Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/f6dc1192-4c6d-3c47-ad87-affa659196a0.roa
File:                     f6dc1192-4c6d-3c47-ad87-affa659196a0.roa (raw, json)
Hash identifier:          WvRJ4tf4x9axRmzKk3Rg+RJFHKV7/EaOf4/3zZpMw94=
Subject key identifier:   86:B9:13:CB:02:CD:D1:55:6E:2E:AD:E2:40:8C:CE:72:7F:5F:1D:95
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F4328584F43DD57B8C3FADBA98B0BC980
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/f6dc1192-4c6d-3c47-ad87-affa659196a0.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     4186
IP address blocks:        192.133.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:57:b8:c3:fa:db:a9:8b:0b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=cfb02669-4be5-45ee-8337-6cbba5756d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:93:b5:d6:3a:e6:7a:cd:2b:b6:52:59:16:e0:
                    f0:dd:77:d9:54:5d:e7:a9:d3:68:17:8c:a3:f1:0b:
                    6b:43:05:17:61:c6:c8:1a:ab:25:1c:26:42:57:50:
                    cb:94:2f:11:f1:26:31:b3:8e:19:a6:74:77:ba:fb:
                    ef:51:ff:a5:b6:6b:49:10:7f:8a:80:48:b4:12:e0:
                    2f:7a:60:89:3e:02:ec:4d:ec:2d:9f:04:8b:a8:ab:
                    31:94:37:c9:73:db:2a:7b:af:9c:f7:33:f8:b6:93:
                    24:dc:57:6a:20:c2:a2:d6:84:95:de:56:d6:6e:1f:
                    76:09:42:f2:e0:90:a5:a6:be:1b:3f:90:f1:ea:ce:
                    ae:e1:2b:d6:ef:77:84:19:68:0e:28:d8:1f:10:08:
                    57:20:6f:da:a4:75:22:af:f1:13:1c:06:10:47:c5:
                    48:d1:2b:7c:8a:a7:40:fe:9e:69:a3:44:99:75:4e:
                    78:a7:6e:3a:f6:fe:1b:d6:99:d9:8e:8c:c0:06:56:
                    36:08:54:ac:50:b7:f7:3c:02:33:9b:fa:a7:c0:eb:
                    7e:53:bf:38:01:ab:3d:c7:01:34:57:6f:e8:69:96:
                    72:5d:d3:a7:d0:3c:eb:dd:d7:d6:75:ac:34:fa:e2:
                    a5:91:6f:75:d1:69:be:5d:0d:4e:87:69:02:83:7a:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B9:13:CB:02:CD:D1:55:6E:2E:AD:E2:40:8C:CE:72:7F:5F:1D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/f6dc1192-4c6d-3c47-ad87-affa659196a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:7c:d8:24:eb:b0:3c:f9:a6:1e:16:28:44:4e:d6:9e:ed:
         26:ce:ba:34:1b:de:25:f5:f4:d6:e6:65:e6:c7:b0:dd:f2:df:
         36:57:73:76:cb:6a:84:1e:70:54:3a:02:c1:01:94:83:13:0b:
         c5:2a:e5:b5:61:ff:c0:4c:bc:d0:e4:38:cc:29:e5:5d:e0:b0:
         ba:11:8b:cd:93:2e:df:20:cb:a0:5b:56:0c:b3:a3:28:f9:08:
         5b:a3:3f:83:b5:b3:35:38:6d:76:78:92:d0:17:60:00:6f:4c:
         5d:75:41:84:9f:0c:42:f8:0f:20:8c:79:bc:68:d3:88:b8:60:
         20:09:c2:10:20:b7:b3:b3:35:f4:db:4e:f4:00:42:6a:9e:c8:
         d1:22:16:e5:b8:6c:27:81:b0:96:c5:ea:05:43:e8:9e:93:6c:
         d0:96:0e:51:59:b7:94:3b:6d:1d:cb:19:be:92:06:88:c4:db:
         57:f9:1a:e3:71:bb:ce:22:ea:17:36:1a:24:47:9e:79:19:14:
         96:53:ed:a7:f2:d7:44:b5:6c:c7:f6:74:95:76:ad:a0:7c:58:
         ea:96:b9:91:0f:bf:2a:9b:98:27:32:1c:19:9e:8e:76:ab:2c:
         39:08:1a:34:81:62:cc:17:63:b0:8f:22:43:15:7e:96:04:0c:
         97:90:08:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Ve4w/rbqYsLyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4
ZTk3MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
Y2ZiMDI2NjktNGJlNS00NWVlLTgzMzctNmNiYmE1NzU2ZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5O11jrmes0rtlJZFuDw3XfZVF3nqdNoF4yj
8QtrQwUXYcbIGqslHCZCV1DLlC8R8SYxs44ZpnR3uvvvUf+ltmtJEH+KgEi0EuAv
emCJPgLsTewtnwSLqKsxlDfJc9sqe6+c9zP4tpMk3FdqIMKi1oSV3lbWbh92CULy
4JClpr4bP5Dx6s6u4SvW73eEGWgOKNgfEAhXIG/apHUir/ETHAYQR8VI0St8iqdA
/p5po0SZdU54p2469v4b1pnZjozABlY2CFSsULf3PAIzm/qnwOt+U784Aas9xwE0
V2/oaZZyXdOn0Dzr3dfWdaw0+uKlkW910Wm+XQ1Oh2kCg3o8AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIa5E8sCzdFVbi6t4kCMznJ/Xx2VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZjAx
NjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvZjZkYzExOTItNGM2ZC0z
YzQ3LWFkODctYWZmYTY1OTE5NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2YwMTY2NzgtZGFiMy00M2QxLWI3
ZWEtNWQzYWQ4MTQ4ZTk3L2NmMDE2Njc4LWRhYjMtNDNkMS1iN2VhLTVkM2FkODE0
OGU5Ny5jcmwwHwYDVR0jBBgwFoAURoXSUGuQUNMXk24RcerDi5nlATYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNh
ZDgxNDhlOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIV9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6EfNgk67A8+aYeFihETtae7SbOujQb3iX19NbmZebHsN3y3zZXc3bL
aoQecFQ6AsEBlIMTC8Uq5bVh/8BMvNDkOMwp5V3gsLoRi82TLt8gy6BbVgyzoyj5
CFujP4O1szU4bXZ4ktAXYABvTF11QYSfDEL4DyCMebxo04i4YCAJwhAgt7OzNfTb
TvQAQmqeyNEiFuW4bCeBsJbF6gVD6J6TbNCWDlFZt5Q7bR3LGb6SBojE21f5GuNx
u84i6hc2GiRHnnkZFJZT7afy10S1bMf2dJV2raB8WOqWuZEPvyqbmCcyHBmejnar
LDkIGjSBYswXY7CPIkMVfpYEDJeQCIA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:38 2026 by rpki-client