Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c58557c-174b-3d36-93e0-310cc5e16adb.roa
File:                     1c58557c-174b-3d36-93e0-310cc5e16adb.roa (raw, json)
Hash identifier:          1Pt+mvdvw5os6hIyBQHU5TpZxafFqEWca2jplvqf5nA=
Subject key identifier:   D5:D0:3A:33:C4:14:B2:C5:16:4F:AB:53:0A:BE:AB:96:A1:AB:2F:DD
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F560E066D67FF1F2F05EDF100
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c58557c-174b-3d36-93e0-310cc5e16adb.roa
Signing time:             Tue 29 Sep 2026 13:23:14 +0000
ROA not before:           Tue 29 Sep 2026 13:23:14 +0000
ROA not after:            Mon 28 Dec 2026 14:23:14 +0000
asID:                     62904
IP address blocks:        173.232.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:0e:06:6d:67:ff:1f:2f:05:ed:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 13:23:14 2026 GMT
            Not After : Dec 28 14:23:14 2026 GMT
        Subject: CN=1d34cf0a-b032-438b-b3c5-5ecdf56621e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:a1:0f:f4:b9:09:7b:3a:4d:57:dc:f9:4a:
                    f4:6c:b7:e0:69:e9:bc:92:cb:d9:ac:7b:b5:43:ef:
                    0d:35:95:79:ed:2b:f2:4b:8c:b1:ba:55:2d:f9:69:
                    00:75:73:ad:de:50:67:60:81:7f:5d:be:bf:21:02:
                    f6:c9:4a:a2:b8:d7:e7:03:62:c2:ea:2d:a3:b9:8f:
                    6b:66:f6:e8:a7:db:ca:68:6e:f3:c1:e8:c3:55:d5:
                    79:a4:2f:f5:97:1f:79:8b:3f:93:c2:71:46:10:39:
                    f6:84:ee:76:61:cf:1e:98:8a:61:aa:fa:de:6a:66:
                    96:41:f6:3b:d4:19:90:15:07:9b:34:e5:dd:e1:c7:
                    3f:70:a2:7b:f0:12:85:b7:83:98:bd:9a:40:e2:cc:
                    fa:00:0f:87:33:87:66:6d:e7:57:80:50:76:fc:f8:
                    f0:fb:46:53:e1:19:b9:b3:da:ba:34:be:da:12:a1:
                    53:62:88:87:4a:3f:0a:8f:b9:d8:c8:fc:eb:3c:c9:
                    90:c4:cb:8a:38:43:74:71:ee:c7:c4:08:80:a0:16:
                    e8:56:c9:61:a7:18:19:54:ee:4a:58:52:0f:b8:15:
                    dc:ab:6c:4b:dc:bd:14:93:77:68:c3:85:81:2f:9c:
                    88:3f:62:21:04:eb:95:48:4c:fe:59:f2:b4:99:3b:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D0:3A:33:C4:14:B2:C5:16:4F:AB:53:0A:BE:AB:96:A1:AB:2F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1c58557c-174b-3d36-93e0-310cc5e16adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:8d:46:f2:d5:ad:36:e8:20:84:d6:dd:39:71:65:e3:31:
         51:ad:26:23:56:a2:96:59:d2:fd:87:56:a4:06:78:f2:3b:5a:
         68:d7:7c:f9:bd:16:04:c6:18:c4:5e:18:6f:fc:5d:33:69:94:
         e1:8a:9a:3b:58:1b:3d:32:be:de:39:d2:f0:2b:1a:56:10:0c:
         65:12:6a:f0:b3:47:ac:7e:d7:aa:ee:42:0e:e2:cd:58:39:b1:
         4a:fd:17:b8:74:ea:b5:cc:36:d9:0e:1d:3e:6b:f5:06:93:dd:
         03:db:b3:b6:80:0d:dc:6e:d3:d6:f3:64:1e:d1:ec:7a:fe:1d:
         d5:a1:cb:24:05:1e:ad:84:a2:58:32:6f:3e:d4:c2:2b:69:5c:
         e3:a7:19:1b:b3:78:09:d8:87:ee:54:5d:78:aa:49:09:f3:33:
         a5:13:ca:e8:d1:0c:25:f1:e6:ae:12:20:84:58:e0:7e:ea:30:
         f0:ee:81:94:1f:6c:ef:be:f1:56:8f:77:9b:4c:28:c4:52:0c:
         16:ca:6d:4c:c1:68:76:9f:1b:ee:22:01:26:50:1f:9b:8f:ac:
         31:ce:7a:33:27:3f:cb:d6:bd:a0:44:97:b3:d5:ea:d3:1d:93:
         b2:72:39:bd:83:19:5d:c8:a0:ef:b3:bd:a8:81:1d:3f:08:25:
         9e:bd:38:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WDgZtZ/8fLwXt8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyOTEzMjMxNFoXDTI2MTIyODE0MjMxNFowLzEtMCsGA1UEAxMk
MWQzNGNmMGEtYjAzMi00MzhiLWIzYzUtNWVjZGY1NjYyMWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubShD/S5CXs6TVfc+Ur0bLfgaem8ksvZrHu1
Q+8NNZV57SvyS4yxulUt+WkAdXOt3lBnYIF/Xb6/IQL2yUqiuNfnA2LC6i2juY9r
Zvbop9vKaG7zwejDVdV5pC/1lx95iz+TwnFGEDn2hO52Yc8emIphqvreamaWQfY7
1BmQFQebNOXd4cc/cKJ78BKFt4OYvZpA4sz6AA+HM4dmbedXgFB2/Pjw+0ZT4Rm5
s9q6NL7aEqFTYoiHSj8Kj7nYyPzrPMmQxMuKOEN0ce7HxAiAoBboVslhpxgZVO5K
WFIPuBXcq2xL3L0Uk3dow4WBL5yIP2IhBOuVSEz+WfK0mTtpCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXQOjPEFLLFFk+rUwq+q5ahqy/dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMWM1ODU1N2MtMTc0Yi0z
ZDM2LTkzZTAtMzEwY2M1ZTE2YWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXNjUby1a026CCE1t05cWXjMVGtJiNWopZZ0v2HVqQGePI7WmjXfPm9
FgTGGMReGG/8XTNplOGKmjtYGz0yvt450vArGlYQDGUSavCzR6x+16ruQg7izVg5
sUr9F7h06rXMNtkOHT5r9QaT3QPbs7aADdxu09bzZB7R7Hr+HdWhyyQFHq2Eolgy
bz7UwitpXOOnGRuzeAnYh+5UXXiqSQnzM6UTyujRDCXx5q4SIIRY4H7qMPDugZQf
bO++8VaPd5tMKMRSDBbKbUzBaHafG+4iASZQH5uPrDHOejMnP8vWvaBEl7PV6tMd
k7JyOb2DGV3IoO+zvaiBHT8IJZ69OHE=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:17:33 2026 by rpki-client