Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa
File:                     f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa (raw, json)
Hash identifier:          uDVsCzwCwfYddyQQ2Y/HnSZA/cUF7FrC5miRXYX41tQ=
Subject key identifier:   18:1B:07:5B:D4:D8:37:B9:B4:14:23:83:6B:96:34:58:C4:69:C4:18
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D8EF572793F6E37BCDE06B480
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     19905
IP address blocks:        162.212.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:72:79:3f:6e:37:bc:de:06:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f1bb5663-6ff4-43de-8a85-37f191d41362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:53:44:42:c9:13:06:d5:5c:84:3b:27:bf:
                    f2:e4:06:ce:ee:65:e1:cb:2e:0e:6c:38:6d:0c:58:
                    d9:7e:7e:05:32:d0:d3:89:36:d0:3e:43:8b:f7:ba:
                    2c:d6:e2:96:ad:a3:9b:14:4e:27:c4:21:d1:bc:98:
                    94:14:94:39:b3:4d:ca:76:32:04:22:a6:0e:16:75:
                    e1:b1:62:5e:58:95:17:a1:00:14:43:6b:92:9b:ce:
                    ac:3b:ca:ee:cd:9c:fb:bb:48:3a:af:60:9c:c5:73:
                    63:14:37:11:58:d6:70:f8:1a:42:d2:f8:ae:6c:79:
                    77:9d:ba:90:e2:15:d8:67:a9:18:aa:c2:0a:11:89:
                    7a:4f:63:ba:aa:30:25:06:89:8b:f6:72:e2:17:a8:
                    46:5b:9d:82:39:ef:67:5b:3c:7d:82:dc:3d:ad:04:
                    da:9d:b9:a0:ee:91:48:d4:8a:c9:83:7b:d6:4e:ec:
                    21:2d:a5:1d:ce:96:22:cd:d3:8a:3d:c6:57:a8:c4:
                    d8:7b:64:16:aa:2e:e2:1a:6c:8e:ca:d7:60:89:e9:
                    60:8a:0a:f1:e5:74:51:40:66:53:e1:fa:a1:49:0b:
                    2a:e6:1d:ab:fd:f6:11:f1:9e:b0:7c:73:7b:03:dc:
                    5d:f3:a6:c2:90:6e:ff:52:c0:99:c2:f0:64:13:44:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:07:5B:D4:D8:37:B9:B4:14:23:83:6B:96:34:58:C4:69:C4:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:4b:f4:a7:eb:74:98:92:b4:80:ad:ac:d1:03:25:76:6b:
         28:34:da:ce:a7:71:86:50:60:21:a7:00:22:71:5e:fb:99:36:
         fb:a0:7d:41:ec:8d:0b:e4:7a:1d:62:c9:97:cd:ce:8e:2d:7f:
         ae:6d:0b:c3:f6:7d:3c:57:87:6d:7f:70:86:a5:73:7c:44:09:
         6f:9b:53:fd:04:9c:eb:2d:bc:e7:f4:a0:1a:c0:75:f4:cc:21:
         d7:b4:2c:09:5c:31:8f:28:91:8e:37:57:61:0d:0c:b6:a2:f7:
         ac:b9:dd:0e:22:7a:13:e5:68:f7:68:d8:3a:68:85:06:fd:cb:
         00:eb:92:18:cb:bc:b5:32:9b:6e:f4:c1:83:7d:95:4d:81:93:
         53:14:58:2b:88:84:5c:de:cc:9f:81:15:1b:e3:a0:d4:67:6d:
         11:2b:3f:f4:92:11:59:53:c8:75:3e:c5:d7:15:de:a3:e8:72:
         36:8a:e4:ff:77:2c:2b:c3:f3:53:2d:f0:82:9e:34:74:41:a5:
         84:2e:5e:34:c3:d0:32:ce:32:3f:91:11:4d:e3:00:14:f8:6a:
         47:30:ea:00:6d:d7:19:bd:dc:58:c7:a9:3c:cb:9a:88:ec:78:
         72:09:98:e4:29:a1:58:0b:c9:ae:c6:fb:99:d6:9f:f6:07:40:
         97:84:d7:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9XJ5P243vN4GtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZjFiYjU2NjMtNmZmNC00M2RlLThhODUtMzdmMTkxZDQxMzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybdTRELJEwbVXIQ7J7/y5AbO7mXhyy4ObDht
DFjZfn4FMtDTiTbQPkOL97os1uKWraObFE4nxCHRvJiUFJQ5s03KdjIEIqYOFnXh
sWJeWJUXoQAUQ2uSm86sO8ruzZz7u0g6r2CcxXNjFDcRWNZw+BpC0viubHl3nbqQ
4hXYZ6kYqsIKEYl6T2O6qjAlBomL9nLiF6hGW52COe9nWzx9gtw9rQTanbmg7pFI
1IrJg3vWTuwhLaUdzpYizdOKPcZXqMTYe2QWqi7iGmyOytdgielgigrx5XRRQGZT
4fqhSQsq5h2r/fYR8Z6wfHN7A9xd86bCkG7/UsCZwvBkE0QtuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgbB1vU2De5tBQjg2uWNFjEacQYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZjFhMTBiNGEtYTQ0NS0z
OTZiLWJjM2YtNmFhMzRiZmY1NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotSEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACfQS/Sn63SYkrSArazRAyV2ayg02s6ncYZQYCGnACJxXvuZNvugfUHs
jQvkeh1iyZfNzo4tf65tC8P2fTxXh21/cIalc3xECW+bU/0EnOstvOf0oBrAdfTM
Ide0LAlcMY8okY43V2ENDLai96y53Q4iehPlaPdo2DpohQb9ywDrkhjLvLUym270
wYN9lU2Bk1MUWCuIhFzezJ+BFRvjoNRnbRErP/SSEVlTyHU+xdcV3qPocjaK5P93
LCvD81Mt8IKeNHRBpYQuXjTD0DLOMj+REU3jABT4akcw6gBt1xm93FjHqTzLmojs
eHIJmOQpoVgLya7G+5nWn/YHQJeE1zU=
-----END CERTIFICATE-----
Generated at Wed May 13 08:11:12 2026 by rpki-client