Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a16f8097-e993-3f93-b9f6-319f77da9a19.roa
File:                     a16f8097-e993-3f93-b9f6-319f77da9a19.roa (raw, json)
Hash identifier:          0Nns9C9j2j6xyQtHeAisjZIgh09rfoSiEtyCVGuGKjI=
Subject key identifier:   3F:89:17:B0:42:BC:89:2F:A8:2D:15:F0:85:43:51:F3:79:11:66:69
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584F49766DEE5DA1516979A8EE80
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a16f8097-e993-3f93-b9f6-319f77da9a19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398427
IP address blocks:        185.178.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:6d:ee:5d:a1:51:69:79:a8:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ad74f79-b2c2-47d5-8dc6-4b3f388304f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:6a:9e:23:61:87:ad:db:5b:96:a6:08:c6:
                    17:69:9e:2b:9c:03:c8:c7:0c:a0:88:d8:8f:19:37:
                    7a:86:9f:83:ed:9e:4d:65:3c:0f:8c:69:ce:ef:f4:
                    3f:12:a4:81:2e:be:ee:2c:d8:1a:eb:a0:98:75:b8:
                    b8:51:a7:78:72:39:09:1e:23:cf:69:71:91:df:11:
                    9f:b5:5e:f9:08:d8:7d:c2:71:d6:2e:b3:30:cf:18:
                    e7:45:cf:58:70:f4:ef:c9:90:03:c8:e0:f0:4a:e4:
                    15:f4:5c:49:c0:fb:87:5f:54:a3:4f:5d:ad:b9:82:
                    b9:27:ad:8e:11:5e:0a:dd:1b:28:5c:98:f7:21:ac:
                    fe:49:fd:fd:c4:c0:ce:38:6c:53:2e:ce:4b:c6:1a:
                    2e:37:92:63:be:cc:cb:fe:4f:45:40:bc:93:08:ad:
                    8c:0f:97:4a:a8:16:a9:3b:47:c2:ec:84:65:48:3b:
                    ab:3a:44:c6:82:cf:21:31:aa:58:2b:a6:2b:36:e9:
                    07:c1:3f:47:0f:48:1e:4b:7f:c2:00:68:47:73:48:
                    25:ae:8a:b7:4d:46:ef:c9:7d:2c:91:b0:ea:34:ad:
                    5e:02:f9:df:d1:10:70:cc:94:35:b3:af:5d:4a:24:
                    36:de:8f:1b:05:45:c5:92:2a:b7:c3:4c:31:f0:42:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:17:B0:42:BC:89:2F:A8:2D:15:F0:85:43:51:F3:79:11:66:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/a16f8097-e993-3f93-b9f6-319f77da9a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a7:75:48:cb:4a:3a:45:76:72:83:18:07:3d:46:1c:36:25:
         20:7f:d5:e6:1a:d3:bc:06:b5:6e:3e:00:92:2e:d0:fe:ca:f6:
         3e:26:a0:2b:b1:39:d9:d3:61:f1:d8:96:0d:ec:7c:e9:06:94:
         c5:6b:06:3f:81:4e:e6:89:ce:f3:b6:d1:f2:1f:df:a0:ea:cd:
         17:7a:51:1d:6e:05:64:18:df:7a:a3:6d:e5:20:6a:82:0d:a1:
         a0:0c:4d:6d:a0:d4:f9:be:fb:95:91:28:ce:37:51:8f:cf:11:
         72:aa:a4:2b:a0:b0:4e:01:bc:f3:be:55:1b:b8:6d:d7:78:e6:
         17:42:67:74:69:97:85:58:bb:6d:94:d8:e2:9e:b8:4b:e5:57:
         74:b6:71:55:58:7c:c5:85:66:0f:0f:11:18:4d:fb:d3:99:5c:
         c2:11:ef:d6:94:b0:f9:62:11:12:83:ea:d0:2d:95:19:57:c7:
         d6:f6:39:15:b0:87:e7:84:c4:87:0b:f9:98:0b:f3:a0:d1:27:
         51:93:de:32:d1:2e:00:aa:b2:bd:d2:a5:b2:01:a3:1c:44:12:
         73:76:61:d8:23:1e:20:31:85:e1:c9:6f:33:c9:6d:16:21:83:
         11:59:a6:20:d4:51:e5:4c:dd:bb:7b:cf:f7:80:ef:f5:5b:2e:
         2c:95:42:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdm3uXaFRaXmo7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5
OTVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWFkNzRmNzktYjJjMi00N2Q1LThkYzYtNGIzZjM4ODMwNGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mxqniNhh63bW5amCMYXaZ4rnAPIxwygiNiP
GTd6hp+D7Z5NZTwPjGnO7/Q/EqSBLr7uLNga66CYdbi4Uad4cjkJHiPPaXGR3xGf
tV75CNh9wnHWLrMwzxjnRc9YcPTvyZADyODwSuQV9FxJwPuHX1SjT12tuYK5J62O
EV4K3RsoXJj3Iaz+Sf39xMDOOGxTLs5LxhouN5JjvszL/k9FQLyTCK2MD5dKqBap
O0fC7IRlSDurOkTGgs8hMapYK6YrNukHwT9HD0geS3/CAGhHc0glroq3TUbvyX0s
kbDqNK1eAvnf0RBwzJQ1s69dSiQ23o8bBUXFkiq3w0wx8ELByQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+JF7BCvIkvqC0V8IVDUfN5EWZpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj
NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvYTE2ZjgwOTctZTk5My0z
ZjkzLWI5ZjYtMzE5Zjc3ZGE5YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy
MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5
OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0
MTk1OTk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubKYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESndUjLSjpFdnKDGAc9Rhw2JSB/1eYa07wGtW4+AJIu0P7K9j4moCux
OdnTYfHYlg3sfOkGlMVrBj+BTuaJzvO20fIf36DqzRd6UR1uBWQY33qjbeUgaoIN
oaAMTW2g1Pm++5WRKM43UY/PEXKqpCugsE4BvPO+VRu4bdd45hdCZ3Rpl4VYu22U
2OKeuEvlV3S2cVVYfMWFZg8PERhN+9OZXMIR79aUsPliERKD6tAtlRlXx9b2ORWw
h+eExIcL+ZgL86DRJ1GT3jLRLgCqsr3SpbIBoxxEEnN2YdgjHiAxheHJbzPJbRYh
gxFZpiDUUeVM3bt7z/eA7/VbLiyVQrI=
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:17:48 2026 by rpki-client