Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa
File:                     4f545dde-b5f0-3c58-88f5-c42965201063.roa (raw, json)
Hash identifier:          Q1MJLpo+5YzoLm5bb6rTeW9HputzsT7K5SyOufsc2mk=
Subject key identifier:   CE:E8:72:1B:FD:5A:85:A7:F4:D4:69:B9:7E:09:7B:0B:AD:46:67:32
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584DBBA04384D5EE32F8EF85ADC0
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     4809
IP address blocks:        199.114.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:43:84:d5:ee:32:f8:ef:85:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=69d59524-94c9-41cc-ae74-7cc084972d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:c9:5c:b7:4f:ad:6b:09:1b:07:cb:5d:9d:
                    2e:00:b7:a9:87:6b:b4:65:1a:13:80:66:25:21:90:
                    bc:81:75:3e:af:07:17:3e:ee:c4:2f:02:7e:49:95:
                    8a:06:27:4c:c5:5a:1e:5a:78:68:db:3b:0f:bf:d2:
                    ef:57:39:95:38:fd:f1:7a:b5:b7:e5:6d:f1:d4:3d:
                    b3:c7:36:37:dd:d6:52:9c:e9:00:e7:7c:5b:26:82:
                    19:f9:87:c9:86:b5:ab:aa:16:9f:59:11:01:f4:51:
                    a8:d5:42:ea:4f:ea:2b:d6:87:c7:2a:c4:0b:d5:93:
                    09:48:15:81:fd:43:0b:c7:ca:b0:46:39:e5:62:c3:
                    62:83:32:16:2e:90:75:2c:63:55:96:1e:54:ed:d8:
                    f6:ea:ba:2a:23:a7:fa:8b:23:e7:03:e4:42:e8:98:
                    6f:bc:26:92:f5:b8:44:4e:a2:3b:f5:dd:ae:b4:4b:
                    31:99:3a:c9:71:77:6c:0b:41:15:eb:37:23:2a:ca:
                    ba:98:d7:e9:32:ea:e5:46:c8:a6:ea:78:2d:20:df:
                    5d:34:64:c6:11:65:6f:a4:1e:57:8b:c5:1b:f4:7d:
                    c6:5e:05:8b:08:52:7f:30:d2:2a:c7:a4:65:14:71:
                    88:ea:70:fe:76:25:cd:f9:eb:7a:ca:3c:9a:c1:13:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:72:1B:FD:5A:85:A7:F4:D4:69:B9:7E:09:7B:0B:AD:46:67:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4f545dde-b5f0-3c58-88f5-c42965201063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.114.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2e:b9:a0:1c:1c:1c:60:46:b0:2f:07:bd:3c:34:e2:6f:fc:
         ba:7d:84:b8:84:ab:50:a4:c7:42:9c:fa:b1:72:be:9c:0b:47:
         13:6a:15:1d:06:2b:36:09:d5:31:3e:10:15:bc:bf:da:0c:92:
         5f:17:41:76:d4:a3:6a:31:d2:03:2f:25:de:74:56:b3:10:dc:
         96:3c:9b:1b:45:04:fb:5a:73:c0:ff:ba:47:d1:d3:d5:2c:0d:
         1b:14:46:3b:1d:70:e7:73:ac:36:a8:95:15:79:72:5d:af:7b:
         be:7d:ed:f1:75:6b:b4:45:10:ea:eb:67:e4:48:8b:3c:36:6a:
         7e:85:89:84:20:cc:36:99:06:ba:98:5b:c9:2d:0f:91:88:31:
         11:90:e9:81:cf:d8:27:f0:95:74:a6:f1:94:24:02:89:87:12:
         3f:42:f4:75:37:97:c5:24:bd:16:19:d7:01:70:4c:59:47:2d:
         82:fe:70:6e:30:95:21:37:fc:0f:3d:a8:6a:0b:e2:7b:a2:64:
         75:01:48:cd:97:fe:6d:20:b4:0e:fd:c8:9d:ed:18:d4:ba:b7:
         43:a3:03:a5:b7:21:b2:e7:cf:f5:5e:0a:87:b4:55:fb:4a:15:
         cb:34:f3:b0:1b:19:ad:90:d0:a9:9c:b4:1f:83:d1:35:50:41:
         ff:91:9a:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEOE1e4y+O+FrcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl
Y2FmMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
NjlkNTk1MjQtOTRjOS00MWNjLWFlNzQtN2NjMDg0OTcyZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw7JXLdPrWsJGwfLXZ0uALeph2u0ZRoTgGYl
IZC8gXU+rwcXPu7ELwJ+SZWKBidMxVoeWnho2zsPv9LvVzmVOP3xerW35W3x1D2z
xzY33dZSnOkA53xbJoIZ+YfJhrWrqhafWREB9FGo1ULqT+or1ofHKsQL1ZMJSBWB
/UMLx8qwRjnlYsNigzIWLpB1LGNVlh5U7dj26roqI6f6iyPnA+RC6JhvvCaS9bhE
TqI79d2utEsxmTrJcXdsC0EV6zcjKsq6mNfpMurlRsim6ngtIN9dNGTGEWVvpB5X
i8Ub9H3GXgWLCFJ/MNIqx6RlFHGI6nD+diXN+et6yjyawROY0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM7ochv9WoWn9NRpuX4JewutRmcyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj
ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvNGY1NDVkZGUtYjVmMC0z
YzU4LTg4ZjUtYzQyOTY1MjAxMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5
NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4
ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1
ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3LgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8uuaAcHBxgRrAvB708NOJv/Lp9hLiEq1Ckx0Kc+rFyvpwLRxNqFR0G
KzYJ1TE+EBW8v9oMkl8XQXbUo2ox0gMvJd50VrMQ3JY8mxtFBPtac8D/ukfR09Us
DRsURjsdcOdzrDaolRV5cl2ve7597fF1a7RFEOrrZ+RIizw2an6FiYQgzDaZBrqY
W8ktD5GIMRGQ6YHP2CfwlXSm8ZQkAomHEj9C9HU3l8UkvRYZ1wFwTFlHLYL+cG4w
lSE3/A89qGoL4nuiZHUBSM2X/m0gtA79yJ3tGNS6t0OjA6W3IbLnz/VeCoe0VftK
Fcs087AbGa2Q0KmctB+D0TVQQf+RmvU=
-----END CERTIFICATE-----
Generated at Wed May 13 11:16:35 2026 by rpki-client