Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/2b314b2e-37a7-33a8-af98-fbdb339e305e.roa
File:                     2b314b2e-37a7-33a8-af98-fbdb339e305e.roa (raw, json)
Hash identifier:          cKEpBhRJonkL+1UjXkUlsATkTemXnrx/SsWad84lM8c=
Subject key identifier:   E2:39:BA:1E:A7:07:21:0B:84:05:DF:56:05:99:03:C0:3D:3B:E0:57
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F4328584EFF776C43309336DCDA4F4466
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/2b314b2e-37a7-33a8-af98-fbdb339e305e.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     401936
IP address blocks:        192.100.5.0/24 maxlen: 24
                          2602:f974:11::/48 maxlen: 48
                          2602:f974:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:6c:43:30:93:36:dc:da:4f:44:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=8b49079f-03a3-4750-9d8a-b78b26846310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:a9:20:95:28:0e:f9:f9:f5:24:15:c7:18:
                    d6:44:f0:2d:98:62:1c:a7:b7:df:56:89:8e:a3:ea:
                    2a:9b:b6:2f:05:49:91:fc:03:d1:bb:92:89:33:32:
                    79:36:d6:f6:97:92:cd:57:76:2d:24:35:59:e1:cd:
                    29:68:1c:dc:03:a3:c7:9a:5b:39:4a:6a:1f:72:9c:
                    0d:a0:3e:78:a7:33:a4:4f:9a:21:ad:0b:87:d8:eb:
                    4a:64:90:3c:f9:3d:8d:c9:c4:c0:4d:b8:c1:70:45:
                    95:02:04:38:bd:fe:c9:dc:66:7f:d5:81:5e:f0:f3:
                    a1:90:1a:0b:89:9e:10:62:14:9f:3d:2b:52:19:6f:
                    85:7f:bf:49:4a:cb:9a:2c:05:0d:13:9a:44:59:33:
                    35:ac:76:10:8c:9f:29:4a:82:f5:3a:07:6e:fe:96:
                    da:43:c1:71:10:25:31:1a:e9:b5:b4:7e:c2:2a:78:
                    a9:fc:db:65:a0:60:49:cd:21:8b:37:b5:40:41:99:
                    d2:e3:54:59:82:33:47:c2:a4:c2:fc:ec:a3:72:0b:
                    d1:3f:68:dd:fb:29:02:33:3e:c6:8d:bd:ea:b4:37:
                    4f:28:54:69:5d:44:9a:60:c3:9a:7e:11:49:da:20:
                    76:63:77:60:50:11:f6:d6:e9:15:5e:c2:d5:b5:41:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:BA:1E:A7:07:21:0B:84:05:DF:56:05:99:03:C0:3D:3B:E0:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/2b314b2e-37a7-33a8-af98-fbdb339e305e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.5.0/24
                IPv6:
                  2602:f974:11::/48
                  2602:f974:3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:1c:f8:bf:f3:fa:1a:b8:e8:6f:c5:f3:56:04:d2:69:dd:
         d0:34:9b:dc:57:a1:a4:53:8e:d3:75:9f:de:3b:8b:7f:1d:63:
         ee:2b:5f:0c:95:80:99:38:f9:28:7d:4f:21:a5:fb:ab:19:e5:
         61:26:7c:10:95:4d:66:86:3b:8a:5d:81:37:8f:92:33:d8:3d:
         c6:b8:69:c0:72:20:ee:83:db:cb:4e:d6:47:38:e1:f5:a7:32:
         63:bd:b4:2b:e4:db:79:97:53:24:81:4e:1f:eb:88:df:a5:55:
         e1:aa:0c:c5:e5:b0:78:b2:42:7c:bf:22:71:5f:16:63:cf:9d:
         96:aa:de:79:6b:47:5a:92:27:5d:33:cc:fe:54:72:00:8d:0d:
         42:60:7c:17:f5:d7:44:07:d9:4c:7d:08:dd:a0:56:13:5d:73:
         c7:49:57:fa:5e:1a:a5:34:04:be:7f:df:40:88:bd:a6:45:20:
         63:f9:d8:b0:94:60:66:bc:64:f8:20:49:09:29:d7:dc:c4:18:
         5a:be:c2:f2:6d:ec:eb:b4:72:b6:07:48:c1:17:2e:30:4d:01:
         44:5b:2e:43:18:aa:19:fe:59:f0:aa:c5:c6:eb:0b:ad:c4:f5:
         09:e6:ed:91:16:77:36:ed:e0:a5:de:b7:ae:46:44:47:55:3f:
         2c:a6:1a:ee
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE7/d2xDMJM23NpPRGYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDkzZDE0M2YtMDA5YS00ZjdjLWJlYjQtY2U5YzczMzUy
NDE3MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
OGI0OTA3OWYtMDNhMy00NzUwLTlkOGEtYjc4YjI2ODQ2MzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+pIJUoDvn59SQVxxjWRPAtmGIcp7ffVomO
o+oqm7YvBUmR/APRu5KJMzJ5Ntb2l5LNV3YtJDVZ4c0paBzcA6PHmls5SmofcpwN
oD54pzOkT5ohrQuH2OtKZJA8+T2NycTATbjBcEWVAgQ4vf7J3GZ/1YFe8POhkBoL
iZ4QYhSfPStSGW+Ff79JSsuaLAUNE5pEWTM1rHYQjJ8pSoL1Ogdu/pbaQ8FxECUx
Gum1tH7CKnip/NtloGBJzSGLN7VAQZnS41RZgjNHwqTC/OyjcgvRP2jd+ykCMz7G
jb3qtDdPKFRpXUSaYMOafhFJ2iB2Y3dgUBH21ukVXsLVtUFNyQIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFOI5uh6nByELhAXfVgWZA8A9O+BXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNk
MTQzZi0wMDlhLTRmN2MtYmViNC1jZTljNzMzNTI0MTcvMmIzMTRiMmUtMzdhNy0z
M2E4LWFmOTgtZmJkYjMzOWUzMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDkzZDE0M2YtMDA5YS00ZjdjLWJl
YjQtY2U5YzczMzUyNDE3LzA5M2QxNDNmLTAwOWEtNGY3Yy1iZWI0LWNlOWM3MzM1
MjQxNy5jcmwwHwYDVR0jBBgwFoAUwwrscmITHMiOguUvQ7Yv6opL3nQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wOTNkMTQzZi0wMDlhLTRmN2MtYmViNC1jZTlj
NzMzNTI0MTcuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAwGQFMBgE
AgACMBIDBwAmAvl0ABEDBwAmAvl0AD0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbmAc+L/z+hq46G/F81YE
0mnd0DSb3FehpFOO03Wf3juLfx1j7itfDJWAmTj5KH1PIaX7qxnlYSZ8EJVNZoY7
il2BN4+SM9g9xrhpwHIg7oPby07WRzjh9acyY720K+TbeZdTJIFOH+uI36VV4aoM
xeWweLJCfL8icV8WY8+dlqreeWtHWpInXTPM/lRyAI0NQmB8F/XXRAfZTH0I3aBW
E11zx0lX+l4apTQEvn/fQIi9pkUgY/nYsJRgZrxk+CBJCSnX3MQYWr7C8m3s67Ry
tgdIwRcuME0BRFsuQxiqGf5Z8KrFxusLrcT1CebtkRZ3Nu3gpd63rkZER1U/LKYa
7g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:34:01 2026 by rpki-client