Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa
File:                     498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa (raw, json)
Hash identifier:          pleTws9Lh5LtJf2KRiizuyM/i53ly1nu29MlAkYP29o=
Subject key identifier:   F5:A9:84:13:51:6A:15:34:D4:D0:EA:88:59:D3:AF:D5:9A:15:75:82
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4C3D52D3903C3105F68AF140
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     22677
IP address blocks:        128.92.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:52:d3:90:3c:31:05:f6:8a:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=d1a185ec-d2ec-45c0-8bb8-8f1d1ad2c4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:36:23:88:9d:e0:f5:7c:1b:41:3d:2f:89:61:
                    7d:40:c9:72:2c:4e:e8:c5:ac:c6:46:d6:0c:c6:e0:
                    c1:00:32:85:56:db:25:9e:a8:db:04:5e:3d:88:2b:
                    c6:5d:c7:c7:a6:1f:f5:ba:2c:22:4e:bf:1f:65:ce:
                    86:c3:92:14:e6:0d:de:8a:87:b2:f4:06:c3:56:d5:
                    fa:08:b3:68:13:d1:6f:c2:04:46:c3:c6:0a:0b:aa:
                    58:d5:5c:1f:9a:67:92:9c:bf:a0:e8:cb:f7:0f:93:
                    ed:38:77:4a:eb:34:f7:59:08:dd:c1:58:62:0d:ae:
                    68:a0:05:42:53:6c:41:8f:5a:ca:0a:46:72:b2:e0:
                    5b:87:63:29:6f:19:02:c6:c4:e4:da:b2:43:96:40:
                    2f:72:e0:06:28:e7:e4:be:41:be:0a:7c:56:34:88:
                    0c:f1:ac:4e:4d:47:0a:aa:4f:c1:4f:fb:a9:06:81:
                    c2:d7:ef:58:ac:a4:09:60:3c:56:37:dd:f5:c8:30:
                    8b:78:51:ee:59:55:15:be:32:f7:97:5b:4f:24:bb:
                    6d:de:11:bd:83:79:63:ba:4e:12:9c:60:a0:50:ce:
                    7e:93:2d:05:1f:5a:3e:3a:70:50:cf:40:a2:cb:95:
                    03:2a:a6:7f:08:7b:59:54:d8:4f:a1:dc:d9:1c:85:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:84:13:51:6A:15:34:D4:D0:EA:88:59:D3:AF:D5:9A:15:75:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/498c058d-dbad-3e37-81c4-00cbd8fa2fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.92.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:c0:c6:19:55:a6:91:c3:a7:96:f0:df:80:dc:69:16:67:
         ba:a4:9d:56:d1:fb:dc:cd:9e:4e:3e:05:f6:21:8e:c3:69:e2:
         eb:e6:61:be:a3:ad:71:8a:0b:c4:02:10:9d:b1:8d:f2:b0:d2:
         8d:d8:c9:ce:62:16:35:2c:00:62:c5:5a:33:49:29:ce:3b:19:
         b1:50:58:25:eb:46:7b:db:44:b7:5b:84:64:e5:ad:63:e0:6e:
         57:38:36:6f:1d:cb:80:99:7e:00:d0:9a:3c:bf:ba:5d:7d:1c:
         73:94:04:77:02:b5:67:05:41:62:86:3c:14:47:ec:56:a1:fd:
         9a:95:ef:63:cd:45:06:76:30:30:a0:35:f7:99:08:cc:e3:63:
         9e:4c:14:34:07:83:37:47:15:e1:cb:73:eb:84:eb:a3:61:e5:
         15:5b:ae:d9:c9:d1:f7:a7:29:5a:5b:1e:09:eb:6a:29:b4:a5:
         c2:e4:34:81:83:9b:95:32:3a:dd:52:be:17:94:4a:2e:0c:59:
         a0:df:68:04:c0:8c:c9:98:9c:24:21:c4:3c:9e:2e:4e:6a:67:
         7b:1e:d8:4b:4c:3c:e4:4c:70:bd:e1:94:ad:37:ee:50:1e:63:
         fc:e3:99:27:71:61:f2:9b:63:40:20:87:f3:80:c9:4d:6f:41:
         62:82:26:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVLTkDwxBfaK8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZDFhMTg1ZWMtZDJlYy00NWMwLThiYjgtOGYxZDFhZDJjNGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDYjiJ3g9XwbQT0viWF9QMlyLE7oxazGRtYM
xuDBADKFVtslnqjbBF49iCvGXcfHph/1uiwiTr8fZc6Gw5IU5g3eioey9AbDVtX6
CLNoE9FvwgRGw8YKC6pY1VwfmmeSnL+g6Mv3D5PtOHdK6zT3WQjdwVhiDa5ooAVC
U2xBj1rKCkZysuBbh2MpbxkCxsTk2rJDlkAvcuAGKOfkvkG+CnxWNIgM8axOTUcK
qk/BT/upBoHC1+9YrKQJYDxWN931yDCLeFHuWVUVvjL3l1tPJLtt3hG9g3ljuk4S
nGCgUM5+ky0FH1o+OnBQz0Ciy5UDKqZ/CHtZVNhPodzZHIVa4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPWphBNRahU01NDqiFnTr9WaFXWCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDk4YzA1OGQtZGJhZC0z
ZTM3LTgxYzQtMDBjYmQ4ZmEyZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgFwZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ0jwMYZVaaRw6eW8N+A3GkWZ7qknVbR+9zNnk4+BfYhjsNp4uvmYb6j
rXGKC8QCEJ2xjfKw0o3Yyc5iFjUsAGLFWjNJKc47GbFQWCXrRnvbRLdbhGTlrWPg
blc4Nm8dy4CZfgDQmjy/ul19HHOUBHcCtWcFQWKGPBRH7Fah/ZqV72PNRQZ2MDCg
NfeZCMzjY55MFDQHgzdHFeHLc+uE66Nh5RVbrtnJ0fenKVpbHgnraim0pcLkNIGD
m5UyOt1SvheUSi4MWaDfaATAjMmYnCQhxDyeLk5qZ3se2EtMPORMcL3hlK037lAe
Y/zjmSdxYfKbY0Agh/OAyU1vQWKCJpM=
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:10:54 2026 by rpki-client