrRAa1YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9jWvJJq0f2Yiplgp6HoTAtMEqBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84MDNk
OTZhNi02MTZlLTQ2YzEtOGJjNy0yYTlhYTk3N2YwODgvOWE0ZTVmMDEtMjhjOC0z
OWM4LWI1YTgtOGEyNzRkNTMxYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODAzZDk2YTYtNjE2ZS00NmMxLThi
YzctMmE5YWE5NzdmMDg4LzgwM2Q5NmE2LTYxNmUtNDZjMS04YmM3LTJhOWFhOTc3
ZjA4OC5jcmwwHwYDVR0jBBgwFoAUkaBN6BR9OVdz1kI3nGDzFDG8uSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84MDNkOTZhNi02MTZlLTQ2YzEtOGJjNy0yYTlh
YTk3N2YwODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxoWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEc74fQStOwBTYXgXmoifN2JPY1RRvJcMz4czGIN5mQ1Wxa1dRPdyTJi
Zjf4NJZ/clVl0oKQu+hi+Rh4iFn3fMSUUZSIHQbrCvaszqt6sqBrT0gJhwHO63VT
/AUHCAVfDp7FZoVTqRkGxy6qxOtudCzMglyF9Wcv+ZT0BHF7sTIJNP6jVAUfphu6
xpyWKRl9DBdBdAZt9vWN8/b2j1naag/pyGIL7/52buzH78OQbhl2n8JkB1BqoKum
e2+edwvIl3pjA+HRYgZ0rdMqClnNAlcbQxPnYxB0AMb/EvEe3rSAXTLOWR0Rskuc
q6nUcBDjh70cEqPns9Jom76aoY0SuiM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:14 2026 by rpki-client