Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa
File:                     7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa (raw, json)
Hash identifier:          yUznVmJbe7VhIQyhLlWqy+9G2V/hxWu3VXpHRiVlxoI=
Subject key identifier:   9A:A2:D5:47:8D:BD:86:75:F1:B9:F0:BC:0F:4F:B9:3B:2B:D1:83:D9
Certificate issuer:       /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial:       010D0C9F4328584DC29AE4FC5DF4823D89A829E0
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     30153
IP address blocks:        209.50.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e4:fc:5d:f4:82:3d:89:a8:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=1d497962-3727-4f82-9034-ab22c66c55ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:0e:e0:e1:6f:8c:97:4a:71:6e:34:03:81:
                    fb:6e:46:4a:3d:24:90:a5:88:99:40:11:42:b1:2b:
                    d3:3e:60:e7:00:33:df:a1:9c:70:91:41:ce:01:ef:
                    e6:44:7e:29:d4:89:61:f8:04:75:42:d0:d5:e1:ba:
                    91:96:b6:fe:23:ae:3c:7f:ec:60:8b:98:68:eb:ba:
                    f0:95:3f:5f:3e:ab:a7:0f:2d:ec:78:5c:6d:ac:d9:
                    b2:26:3f:1c:43:aa:50:4c:da:37:c0:7a:0e:f7:d7:
                    15:de:4f:b6:ef:69:7d:8a:ee:3e:a5:16:de:40:36:
                    d2:56:48:28:6f:fc:77:75:4f:77:e8:aa:d1:93:2c:
                    e2:2d:d9:f0:e7:ac:12:0d:2b:58:cf:7e:f7:4b:14:
                    5d:6b:71:59:9e:57:c4:6c:3b:55:31:0c:bc:10:76:
                    09:83:71:10:e0:b8:82:64:b5:1f:2d:20:f3:3a:c4:
                    e7:cb:6f:3f:ec:29:7c:31:5c:d0:f8:0a:b1:2a:45:
                    2f:7b:21:9a:5c:59:a7:a2:ca:42:e2:23:fa:36:02:
                    94:9a:8f:68:34:60:e4:10:ca:61:4c:c6:ee:8a:37:
                    17:87:2f:68:7c:1f:e6:47:8f:a7:b7:fd:b0:9f:60:
                    ca:c1:e9:ba:7a:dc:99:d4:4e:19:56:ee:17:09:b2:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A2:D5:47:8D:BD:86:75:F1:B9:F0:BC:0F:4F:B9:3B:2B:D1:83:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7b1e65e5-f9c9-3a75-8df9-d2316315cf45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl

            X509v3 Authority Key Identifier:
                keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:1e:a5:60:a6:0f:05:4c:76:a5:b7:bb:0e:9b:5f:3b:e7:
         10:7e:9d:6a:a9:99:a7:78:d9:49:00:55:12:18:f0:51:b5:ce:
         43:5a:ad:5b:73:33:a0:c8:d9:b6:6c:e2:da:ff:49:88:ac:a4:
         3c:18:9c:32:60:a6:58:e5:7b:77:de:13:2a:fd:40:00:43:25:
         3d:cf:0f:46:f3:4b:b2:5f:e0:c0:24:99:55:66:ef:9b:bc:16:
         41:73:7c:f6:90:f4:91:01:37:13:fd:46:0f:f4:9b:1a:76:d2:
         ee:66:77:81:0e:80:5a:79:d0:b9:7f:2e:f3:01:33:9e:a8:c8:
         4e:fd:aa:05:a7:e6:f0:e6:ec:f2:07:21:e9:8a:6c:03:b0:ae:
         79:2b:d1:62:29:93:5e:3e:93:e1:9a:9a:37:24:bb:3d:c0:3d:
         28:9f:7a:25:0f:43:fb:3e:f2:ce:11:eb:44:1b:c3:a2:97:04:
         d3:e9:f3:8a:83:ce:98:99:06:8f:27:2d:90:3a:ce:7e:09:c0:
         af:c0:a5:ed:7d:33:57:22:6a:26:b4:d1:24:75:e9:25:b8:f8:
         c7:0d:a0:80:c9:23:84:c8:8d:11:a3:f0:53:01:ea:d7:b9:c2:
         f1:1a:17:dd:bc:b5:23:5f:87:99:c0:83:33:cd:f4:2e:4b:12:
         8f:06:e7:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuT8XfSCPYmoKeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi
YWZmMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
MWQ0OTc5NjItMzcyNy00ZjgyLTkwMzQtYWIyMmM2NmM1NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD0O4OFvjJdKcW40A4H7bkZKPSSQpYiZQBFC
sSvTPmDnADPfoZxwkUHOAe/mRH4p1Ilh+AR1QtDV4bqRlrb+I648f+xgi5ho67rw
lT9fPqunDy3seFxtrNmyJj8cQ6pQTNo3wHoO99cV3k+272l9iu4+pRbeQDbSVkgo
b/x3dU936KrRkyziLdnw56wSDStYz373SxRda3FZnlfEbDtVMQy8EHYJg3EQ4LiC
ZLUfLSDzOsTny28/7Cl8MVzQ+AqxKkUveyGaXFmnospC4iP6NgKUmo9oNGDkEMph
TMbuijcXhy9ofB/mR4+nt/2wn2DKwem6etyZ1E4ZVu4XCbI/1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqi1UeNvYZ18bnwvA9PuTsr0YPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm
ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvN2IxZTY1ZTUtZjljOS0z
YTc1LThkZjktZDIzMTYzMTVjZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0
ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1
YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj
YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACr3HqVgpg8FTHalt7sOm1875xB+nWqpmad42UkAVRIY8FG1zkNarVtz
M6DI2bZs4tr/SYispDwYnDJgpljle3feEyr9QABDJT3PD0bzS7Jf4MAkmVVm75u8
FkFzfPaQ9JEBNxP9Rg/0mxp20u5md4EOgFp50Ll/LvMBM56oyE79qgWn5vDm7PIH
IemKbAOwrnkr0WIpk14+k+Gamjckuz3APSifeiUPQ/s+8s4R60Qbw6KXBNPp84qD
zpiZBo8nLZA6zn4JwK/Ape19M1ciaia00SR16SW4+McNoIDJI4TIjRGj8FMB6te5
wvEaF928tSNfh5nAgzPN9C5LEo8G568=
-----END CERTIFICATE-----
Generated at Wed May 13 07:02:43 2026 by rpki-client