Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/0e114585-c900-38be-bc59-5d1f9a70c7fa.roa
File:                     0e114585-c900-38be-bc59-5d1f9a70c7fa.roa (raw, json)
Hash identifier:          4YhAkzK9/xgi13FZUG8X4EOGSBA0Fsgq06/gY2B6ZnM=
Subject key identifier:   F3:50:BB:42:10:DA:FA:C4:94:98:20:00:0F:3E:98:89:86:97:AA:EB
Certificate issuer:       /CN=423bfb5d-16be-44f8-b1ec-dead1152a677
Certificate serial:       010D0C9F4328584DADAAEDE04BF53E332A254E40
Authority key identifier: A5:A6:4D:5C:AB:FD:D6:89:F5:0A:47:0F:1B:BC:66:5D:54:9F:43:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/0e114585-c900-38be-bc59-5d1f9a70c7fa.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     399725
IP address blocks:        134.128.224.0/19 maxlen: 24
                          167.94.192.0/22 maxlen: 24
                          216.108.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ed:e0:4b:f5:3e:33:2a:25:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423bfb5d-16be-44f8-b1ec-dead1152a677
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=5f358492-3ece-4f5d-9142-b5017a3a61c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:2e:f8:b3:0d:fe:89:85:81:96:e5:c0:ff:
                    42:15:ed:eb:9b:f7:d0:54:92:f4:e6:03:af:18:44:
                    a1:1b:9c:ea:8d:a4:7c:79:76:37:66:a6:74:ba:62:
                    5e:46:eb:d1:80:44:98:3c:0b:59:c8:27:2b:72:a2:
                    e3:df:de:b8:9b:2a:4d:72:55:5d:6d:8f:e5:2b:e3:
                    2b:d2:df:75:a8:83:46:bc:79:73:f5:8f:0f:1e:e5:
                    a0:f7:b1:e0:19:45:4b:10:51:2b:4a:36:3d:90:71:
                    ec:b3:a7:97:ae:e5:6b:7f:3a:f7:e3:44:1f:bb:d1:
                    4e:bf:5a:ba:50:9e:44:05:ee:50:d1:38:b4:9a:7e:
                    61:12:a0:dd:76:85:f0:cf:24:43:3d:8a:cb:78:87:
                    3c:6c:19:05:5a:93:23:38:a2:a1:e2:fb:43:a8:9f:
                    19:74:d2:75:f5:b8:db:3b:34:ff:a8:e9:93:d6:f7:
                    c8:e0:74:c1:a0:bf:6e:d9:70:79:ec:5a:33:9b:db:
                    76:31:8c:fe:ca:bf:ed:19:97:8c:a0:72:ae:e2:4e:
                    79:71:e2:29:59:0d:26:8c:a1:55:94:67:25:d9:26:
                    03:40:31:af:76:92:9d:0e:a5:72:56:a1:f7:f5:37:
                    87:12:a8:e3:26:6a:00:b8:d1:d7:9a:cc:fa:08:36:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:BB:42:10:DA:FA:C4:94:98:20:00:0F:3E:98:89:86:97:AA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/0e114585-c900-38be-bc59-5d1f9a70c7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677/423bfb5d-16be-44f8-b1ec-dead1152a677.crl

            X509v3 Authority Key Identifier:
                keyid:A5:A6:4D:5C:AB:FD:D6:89:F5:0A:47:0F:1B:BC:66:5D:54:9F:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/423bfb5d-16be-44f8-b1ec-dead1152a677.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.128.224.0/19
                  167.94.192.0/22
                  216.108.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:93:26:f2:73:fb:be:89:b7:e9:1a:32:f0:0f:16:b7:65:5b:
         a8:91:4a:9b:73:a1:f5:01:ff:0c:b4:ee:3c:88:a8:f3:34:95:
         cf:03:46:a2:c3:fc:78:de:98:d9:88:6c:63:62:7d:00:cd:3a:
         6d:0f:0d:76:42:7a:fe:28:16:80:bf:49:a4:dd:95:ea:5f:0b:
         a1:7a:b0:ca:b2:20:ff:75:7a:23:0d:3d:fc:84:59:f8:4d:8b:
         1e:c4:11:d1:d9:fd:01:2e:78:6f:6d:5a:06:c0:cf:a3:37:e2:
         03:78:2a:eb:d1:7e:ca:2a:8e:bc:db:f1:0b:cf:30:42:8c:29:
         24:d5:c0:87:af:ed:b4:f8:20:2a:98:f5:36:6c:ba:67:a2:cd:
         5e:03:7c:b8:94:0c:5d:05:e0:e6:e6:25:a1:b2:03:ed:04:70:
         f5:27:be:7c:94:07:88:4d:4e:83:0c:4e:7e:01:12:2b:85:13:
         ea:b7:16:39:e8:b1:d9:2e:b5:37:d3:cd:72:98:7f:17:f5:78:
         c5:80:59:3a:8a:54:ce:1e:81:2b:b6:6e:8c:4b:75:67:21:10:
         45:c5:77:08:ad:6c:9a:ff:36:af:29:1c:8c:b8:55:6a:94:bc:
         ac:42:30:9b:2d:bb:e5:87:ae:26:e8:27:ee:fb:c7:8c:f2:4a:
         1c:ed:37:4d
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2tqu3gS/U+MyolTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIzYmZiNWQtMTZiZS00NGY4LWIxZWMtZGVhZDExNTJh
Njc3MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk
NWYzNTg0OTItM2VjZS00ZjVkLTkxNDItYjUwMTdhM2E2MWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQu+LMN/omFgZblwP9CFe3rm/fQVJL05gOv
GEShG5zqjaR8eXY3ZqZ0umJeRuvRgESYPAtZyCcrcqLj3964mypNclVdbY/lK+Mr
0t91qINGvHlz9Y8PHuWg97HgGUVLEFErSjY9kHHss6eXruVrfzr340Qfu9FOv1q6
UJ5EBe5Q0Ti0mn5hEqDddoXwzyRDPYrLeIc8bBkFWpMjOKKh4vtDqJ8ZdNJ19bjb
OzT/qOmT1vfI4HTBoL9u2XB57Fozm9t2MYz+yr/tGZeMoHKu4k55ceIpWQ0mjKFV
lGcl2SYDQDGvdpKdDqVyVqH39TeHEqjjJmoAuNHXmsz6CDahEQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFPNQu0IQ2vrElJggAA8+mImGl6rrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjNi
ZmI1ZC0xNmJlLTQ0ZjgtYjFlYy1kZWFkMTE1MmE2NzcvMGUxMTQ1ODUtYzkwMC0z
OGJlLWJjNTktNWQxZjlhNzBjN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDIzYmZiNWQtMTZiZS00NGY4LWIx
ZWMtZGVhZDExNTJhNjc3LzQyM2JmYjVkLTE2YmUtNDRmOC1iMWVjLWRlYWQxMTUy
YTY3Ny5jcmwwHwYDVR0jBBgwFoAUpaZNXKv91on1CkcPG7xmXVSfQwcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjNiZmI1ZC0xNmJlLTQ0ZjgtYjFlYy1kZWFk
MTE1MmE2NzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFhoDgAwQC
p17AAwQB2GzYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAaTJvJz+76Jt+kaMvAPFrdlW6iRSptzofUB/wy0
7jyIqPM0lc8DRqLD/HjemNmIbGNifQDNOm0PDXZCev4oFoC/SaTdlepfC6F6sMqy
IP91eiMNPfyEWfhNix7EEdHZ/QEueG9tWgbAz6M34gN4KuvRfsoqjrzb8QvPMEKM
KSTVwIev7bT4ICqY9TZsumeizV4DfLiUDF0F4ObmJaGyA+0EcPUnvnyUB4hNToMM
Tn4BEiuFE+q3FjnosdkutTfTzXKYfxf1eMWAWTqKVM4egSu2boxLdWchEEXFdwit
bJr/Nq8pHIy4VWqUvKxCMJstu+WHriboJ+77x4zyShztN00=
-----END CERTIFICATE-----
Generated at Wed May 13 05:07:03 2026 by rpki-client