Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/171f23d4-13c1-3e66-90e3-c0d5143aa568.roa
File:                     171f23d4-13c1-3e66-90e3-c0d5143aa568.roa (raw, json)
Hash identifier:          wB+wZEt7qP9QPy2RnSqnR1z7e2z0l1IGMrGHFiCRYz8=
Subject key identifier:   F2:DE:0A:00:E1:98:9C:5B:53:6E:66:41:7E:CD:5D:20:24:F7:8E:4F
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584F374D18D307C5AF5C20B76620
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/171f23d4-13c1-3e66-90e3-c0d5143aa568.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     29988
IP address blocks:        72.140.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:18:d3:07:c5:af:5c:20:b7:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=4c0bc919-166a-4160-9145-b354ab90a9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:2a:04:14:2c:c6:8f:3b:fd:8d:21:4a:6f:
                    7c:fd:99:57:f7:86:8f:4f:e4:1b:9c:a3:4e:f4:8d:
                    de:f2:3a:1c:0b:9f:56:c2:32:82:36:99:2c:ff:a7:
                    82:c7:3b:75:08:c8:4d:07:2c:95:dc:4d:1e:ad:3e:
                    b6:f3:41:69:b9:a3:ed:6d:21:df:4f:61:a3:9c:61:
                    02:10:c8:8e:9a:7d:e3:ff:b8:aa:c7:eb:7b:ff:0b:
                    cc:21:24:21:8f:58:a1:ff:1d:33:88:65:d9:0d:a2:
                    93:09:e5:f5:75:9d:72:07:21:e5:59:ec:d3:a9:e0:
                    c7:be:63:ee:09:0f:2c:61:d6:3d:af:4d:4e:0a:12:
                    1c:01:c4:44:20:03:39:d6:da:cc:11:94:a7:b6:d8:
                    fc:7c:4d:27:e4:ec:cd:60:1a:2b:64:6c:9c:9c:68:
                    e8:b8:0f:8a:5c:26:c7:2d:85:73:0f:57:aa:90:5b:
                    7a:69:c4:b7:d5:3e:6b:4a:51:e4:0e:8e:d2:a7:56:
                    59:aa:84:e1:de:e8:0c:d9:aa:ab:70:6e:9a:07:bb:
                    cc:26:39:88:c0:64:93:0f:e5:16:04:30:ea:87:42:
                    a4:39:a3:a5:6c:5f:04:f5:9f:d1:59:a8:3b:2a:1d:
                    e0:a1:93:d1:44:0d:4e:f8:d2:7d:a6:f6:4f:eb:99:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:0A:00:E1:98:9C:5B:53:6E:66:41:7E:CD:5D:20:24:F7:8E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/171f23d4-13c1-3e66-90e3-c0d5143aa568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.140.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2e:04:c9:b3:ff:29:f7:89:11:db:4c:ba:96:e9:22:da:ad:
         18:ba:c2:0c:eb:b4:6c:b6:8a:c3:dc:0b:42:42:21:d4:f7:28:
         81:d7:8c:1b:e0:4e:3d:1a:09:79:30:30:e4:49:db:bf:9b:63:
         8b:c3:95:b4:b9:86:5c:8f:eb:e2:42:70:f1:41:32:81:cb:f5:
         dc:b9:56:88:7d:5d:e5:57:90:e1:61:36:7c:23:38:6c:99:1d:
         0e:e8:62:01:01:70:82:2a:f6:e5:9f:02:53:87:81:f8:a9:c4:
         00:b9:b0:ca:5a:97:a9:99:6d:c8:4f:78:85:a3:0e:a6:01:a5:
         a1:c9:a9:39:d6:e1:82:17:58:f0:88:06:cf:47:7b:30:03:6e:
         65:75:9b:af:5f:ae:b8:e0:33:1a:b6:51:52:e0:8d:4f:24:bd:
         72:43:54:3f:f7:4c:b0:d6:b5:ab:d0:04:8e:79:67:63:f9:c3:
         f8:d7:87:7f:b9:df:ed:0b:e5:98:22:e8:8c:69:3e:37:2e:bf:
         9e:b7:8e:64:c2:0a:60:d2:b3:df:d8:b6:ea:34:9a:79:29:77:
         ff:6a:99:58:3e:da:0c:44:91:56:0e:26:31:f5:f0:95:10:da:
         f0:e8:fe:bd:66:90:47:24:66:7f:9a:c9:db:00:24:e7:c0:e7:
         b6:da:e2:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRjTB8WvXCC3ZiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUyNzk5MTgtZjViMS00M2Y3LTk3NDgtOTVhYTBjNjQ2
OWYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
NGMwYmM5MTktMTY2YS00MTYwLTkxNDUtYjM1NGFiOTBhOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn4qBBQsxo87/Y0hSm98/ZlX94aPT+QbnKNO
9I3e8jocC59WwjKCNpks/6eCxzt1CMhNByyV3E0erT6280FpuaPtbSHfT2GjnGEC
EMiOmn3j/7iqx+t7/wvMISQhj1ih/x0ziGXZDaKTCeX1dZ1yByHlWezTqeDHvmPu
CQ8sYdY9r01OChIcAcREIAM51trMEZSnttj8fE0n5OzNYBorZGycnGjouA+KXCbH
LYVzD1eqkFt6acS31T5rSlHkDo7Sp1ZZqoTh3ugM2aqrcG6aB7vMJjmIwGSTD+UW
BDDqh0KkOaOlbF8E9Z/RWag7Kh3goZPRRA1O+NJ9pvZP65kpGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLeCgDhmJxbU25mQX7NXSAk945PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3
OTkxOC1mNWIxLTQzZjctOTc0OC05NWFhMGM2NDY5ZjMvMTcxZjIzZDQtMTNjMS0z
ZTY2LTkwZTMtYzBkNTE0M2FhNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUyNzk5MTgtZjViMS00M2Y3LTk3
NDgtOTVhYTBjNjQ2OWYzLzA1Mjc5OTE4LWY1YjEtNDNmNy05NzQ4LTk1YWEwYzY0
NjlmMy5jcmwwHwYDVR0jBBgwFoAUcgH1iAdeZMnpAPYfP2ut8NzCz9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3OTkxOC1mNWIxLTQzZjctOTc0OC05NWFh
MGM2NDY5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSIzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQuBMmz/yn3iRHbTLqW6SLarRi6wgzrtGy2isPcC0JCIdT3KIHXjBvg
Tj0aCXkwMORJ27+bY4vDlbS5hlyP6+JCcPFBMoHL9dy5Voh9XeVXkOFhNnwjOGyZ
HQ7oYgEBcIIq9uWfAlOHgfipxAC5sMpal6mZbchPeIWjDqYBpaHJqTnW4YIXWPCI
Bs9HezADbmV1m69frrjgMxq2UVLgjU8kvXJDVD/3TLDWtavQBI55Z2P5w/jXh3+5
3+0L5Zgi6IxpPjcuv563jmTCCmDSs9/Ytuo0mnkpd/9qmVg+2gxEkVYOJjH18JUQ
2vDo/r1mkEckZn+aydsAJOfA57ba4is=
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:23:14 2026 by rpki-client