Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ded59021-6219-3cd1-b679-c97726dbd899.roa
File:                     ded59021-6219-3cd1-b679-c97726dbd899.roa (raw, json)
Hash identifier:          fKd5xdaTlEmmyB5a2d0SocuYE2W0FWbQoPii6WNfSAc=
Subject key identifier:   15:82:C7:8E:96:F0:A1:A5:15:FE:F4:29:4E:63:3C:2D:DB:FB:39:41
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F46A7DC0A2F0B62470A2A1F70
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ded59021-6219-3cd1-b679-c97726dbd899.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     214432
IP address blocks:        216.75.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:dc:0a:2f:0b:62:47:0a:2a:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=52e3ddee-cb96-4f91-a408-35b263ef7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a0:bd:e9:7c:8b:19:e2:71:a5:f3:3d:07:f3:
                    df:65:af:cd:00:f5:38:cd:34:e5:ff:54:12:81:3f:
                    6c:78:d8:fe:c9:5f:09:a5:7f:48:2d:b9:4b:56:0e:
                    68:5f:e5:ac:12:5d:e9:d0:3e:59:49:dd:00:64:cb:
                    df:cd:58:3f:d6:71:3b:12:f2:c4:1f:d6:25:9f:b5:
                    b8:e7:ab:87:04:66:bb:54:8a:bc:a5:f4:b8:cd:86:
                    e9:3c:b8:33:0c:3f:38:f0:7f:d7:47:cd:3f:78:b4:
                    5f:ce:c5:05:ef:a2:f4:4e:55:7d:11:94:51:da:ff:
                    db:25:bd:5a:63:a6:3b:d2:7c:67:ad:9b:e1:18:f4:
                    0b:97:38:36:49:19:c7:60:e1:a8:6e:d8:be:eb:99:
                    e9:76:89:e2:1e:cc:51:6c:11:e6:3c:b4:a6:fa:7a:
                    7e:8b:0b:d6:8f:cb:f1:27:24:7d:93:bf:99:c9:7c:
                    60:b3:e7:f4:72:d5:42:76:1a:e0:37:28:58:d6:a5:
                    bb:05:2b:de:a0:c8:26:61:46:21:e1:0d:59:86:35:
                    4b:9f:63:1b:e2:2d:73:a9:28:2c:16:f1:09:ed:63:
                    0e:fb:95:30:8a:b5:93:16:f5:69:e5:f4:92:b2:83:
                    aa:7e:c7:68:4f:d3:21:a8:42:60:b3:97:f3:5c:93:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:82:C7:8E:96:F0:A1:A5:15:FE:F4:29:4E:63:3C:2D:DB:FB:39:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ded59021-6219-3cd1-b679-c97726dbd899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:44:52:32:71:c1:80:ca:55:13:ed:d1:5f:c8:fd:bd:83:56:
         1f:36:7c:55:ec:b8:4d:03:84:ab:4c:2e:24:cf:9a:11:d6:c4:
         0b:17:fa:31:df:ec:87:86:4d:e9:48:f2:53:7a:e0:43:35:20:
         4b:1c:b1:ec:1e:72:be:f9:e6:21:94:51:52:9d:cd:21:ee:3c:
         58:e3:bd:ce:64:ef:d1:0f:4d:7f:9b:94:a8:43:3c:41:cb:20:
         f6:d9:3f:d2:3e:e9:f2:d4:54:9a:92:83:6e:1b:26:bb:9e:c0:
         67:e4:a9:5e:b4:32:5c:ae:f0:af:3c:10:af:ef:72:36:2a:51:
         6f:9d:88:6d:0f:1c:bf:75:33:49:f1:85:fe:3f:ea:26:bf:ef:
         78:bf:a1:88:32:9e:bb:9c:5c:25:65:3b:91:d4:cb:df:4b:7b:
         8f:93:b5:07:7c:b4:be:31:50:c5:0b:54:45:80:ac:3b:dd:57:
         a2:63:6b:24:96:1f:49:ab:58:5f:86:7d:9c:76:b0:8a:0c:09:
         dc:b2:5b:9c:e4:4b:d2:45:28:cf:fc:a7:e0:1a:7e:75:b3:88:
         ba:d7:bb:58:29:b5:58:d8:5e:06:1d:c5:62:d1:e7:d2:b1:17:
         b3:d2:67:e0:d1:ec:5a:00:95:42:b1:d0:a4:a5:7d:6c:f1:6a:
         98:05:2e:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp9wKLwtiRwoqH3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
NTJlM2RkZWUtY2I5Ni00ZjkxLWE0MDgtMzViMjYzZWY3NjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKC96XyLGeJxpfM9B/PfZa/NAPU4zTTl/1QS
gT9seNj+yV8JpX9ILblLVg5oX+WsEl3p0D5ZSd0AZMvfzVg/1nE7EvLEH9Yln7W4
56uHBGa7VIq8pfS4zYbpPLgzDD848H/XR80/eLRfzsUF76L0TlV9EZRR2v/bJb1a
Y6Y70nxnrZvhGPQLlzg2SRnHYOGobti+65npdoniHsxRbBHmPLSm+np+iwvWj8vx
JyR9k7+ZyXxgs+f0ctVCdhrgNyhY1qW7BSveoMgmYUYh4Q1ZhjVLn2Mb4i1zqSgs
FvEJ7WMO+5UwirWTFvVp5fSSsoOqfsdoT9MhqEJgs5fzXJN4kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWCx46W8KGlFf70KU5jPC3b+zlBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGVkNTkwMjEtNjIxOS0z
Y2QxLWI2NzktYzk3NzI2ZGJkODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EtUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMREUjJxwYDKVRPt0V/I/b2DVh82fFXsuE0DhKtMLiTPmhHWxAsX+jHf
7IeGTelI8lN64EM1IEscsewecr755iGUUVKdzSHuPFjjvc5k79EPTX+blKhDPEHL
IPbZP9I+6fLUVJqSg24bJruewGfkqV60Mlyu8K88EK/vcjYqUW+diG0PHL91M0nx
hf4/6ia/73i/oYgynrucXCVlO5HUy99Le4+TtQd8tL4xUMULVEWArDvdV6JjaySW
H0mrWF+GfZx2sIoMCdyyW5zkS9JFKM/8p+AafnWziLrXu1gptVjYXgYdxWLR59Kx
F7PSZ+DR7FoAlUKx0KSlfWzxapgFLsU=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:37:20 2026 by rpki-client