Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa
File:                     fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa (raw, json)
Hash identifier:          2qdj+wo8/24qAFIE187x2tqi80I6w14kar5zvX7r1XU=
Subject key identifier:   73:24:B6:A9:92:A1:65:19:47:68:FA:13:5A:38:F2:3D:CB:C8:CE:C9
Certificate issuer:       /CN=96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3
Certificate serial:       010D0C9F4328584DB7703AC07BB29C9AA5435980
Authority key identifier: 61:8C:C7:EF:EB:B0:91:A5:48:1A:0E:1F:5B:02:D1:C1:3E:56:5F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     396982
IP address blocks:        204.154.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3a:c0:7b:b2:9c:9a:a5:43:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=13abc1e3-0b18-4ee3-8ef7-ae9832123321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:bd:3b:37:34:b6:b3:6b:2f:b9:2a:e1:d2:
                    f6:41:c4:37:79:fa:66:35:32:a5:12:5f:dc:c1:0b:
                    32:87:30:7a:ac:e8:69:a4:4d:d9:e3:6f:de:07:b4:
                    83:bd:19:c9:87:ab:84:63:cc:c1:3d:c0:7b:04:26:
                    98:6b:f9:d4:17:71:1a:7a:24:b9:64:6c:b9:56:c8:
                    f9:1a:9a:15:b1:6d:f5:fc:d7:09:23:76:21:7c:b5:
                    1e:ea:5c:1e:ef:6b:e4:bc:99:55:a4:c3:d5:32:86:
                    cb:de:39:60:9d:5a:ec:e0:78:af:98:9a:18:d9:92:
                    8f:f2:a5:6e:63:a8:e7:97:e8:ab:7e:5a:a3:71:c8:
                    91:fe:0f:71:38:a2:82:27:e3:bd:d0:d9:6b:f5:21:
                    b9:13:ec:1b:9a:de:5e:64:fd:59:4a:de:21:1d:0c:
                    8d:c2:f1:d1:b1:49:74:cf:b1:3f:74:00:d7:e4:c9:
                    68:bd:ef:20:a2:29:dd:c4:61:17:f7:34:d0:d8:35:
                    cd:b2:f7:99:4c:0a:7c:df:f6:14:65:64:d0:35:cf:
                    66:4a:83:06:38:a9:fc:0f:72:57:82:b8:68:6e:6d:
                    a8:78:2b:64:ed:79:cc:bd:94:db:2f:56:41:71:d9:
                    c9:e6:08:53:1e:54:2b:8c:bc:2f:01:2b:79:00:65:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:B6:A9:92:A1:65:19:47:68:FA:13:5A:38:F2:3D:CB:C8:CE:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/fa628fca-a1e2-3440-9f0c-c74e23c7ad63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.crl

            X509v3 Authority Key Identifier:
                keyid:61:8C:C7:EF:EB:B0:91:A5:48:1A:0E:1F:5B:02:D1:C1:3E:56:5F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/96721e5b-fa45-4f94-8ad5-4f8ebf2c39c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.154.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:93:e1:3c:8e:b4:ad:81:bf:9a:33:38:00:9c:5a:c3:bd:
         08:03:e8:be:51:cf:ac:2b:35:fd:60:44:c7:f0:ec:3d:7b:f0:
         a8:f3:b1:15:3e:b4:19:5a:40:39:62:97:cf:93:37:1a:82:0c:
         dd:d0:70:c4:0d:df:f8:5a:67:1d:14:69:37:93:39:02:ef:bf:
         e3:ad:19:53:db:3a:0d:b8:51:f5:e3:52:f5:8c:8d:57:31:dd:
         0c:76:87:4b:31:be:7a:02:e0:73:2d:fc:1f:4e:88:cc:08:50:
         cd:67:83:06:8d:bb:a7:44:37:91:e8:56:78:0e:87:83:78:bc:
         e1:35:1e:7e:67:16:2d:26:d1:eb:d6:5c:7e:06:4e:7c:de:e2:
         0f:18:34:12:e9:5e:ba:35:4d:4d:ba:15:d7:2a:7b:80:31:b2:
         31:7d:56:a2:d0:b3:ca:fc:ba:89:ee:a7:76:d6:88:43:fc:0f:
         40:c0:92:8e:b6:f2:d9:e9:57:4d:c8:af:b0:0c:69:c4:ae:43:
         ce:b8:50:ae:d3:9b:2b:c0:ef:70:09:64:ed:6e:b7:07:26:95:
         a5:c5:a3:d4:dc:30:df:de:7a:25:c7:84:0c:00:c7:6d:fa:a7:
         d1:06:0a:3a:07:6a:10:1b:23:fc:90:5e:a7:f0:72:e7:b1:dc:
         5f:58:6d:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDrAe7KcmqVDWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3MjFlNWItZmE0NS00Zjk0LThhZDUtNGY4ZWJmMmMz
OWMzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
MTNhYmMxZTMtMGIxOC00ZWUzLThlZjctYWU5ODMyMTIzMzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xi9Ozc0trNrL7kq4dL2QcQ3efpmNTKlEl/c
wQsyhzB6rOhppE3Z42/eB7SDvRnJh6uEY8zBPcB7BCaYa/nUF3EaeiS5ZGy5Vsj5
GpoVsW31/NcJI3YhfLUe6lwe72vkvJlVpMPVMobL3jlgnVrs4HivmJoY2ZKP8qVu
Y6jnl+irflqjcciR/g9xOKKCJ+O90Nlr9SG5E+wbmt5eZP1ZSt4hHQyNwvHRsUl0
z7E/dADX5Mlove8goindxGEX9zTQ2DXNsveZTAp83/YUZWTQNc9mSoMGOKn8D3JX
grhobm2oeCtk7XnMvZTbL1ZBcdnJ5ghTHlQrjLwvASt5AGUlxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMktqmSoWUZR2j6E1o48j3LyM7JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85Njcy
MWU1Yi1mYTQ1LTRmOTQtOGFkNS00ZjhlYmYyYzM5YzMvZmE2MjhmY2EtYTFlMi0z
NDQwLTlmMGMtYzc0ZTIzYzdhZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTY3MjFlNWItZmE0NS00Zjk0LThh
ZDUtNGY4ZWJmMmMzOWMzLzk2NzIxZTViLWZhNDUtNGY5NC04YWQ1LTRmOGViZjJj
MzljMy5jcmwwHwYDVR0jBBgwFoAUYYzH7+uwkaVIGg4fWwLRwT5WX88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi85NjcyMWU1Yi1mYTQ1LTRmOTQtOGFkNS00Zjhl
YmYyYzM5YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJpeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABomk+E8jrStgb+aMzgAnFrDvQgD6L5Rz6wrNf1gRMfw7D178KjzsRU+
tBlaQDlil8+TNxqCDN3QcMQN3/haZx0UaTeTOQLvv+OtGVPbOg24UfXjUvWMjVcx
3Qx2h0sxvnoC4HMt/B9OiMwIUM1ngwaNu6dEN5HoVngOh4N4vOE1Hn5nFi0m0evW
XH4GTnze4g8YNBLpXro1TU26Fdcqe4AxsjF9VqLQs8r8uonup3bWiEP8D0DAko62
8tnpV03Ir7AMacSuQ864UK7TmyvA73AJZO1utwcmlaXFo9TcMN/eeiXHhAwAx236
p9EGCjoHahAbI/yQXqfwcuex3F9YbSA=
-----END CERTIFICATE-----
Generated at Wed May 13 00:52:02 2026 by rpki-client