Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/583a845f-98dc-3908-8243-cef38dd5dc2d.roa
File:                     583a845f-98dc-3908-8243-cef38dd5dc2d.roa (raw, json)
Hash identifier:          Fo+aBTo5rEFbRCzqLo3/f7MrKC4Anu+eSYrlMHgruL0=
Subject key identifier:   A1:24:F5:17:EC:1F:CA:5E:10:A2:15:2D:D8:3A:3C:E1:C3:35:0F:EC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F119CFD3D7EA31C303C1256A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/583a845f-98dc-3908-8243-cef38dd5dc2d.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        192.18.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:fd:3d:7e:a3:1c:30:3c:12:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=719854fc-d10b-4868-9b9f-877180db55db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:1a:e3:10:ab:e3:49:be:a4:c1:c4:ae:c3:
                    32:dc:8b:81:01:a7:cb:fe:71:e2:a0:86:9a:a8:53:
                    62:cf:fd:62:40:74:6d:59:fe:27:c2:a3:5c:75:19:
                    ac:a5:e0:93:68:45:d6:59:28:30:c8:58:e6:e7:8b:
                    8c:cf:44:5f:51:b1:48:a2:ca:4e:cd:2d:0a:bd:85:
                    df:49:1b:62:e8:f8:33:65:22:6a:89:10:f2:69:3c:
                    f8:ff:0c:fb:2e:ce:69:b0:e4:6d:83:e5:f8:ca:ac:
                    f2:c1:29:f7:d9:3f:d8:e6:79:10:16:c6:3d:29:21:
                    ba:e4:02:96:9c:3c:cd:c8:7d:73:76:c0:16:84:93:
                    58:ca:be:02:1d:50:ac:fc:9a:7c:ff:0d:e6:d3:5d:
                    78:3d:72:8a:13:5d:b5:4e:40:df:61:3b:e1:ae:6f:
                    41:ff:2a:9a:e9:fa:7d:6b:ca:b5:a1:50:0d:f2:a8:
                    eb:6c:c2:b8:50:c7:fa:c7:b5:6f:18:52:91:6d:08:
                    fc:3f:b3:9c:72:4a:f3:26:a3:a8:0a:08:ac:69:21:
                    0d:49:d9:69:a7:6a:1c:65:9d:f3:1d:da:75:ec:78:
                    01:4d:ce:6f:33:39:2e:fe:58:7a:97:55:a1:67:07:
                    4d:05:2a:03:e1:3f:19:91:ce:fc:20:3f:69:15:fc:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:24:F5:17:EC:1F:CA:5E:10:A2:15:2D:D8:3A:3C:E1:C3:35:0F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/583a845f-98dc-3908-8243-cef38dd5dc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.18.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:71:7b:98:01:53:9c:75:a1:ad:58:e1:b9:e3:24:6f:e3:f8:
         3b:a0:03:cf:8f:84:60:d2:70:a3:9a:a3:9b:d9:4b:4a:99:62:
         05:5f:ca:b3:6d:3e:ee:91:b7:69:2f:4f:6b:1e:b7:78:3b:86:
         e5:04:cc:32:04:67:b2:1a:69:2d:5a:f2:66:ff:8d:af:8e:e7:
         43:ac:40:5c:dd:b6:2d:55:4b:58:8d:a5:62:db:38:3b:e3:d1:
         47:4a:52:f7:b6:36:94:18:5a:33:19:7e:d4:a9:3a:a8:36:8b:
         a0:73:ad:25:66:50:7e:0b:df:64:e0:f8:25:26:35:ec:9e:21:
         f5:98:db:17:91:bb:0d:01:15:17:b4:04:dc:ef:56:f2:63:e3:
         ae:4c:7f:93:56:be:19:82:20:e8:3f:66:f3:20:c0:0f:f0:57:
         4e:3c:05:ab:19:b1:10:c6:67:f5:38:b7:b7:eb:97:b9:01:5d:
         1b:76:82:5b:10:2d:76:a9:1b:f5:7a:7d:fb:ee:2b:94:38:af:
         cc:65:e5:20:2b:c2:1a:bd:b4:45:28:12:cd:65:86:30:be:70:
         cb:c1:15:34:25:f7:da:fa:2b:11:33:a1:18:8d:e6:d1:7f:0f:
         09:e2:82:b5:4f:b5:75:40:ca:ba:dd:c9:14:59:57:16:98:57:
         5b:f8:25:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnP09fqMcMDwSVqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzE5ODU0ZmMtZDEwYi00ODY4LTliOWYtODc3MTgwZGI1NWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbAa4xCr40m+pMHErsMy3IuBAafL/nHioIaa
qFNiz/1iQHRtWf4nwqNcdRmspeCTaEXWWSgwyFjm54uMz0RfUbFIospOzS0KvYXf
SRti6PgzZSJqiRDyaTz4/wz7Ls5psORtg+X4yqzywSn32T/Y5nkQFsY9KSG65AKW
nDzNyH1zdsAWhJNYyr4CHVCs/Jp8/w3m0114PXKKE121TkDfYTvhrm9B/yqa6fp9
a8q1oVAN8qjrbMK4UMf6x7VvGFKRbQj8P7OcckrzJqOoCgisaSENSdlpp2ocZZ3z
Hdp17HgBTc5vMzku/lh6l1WhZwdNBSoD4T8Zkc78ID9pFfwwXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKEk9RfsH8peEKIVLdg6POHDNQ/sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTgzYTg0NWYtOThkYy0z
OTA4LTgyNDMtY2VmMzhkZDVkYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwBKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNxe5gBU5x1oa1Y4bnjJG/j+DugA8+PhGDScKOao5vZS0qZYgVfyrNt
Pu6Rt2kvT2set3g7huUEzDIEZ7IaaS1a8mb/ja+O50OsQFzdti1VS1iNpWLbODvj
0UdKUve2NpQYWjMZftSpOqg2i6BzrSVmUH4L32Tg+CUmNeyeIfWY2xeRuw0BFRe0
BNzvVvJj465Mf5NWvhmCIOg/ZvMgwA/wV048BasZsRDGZ/U4t7frl7kBXRt2glsQ
LXapG/V6ffvuK5Q4r8xl5SArwhq9tEUoEs1lhjC+cMvBFTQl99r6KxEzoRiN5tF/
DwnigrVPtXVAyrrdyRRZVxaYV1v4JW8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:09:45 2026 by rpki-client