Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7ed10923-f600-3bea-b3b2-8c49de6c2bb2.roa
File:                     7ed10923-f600-3bea-b3b2-8c49de6c2bb2.roa (raw, json)
Hash identifier:          CmPFDsH4YaLG0uVd9swj+cDv40+r0bvC/T+wg0l9cIw=
Subject key identifier:   64:E3:D3:99:C6:BB:7E:67:A5:C1:52:36:67:89:39:2B:FB:69:9F:89
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F4974889BD837BCF346BA2500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7ed10923-f600-3bea-b3b2-8c49de6c2bb2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        192.22.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:88:9b:d8:37:bc:f3:46:ba:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=52c2f384-a23c-45ed-9b19-0d7f0aa0c7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:be:5b:ea:89:24:e2:63:39:a1:ad:a0:52:
                    92:54:d5:16:84:e0:89:70:a0:6b:ef:7e:ae:72:00:
                    8c:87:fc:53:2d:10:7c:00:80:8f:1f:09:ea:69:57:
                    e0:4c:99:37:ad:69:e9:d1:b8:2d:c2:c5:60:b8:57:
                    49:d9:01:ef:d3:61:d2:e9:11:43:e2:b4:dc:78:61:
                    50:c6:77:fb:c4:ec:f3:72:35:3e:c1:21:fa:23:fa:
                    ed:f1:2b:bd:94:94:fc:1c:7a:47:e0:6f:36:f0:28:
                    a0:3c:3a:bb:f4:09:22:7d:e2:ee:bd:07:eb:74:5b:
                    bc:e9:59:6f:dc:fa:fa:7c:2c:33:2f:53:77:b4:60:
                    df:a9:3a:6d:90:42:13:09:23:91:0f:38:b2:b0:64:
                    b5:2c:2a:2b:2a:97:76:80:66:a4:0f:21:ea:22:10:
                    75:79:e4:9c:2d:52:05:f4:7b:43:ec:27:66:d9:0e:
                    a0:a5:fa:7e:1b:10:f8:5d:2e:a0:b0:42:ae:dc:86:
                    02:73:74:15:ff:d8:d4:8f:dc:0e:5e:19:de:07:2d:
                    c8:c1:6e:0f:df:1a:49:2e:a3:c0:29:fc:26:3a:05:
                    a8:bb:ff:7e:2a:91:30:01:37:5b:82:65:8e:d2:ce:
                    b6:d1:dc:0a:29:ce:64:b8:24:88:ef:4b:72:7d:31:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E3:D3:99:C6:BB:7E:67:A5:C1:52:36:67:89:39:2B:FB:69:9F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7ed10923-f600-3bea-b3b2-8c49de6c2bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.22.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:69:e6:54:6e:63:6e:fa:61:f2:44:fa:13:a6:d8:be:9b:9c:
         c8:f5:45:c4:ed:55:50:9e:cb:44:9f:6c:5c:02:9f:2a:d7:6b:
         36:ff:8e:44:84:ef:18:84:6c:df:f8:6d:11:b6:ce:d9:8c:f1:
         39:4c:78:7b:81:78:ae:30:59:e0:00:b8:56:af:c3:94:68:b8:
         b7:31:a2:ff:01:a3:5c:a3:d7:6b:af:07:f2:fb:ba:c6:c3:8d:
         f3:89:12:f1:e8:67:ee:ea:ba:d2:c0:3e:84:eb:e9:be:77:3d:
         af:df:c2:49:17:65:ca:74:63:3d:09:59:3e:db:13:49:70:8a:
         06:d4:1a:2c:a2:74:1f:1b:0d:3a:5d:74:ff:25:a8:9f:9b:90:
         73:b3:25:a0:ea:ba:8e:40:7f:95:5c:61:f7:4a:6a:b7:e2:32:
         f3:43:5b:69:e5:42:9c:7c:cb:0d:30:36:3d:f4:8d:a1:6b:de:
         b0:0a:f9:fb:22:b6:de:5c:dc:be:17:2a:d3:3d:06:4c:68:6a:
         a3:16:73:9a:70:3a:f5:fe:22:81:87:1c:60:a6:f6:4d:82:27:
         e5:3a:84:e4:c1:da:a6:07:f1:67:37:b0:1f:29:8a:55:e3:db:
         86:5d:aa:ba:0d:e4:bc:8f:15:87:05:37:8d:7b:b8:e5:fd:d9:
         0a:df:d1:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIib2De880a6JQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTJjMmYzODQtYTIzYy00NWVkLTliMTktMGQ3ZjBhYTBjN2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupK+W+qJJOJjOaGtoFKSVNUWhOCJcKBr736u
cgCMh/xTLRB8AICPHwnqaVfgTJk3rWnp0bgtwsVguFdJ2QHv02HS6RFD4rTceGFQ
xnf7xOzzcjU+wSH6I/rt8Su9lJT8HHpH4G828CigPDq79AkifeLuvQfrdFu86Vlv
3Pr6fCwzL1N3tGDfqTptkEITCSORDziysGS1LCorKpd2gGakDyHqIhB1eeScLVIF
9HtD7Cdm2Q6gpfp+GxD4XS6gsEKu3IYCc3QV/9jUj9wOXhneBy3IwW4P3xpJLqPA
KfwmOgWou/9+KpEwATdbgmWO0s620dwKKc5kuCSI70tyfTFX1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTj05nGu35npcFSNmeJOSv7aZ+JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2VkMTA5MjMtZjYwMC0z
YmVhLWIzYjItOGM0OWRlNmMyYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlp5lRuY276YfJE+hOm2L6bnMj1RcTtVVCey0SfbFwCnyrXazb/jkSE
7xiEbN/4bRG2ztmM8TlMeHuBeK4wWeAAuFavw5RouLcxov8Bo1yj12uvB/L7usbD
jfOJEvHoZ+7qutLAPoTr6b53Pa/fwkkXZcp0Yz0JWT7bE0lwigbUGiyidB8bDTpd
dP8lqJ+bkHOzJaDquo5Af5VcYfdKarfiMvNDW2nlQpx8yw0wNj30jaFr3rAK+fsi
tt5c3L4XKtM9BkxoaqMWc5pwOvX+IoGHHGCm9k2CJ+U6hOTB2qYH8Wc3sB8pilXj
24ZdqroN5LyPFYcFN417uOX92Qrf0QI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:31:04 2026 by rpki-client