Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/31ccb345-1236-386a-9d74-7ef7f13b13d3.roa
File:                     31ccb345-1236-386a-9d74-7ef7f13b13d3.roa (raw, json)
Hash identifier:          OKNkUGBOnH05N6wBPIdJkDlmwGLJhSKJDNjR/JbzCD4=
Subject key identifier:   43:17:CC:F6:5E:29:AF:DE:77:48:54:6E:73:60:7E:9A:C7:22:65:DC
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584DA6B015F6C4F202438B00EA00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/31ccb345-1236-386a-9d74-7ef7f13b13d3.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        207.202.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:15:f6:c4:f2:02:43:8b:00:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=8aaece71-fa5e-4424-88e1-6af7d278c271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:89:9b:93:7d:41:ac:6b:fa:55:ac:b3:20:
                    79:85:be:4a:7c:e8:5d:94:37:52:19:54:2c:74:71:
                    3d:2b:95:23:6b:ad:ec:db:33:9e:7c:bf:7d:d8:b4:
                    8b:b6:c5:14:10:90:45:32:76:06:ca:b6:02:3e:05:
                    11:c4:2c:70:b1:c5:43:ef:72:79:c0:16:86:78:82:
                    4a:a5:7c:7d:37:ee:ef:24:fb:f9:d7:68:6f:b2:98:
                    a6:83:38:1f:37:3a:5b:fb:76:59:63:61:82:de:6a:
                    2e:d5:81:82:65:2f:94:37:53:3c:1c:ec:cc:9a:4a:
                    02:1d:8d:da:1e:58:e0:ea:70:ab:9a:5a:69:ef:0c:
                    e8:a7:99:ab:06:b2:24:b7:8e:3a:e6:e5:86:9f:f6:
                    93:26:60:9a:ca:1e:22:46:6d:a5:c5:fe:8f:4e:48:
                    17:62:45:5d:a5:f7:94:63:62:a3:ff:24:cf:88:e5:
                    1b:8a:c3:bf:e9:6d:64:08:81:f9:bd:8b:3a:8c:ed:
                    74:cb:9c:16:6f:72:24:60:8a:02:2c:e0:98:0b:2b:
                    54:1f:d8:ed:db:1a:88:49:28:1a:cf:e8:0f:25:b3:
                    b5:a3:b8:b4:15:8a:99:da:91:40:f3:10:69:b6:84:
                    01:ed:b5:c5:aa:0c:58:2d:7c:78:f4:3c:53:f4:db:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:CC:F6:5E:29:AF:DE:77:48:54:6E:73:60:7E:9A:C7:22:65:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/31ccb345-1236-386a-9d74-7ef7f13b13d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f6:d6:8c:14:cc:a0:37:0f:36:8a:cf:c6:bc:78:30:48:72:
         6c:ac:d5:7c:c8:90:b5:60:c6:c5:ed:2d:0c:39:85:db:fb:9a:
         b7:54:67:35:6e:6f:60:eb:70:df:16:fb:09:30:eb:d6:90:a6:
         b2:6d:69:20:70:d9:7f:1b:ac:e8:7a:a0:fa:08:c8:d6:03:bc:
         07:6c:02:90:0c:77:af:26:21:55:4a:dd:cc:5c:94:0a:1a:30:
         49:0d:5a:59:d8:c1:85:a0:38:48:44:0e:52:ec:a9:74:cc:10:
         29:38:df:0f:05:06:45:3a:35:4d:66:dd:67:98:a1:b2:f9:c4:
         38:e3:95:0e:63:cc:45:4d:c4:3a:94:bf:af:1b:da:30:56:0f:
         40:b1:ea:e8:cd:bf:26:34:00:d1:96:11:20:db:42:01:b7:87:
         0e:03:cd:85:60:de:26:f0:04:5a:83:61:56:af:04:93:65:fa:
         2e:2d:d8:e9:df:f1:bf:a5:47:62:0d:0f:67:75:3a:72:e0:ba:
         2f:ca:92:fa:71:d9:df:42:5c:f7:d9:d1:80:81:fb:f2:20:41:
         d6:fe:2d:84:b9:18:c4:29:3a:05:89:07:2e:b9:ca:cc:61:b5:
         44:54:da:08:64:c9:05:f0:40:45:08:85:3f:3e:83:b9:6f:50:
         a4:1f:d6:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBX2xPICQ4sA6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
OGFhZWNlNzEtZmE1ZS00NDI0LTg4ZTEtNmFmN2QyNzhjMjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8OJm5N9Qaxr+lWssyB5hb5KfOhdlDdSGVQs
dHE9K5Uja63s2zOefL992LSLtsUUEJBFMnYGyrYCPgURxCxwscVD73J5wBaGeIJK
pXx9N+7vJPv512hvspimgzgfNzpb+3ZZY2GC3mou1YGCZS+UN1M8HOzMmkoCHY3a
Hljg6nCrmlpp7wzop5mrBrIkt4465uWGn/aTJmCayh4iRm2lxf6PTkgXYkVdpfeU
Y2Kj/yTPiOUbisO/6W1kCIH5vYs6jO10y5wWb3IkYIoCLOCYCytUH9jt2xqISSga
z+gPJbO1o7i0FYqZ2pFA8xBptoQB7bXFqgxYLXx49DxT9NukVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMXzPZeKa/ed0hUbnNgfprHImXcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMzFjY2IzNDUtMTIzNi0z
ODZhLTlkNzQtN2VmN2YxM2IxM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALn21owUzKA3DzaKz8a8eDBIcmys1XzIkLVgxsXtLQw5hdv7mrdUZzVu
b2DrcN8W+wkw69aQprJtaSBw2X8brOh6oPoIyNYDvAdsApAMd68mIVVK3cxclAoa
MEkNWlnYwYWgOEhEDlLsqXTMECk43w8FBkU6NU1m3WeYobL5xDjjlQ5jzEVNxDqU
v68b2jBWD0Cx6ujNvyY0ANGWESDbQgG3hw4DzYVg3ibwBFqDYVavBJNl+i4t2Onf
8b+lR2IND2d1OnLgui/Kkvpx2d9CXPfZ0YCB+/IgQdb+LYS5GMQpOgWJBy65ysxh
tURU2ghkyQXwQEUIhT8+g7lvUKQf1h8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:48:24 2026 by rpki-client