Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c021c230-f2ea-37b8-ab46-993529d86e9b.roa
File:                     c021c230-f2ea-37b8-ab46-993529d86e9b.roa (raw, json)
Hash identifier:          8dKZPoRUzlLsLU7uGVK4+yaKN0LbQCcuJz56pt2ObW0=
Subject key identifier:   7A:07:ED:E0:35:9D:56:DD:27:58:FF:73:03:4F:55:F7:F7:3B:C9:EF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6C5835B73864F8756CD94B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c021c230-f2ea-37b8-ab46-993529d86e9b.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     5065
IP address blocks:        216.132.100.0/24 maxlen: 24
                          216.132.101.0/24 maxlen: 24
                          216.132.102.0/24 maxlen: 24
                          216.132.103.0/24 maxlen: 24
                          216.132.104.0/24 maxlen: 24
                          216.132.105.0/24 maxlen: 24
                          216.132.106.0/24 maxlen: 24
                          216.132.107.0/24 maxlen: 24
                          216.132.108.0/24 maxlen: 24
                          216.132.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:35:b7:38:64:f8:75:6c:d9:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=a54c2ca6-69e3-4c32-8891-a8c9aa176852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:bd:83:e9:42:64:3d:39:7d:be:0a:38:c1:
                    cc:36:f2:de:c8:8e:18:b8:c6:12:fd:bd:a6:49:42:
                    55:a4:04:9d:02:16:5b:4f:32:d4:81:a8:5a:6f:c3:
                    5b:6e:ce:50:cf:cb:84:ea:57:b0:4f:50:6e:19:db:
                    74:11:61:32:09:3d:ad:60:cb:cb:64:d7:81:70:bc:
                    d7:88:93:1f:d3:12:da:8c:d5:79:a3:c4:db:bf:2c:
                    c6:58:c8:1c:72:c4:db:06:d4:9d:b6:a2:48:4d:8e:
                    5a:91:e6:9a:68:db:d7:f8:df:96:81:6f:e4:e0:8c:
                    37:84:3d:5b:0e:49:ea:78:d0:2d:c4:2b:ea:60:8f:
                    df:0f:23:dc:92:22:1b:09:00:18:c3:5b:63:bc:97:
                    5b:2f:0c:6c:e4:44:f5:f3:85:00:53:2d:93:2f:f6:
                    74:80:fb:e6:d5:1e:85:8d:50:17:ba:e3:11:9c:11:
                    0f:09:ee:0e:39:32:13:01:6f:54:0b:28:cd:73:66:
                    8e:1c:ce:32:5a:f6:09:0a:a8:6a:c7:e2:37:cd:b1:
                    84:54:de:91:51:a7:5e:6f:d4:03:64:22:03:b6:48:
                    76:bf:80:47:24:51:75:92:2b:3f:68:e8:4f:b0:fe:
                    96:d8:e6:c9:65:b0:0f:e5:75:01:7e:69:79:ba:4d:
                    5c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:07:ED:E0:35:9D:56:DD:27:58:FF:73:03:4F:55:F7:F7:3B:C9:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c021c230-f2ea-37b8-ab46-993529d86e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.100.0-216.132.109.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:65:de:48:4b:84:f7:0f:57:7f:f5:6c:a7:18:b6:95:6f:
         fe:4a:cb:ac:50:e9:56:d2:7a:ab:58:75:53:fd:0c:03:c0:ef:
         17:24:28:b6:28:64:cf:e4:24:80:c6:3e:9b:b1:21:4e:c9:c7:
         ed:1c:b6:e3:9f:22:32:2a:91:a1:92:71:a8:2b:71:35:f7:28:
         c0:23:5b:38:8e:c6:7d:06:65:3f:d7:10:7d:11:c7:fc:02:95:
         33:91:c8:ff:78:f3:37:b8:62:52:a6:2c:7e:9c:96:f2:7c:63:
         b9:38:46:05:ab:16:ef:9b:4b:dd:76:11:28:e4:ae:35:3a:76:
         3a:b3:a3:a9:79:be:e5:6c:d1:4d:e3:48:f8:27:4c:f1:89:a6:
         bc:38:f3:90:0e:a2:f2:0e:b3:c9:2a:0c:55:1b:37:d5:d8:ec:
         67:e7:40:55:56:c4:e7:31:26:6f:e1:69:95:78:00:5c:ee:b2:
         22:30:3a:81:8f:18:c7:c1:13:53:4d:8d:98:bd:78:f6:9e:84:
         78:08:61:d7:a9:62:64:96:ee:0c:8b:b8:d9:77:f3:95:c8:24:
         0e:87:42:83:aa:2d:a5:e5:b1:a9:02:ff:43:56:07:52:a0:10:
         b9:3d:b4:28:5d:31:b0:23:4c:2a:80:b7:eb:63:ff:24:6d:4a:
         91:3c:22:1b
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9sWDW3OGT4dWzZSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk
YTU0YzJjYTYtNjllMy00YzMyLTg4OTEtYThjOWFhMTc2ODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5q9g+lCZD05fb4KOMHMNvLeyI4YuMYS/b2m
SUJVpASdAhZbTzLUgahab8Nbbs5Qz8uE6lewT1BuGdt0EWEyCT2tYMvLZNeBcLzX
iJMf0xLajNV5o8TbvyzGWMgccsTbBtSdtqJITY5akeaaaNvX+N+WgW/k4Iw3hD1b
DknqeNAtxCvqYI/fDyPckiIbCQAYw1tjvJdbLwxs5ET184UAUy2TL/Z0gPvm1R6F
jVAXuuMRnBEPCe4OOTITAW9UCyjNc2aOHM4yWvYJCqhqx+I3zbGEVN6RUadeb9QD
ZCIDtkh2v4BHJFF1kis/aOhPsP6W2ObJZbAP5XUBfml5uk1cDwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHoH7eA1nVbdJ1j/cwNPVff3O8nvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzAyMWMyMzAtZjJlYS0z
N2I4LWFiNDYtOTkzNTI5ZDg2ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALYhGQD
BAHYhGwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAS8Rl3khLhPcPV3/1bKcYtpVv/krLrFDpVtJ6q1h1U/0M
A8DvFyQotihkz+QkgMY+m7EhTsnH7Ry2458iMiqRoZJxqCtxNfcowCNbOI7GfQZl
P9cQfRHH/AKVM5HI/3jzN7hiUqYsfpyW8nxjuThGBasW75tL3XYRKOSuNTp2OrOj
qXm+5WzRTeNI+CdM8YmmvDjzkA6i8g6zySoMVRs31djsZ+dAVVbE5zEmb+FplXgA
XO6yIjA6gY8Yx8ETU02NmL149p6EeAhh16liZJbuDIu42XfzlcgkDodCg6otpeWx
qQL/Q1YHUqAQuT20KF0xsCNMKoC362P/JG1KkTwiGw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:33 2026 by rpki-client