Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa
File:                     f5e48722-9789-3f44-8a5a-cba796b934fd.roa (raw, json)
Hash identifier:          yt8ivCJgXL5YXH5COspMLyMwgR0Ihmj7+R3QHZcYOGM=
Subject key identifier:   56:36:D9:9D:E3:F2:57:62:08:52:20:6F:8D:B6:EE:CF:6C:2C:05:D3
Certificate issuer:       /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
Certificate serial:       010D0C9F4328584F30527D085BA66E7DAD766F00
Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11105
IP address blocks:        192.75.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7d:08:5b:a6:6e:7d:ad:76:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=e06f3b5b-20d5-4f9c-b295-1ec88d4ad86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:08:42:2c:c5:52:37:fb:e7:1e:08:2a:80:
                    25:98:e4:19:30:45:83:f1:b9:c6:a7:25:b8:47:cc:
                    8e:3b:6d:75:36:57:d3:7b:c3:a6:8a:85:5e:60:37:
                    11:2f:42:46:86:eb:5c:5d:8f:d1:e8:f4:ca:96:27:
                    1d:f8:fc:67:0b:53:31:97:36:cc:db:ed:fb:ac:01:
                    e1:c4:6d:90:a8:b5:b4:34:e3:24:b5:4a:4d:c2:32:
                    67:07:57:2a:73:83:2f:a6:af:56:d0:2b:54:bb:16:
                    32:71:dc:f1:16:f4:af:d9:b1:30:0c:d0:9a:40:e7:
                    a6:d5:d1:f6:e4:89:5d:da:5d:e3:f9:30:da:06:6f:
                    11:53:b5:65:2f:4a:81:96:88:79:0a:ef:1b:b8:7f:
                    88:49:c3:a8:38:6b:bc:2e:3a:67:bc:c7:8a:57:2c:
                    79:53:a1:12:f7:e0:d6:68:d8:31:d0:66:0c:ee:17:
                    c7:a5:46:04:8e:d8:19:52:46:53:e4:e9:8a:ce:b7:
                    d3:95:1c:f7:f4:22:59:ee:37:91:68:c6:1b:5d:c4:
                    c2:85:55:2a:29:7d:36:7e:be:ef:1d:c6:f2:18:95:
                    75:f4:88:7e:1d:5e:6e:03:fb:c6:5c:9a:77:d8:29:
                    01:ca:89:fb:07:98:2c:d0:20:68:dd:26:59:19:d6:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:36:D9:9D:E3:F2:57:62:08:52:20:6F:8D:B6:EE:CF:6C:2C:05:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f5e48722-9789-3f44-8a5a-cba796b934fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl

            X509v3 Authority Key Identifier:
                keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:13:30:3f:f4:1b:1e:46:ab:92:60:d8:9b:49:e5:6e:39:e8:
         a6:ef:75:61:2f:ad:51:64:60:e3:7e:97:17:5d:31:a9:25:0d:
         0f:89:1d:35:78:5f:28:fa:f3:0f:c6:bd:9e:72:15:de:ab:c8:
         b8:68:fa:b0:f8:36:bd:ee:b5:3a:38:76:9a:e6:fc:67:cd:f5:
         5b:bf:43:e8:e1:65:1b:b2:3d:74:ce:03:df:9c:34:c4:bd:ef:
         b2:d5:ca:72:a8:ce:c0:45:37:21:df:fa:b3:de:4d:d8:fe:47:
         60:e4:dd:2a:24:1b:4f:64:2d:55:f7:3a:35:a9:5e:cc:89:7f:
         49:2a:97:02:01:18:7d:27:0d:ff:81:57:56:21:76:6d:91:1c:
         2c:a8:ec:bf:44:6f:9e:2f:c5:a5:25:30:a4:6a:08:81:45:0c:
         20:57:94:79:5a:92:59:bb:6e:16:52:13:f5:7e:f1:9b:b7:13:
         61:20:96:0f:50:28:e4:83:cb:d2:64:c9:3a:2a:dc:68:b4:b9:
         88:9d:e5:55:4c:e3:0b:1b:8b:65:e2:13:f4:ee:db:4e:b4:49:
         7d:87:07:39:53:21:4c:99:e9:47:a0:cd:18:47:4b:5b:0a:34:
         4c:c5:eb:7e:49:39:fb:c9:67:26:c7:ae:d1:7a:15:17:68:4f:
         ca:bc:ca:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUn0IW6Zufa12bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYxYTc0YmEtYzlkNy00YTlmLThkZWYtN2IwMTI0YTIw
NGE3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZTA2ZjNiNWItMjBkNS00ZjljLWIyOTUtMWVjODhkNGFkODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylEIQizFUjf75x4IKoAlmOQZMEWD8bnGpyW4
R8yOO211NlfTe8OmioVeYDcRL0JGhutcXY/R6PTKlicd+PxnC1MxlzbM2+37rAHh
xG2QqLW0NOMktUpNwjJnB1cqc4Mvpq9W0CtUuxYycdzxFvSv2bEwDNCaQOem1dH2
5Ild2l3j+TDaBm8RU7VlL0qBloh5Cu8buH+IScOoOGu8LjpnvMeKVyx5U6ES9+DW
aNgx0GYM7hfHpUYEjtgZUkZT5OmKzrfTlRz39CJZ7jeRaMYbXcTChVUqKX02fr7v
HcbyGJV19Ih+HV5uA/vGXJp32CkByon7B5gs0CBo3SZZGdYdzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFY22Z3j8ldiCFIgb4227s9sLAXTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNjFh
NzRiYS1jOWQ3LTRhOWYtOGRlZi03YjAxMjRhMjA0YTcvZjVlNDg3MjItOTc4OS0z
ZjQ0LThhNWEtY2JhNzk2YjkzNGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDYxYTc0YmEtYzlkNy00YTlmLThk
ZWYtN2IwMTI0YTIwNGE3L2Q2MWE3NGJhLWM5ZDctNGE5Zi04ZGVmLTdiMDEyNGEy
MDRhNy5jcmwwHwYDVR0jBBgwFoAUB8ozYLbpbCZB/kEkYHrOJe2aiLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kNjFhNzRiYS1jOWQ3LTRhOWYtOGRlZi03YjAx
MjRhMjA0YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwEvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADATMD/0Gx5Gq5Jg2JtJ5W456KbvdWEvrVFkYON+lxddMaklDQ+JHTV4
Xyj68w/GvZ5yFd6ryLho+rD4Nr3utTo4dprm/GfN9Vu/Q+jhZRuyPXTOA9+cNMS9
77LVynKozsBFNyHf+rPeTdj+R2Dk3SokG09kLVX3OjWpXsyJf0kqlwIBGH0nDf+B
V1Yhdm2RHCyo7L9Eb54vxaUlMKRqCIFFDCBXlHlaklm7bhZSE/V+8Zu3E2Eglg9Q
KOSDy9JkyToq3Gi0uYid5VVM4wsbi2XiE/Tu2060SX2HBzlTIUyZ6UegzRhHS1sK
NEzF635JOfvJZybHrtF6FRdoT8q8yi0=
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:13:57 2026 by rpki-client