Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cdaefd2b-16db-3281-acfa-cf23982d7d52.roa
File:                     cdaefd2b-16db-3281-acfa-cf23982d7d52.roa (raw, json)
Hash identifier:          vKDRtHvTws0p+EwbaL7ScMxUx6Brh9nt02AF2iFZ/+8=
Subject key identifier:   85:69:50:32:B4:C9:7A:F9:12:80:2B:F9:F8:E0:01:13:A3:D4:AC:66
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F0AA22CD427F8CD57256BF580
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cdaefd2b-16db-3281-acfa-cf23982d7d52.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        141.109.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:2c:d4:27:f8:cd:57:25:6b:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=73f52492-b2bd-434e-bafe-fe5fc64f1c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:9c:22:8a:6b:ef:48:3e:82:da:4e:15:6c:
                    1d:e3:82:77:3a:a1:65:30:0c:2f:af:76:2d:18:a0:
                    38:a0:51:e1:f7:6d:7e:27:7d:ae:c0:d8:e9:03:d0:
                    d0:00:b5:d6:55:7d:5e:90:cb:9d:c9:5b:28:3a:a1:
                    e7:56:49:1c:a9:b9:7b:55:1f:1e:4f:53:d4:3d:1d:
                    2b:69:49:21:3e:76:7d:9a:9a:7e:e1:e4:59:df:fc:
                    be:d1:d1:e0:28:59:70:69:15:66:51:00:21:d0:a7:
                    6d:cd:72:bc:54:df:c5:7a:23:af:97:5d:fd:45:f9:
                    87:f7:17:84:51:7c:74:0b:c1:82:3c:1e:d4:31:28:
                    56:8b:78:c1:d8:52:a3:80:61:55:a1:8f:04:7a:1e:
                    91:af:4d:01:94:37:49:0f:cd:b0:f7:0d:c3:06:c0:
                    7a:49:9f:c6:a3:98:b7:ed:1c:30:aa:80:9e:0f:17:
                    52:20:07:3e:dd:46:6a:b2:53:c9:37:e7:94:e4:eb:
                    48:88:96:c2:1b:6b:f6:bd:5c:89:65:3a:0f:c7:46:
                    31:6c:54:52:6d:c8:b0:8b:cc:a5:8f:29:45:63:83:
                    b5:51:18:28:ca:49:f0:20:7d:96:41:9e:3c:76:ba:
                    b5:ef:4d:e4:29:f2:b9:b7:a1:65:49:f0:27:6e:07:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:50:32:B4:C9:7A:F9:12:80:2B:F9:F8:E0:01:13:A3:D4:AC:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cdaefd2b-16db-3281-acfa-cf23982d7d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.109.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:cc:a8:3b:ee:40:50:97:ea:37:5e:00:a6:41:85:85:4a:
         3b:68:98:d0:c4:84:46:cd:36:5a:3b:85:a4:73:a2:a2:c5:d0:
         6f:b3:e5:12:ad:5c:c4:8c:f9:5e:e1:5d:b0:48:b2:23:0c:de:
         b4:00:a9:54:fe:20:84:5d:f1:1a:90:f6:95:53:fb:20:8b:0e:
         1f:70:df:d6:9c:a9:86:c3:9a:79:1b:a6:10:5a:d9:51:e9:24:
         54:53:fd:68:43:31:e3:8b:22:39:24:47:d4:11:78:85:e2:64:
         37:10:91:8b:05:59:4d:08:87:a9:83:c4:b4:4b:82:f0:89:39:
         48:9a:0e:90:7d:3e:09:02:88:89:00:d8:4f:a0:c0:0a:72:92:
         e1:98:25:68:e2:5a:79:ab:52:b6:2f:8a:fc:41:8f:1d:bf:35:
         3b:75:c6:ff:56:91:b2:bd:cb:11:77:fa:ff:96:e9:d5:0b:a6:
         fa:31:c2:be:83:89:00:d7:6e:bd:d5:4f:ff:9f:70:c3:f0:fd:
         6b:bd:f2:9f:9b:4b:0d:86:fb:e8:9f:ce:0b:7f:88:a5:b4:d1:
         b9:e1:6a:6d:a0:c0:c0:7d:09:5d:86:af:70:41:76:a1:ea:e6:
         3d:13:02:7f:d4:07:d7:1c:33:74:2f:b3:8c:29:c6:a0:01:f6:
         1e:fd:0f:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoizUJ/jNVyVr9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk
NzNmNTI0OTItYjJiZC00MzRlLWJhZmUtZmU1ZmM2NGYxYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaacIopr70g+gtpOFWwd44J3OqFlMAwvr3Yt
GKA4oFHh921+J32uwNjpA9DQALXWVX1ekMudyVsoOqHnVkkcqbl7VR8eT1PUPR0r
aUkhPnZ9mpp+4eRZ3/y+0dHgKFlwaRVmUQAh0KdtzXK8VN/FeiOvl139RfmH9xeE
UXx0C8GCPB7UMShWi3jB2FKjgGFVoY8Eeh6Rr00BlDdJD82w9w3DBsB6SZ/Go5i3
7RwwqoCeDxdSIAc+3UZqslPJN+eU5OtIiJbCG2v2vVyJZToPx0YxbFRSbciwi8yl
jylFY4O1URgoyknwIH2WQZ48drq1703kKfK5t6FlSfAnbgedmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIVpUDK0yXr5EoAr+fjgAROj1KxmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2RhZWZkMmItMTZkYi0z
MjgxLWFjZmEtY2YyMzk4MmQ3ZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjW2iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBszKg77kBQl+o3XgCmQYWFSjtomNDEhEbNNlo7haRzoqLF0G+z5RKt
XMSM+V7hXbBIsiMM3rQAqVT+IIRd8RqQ9pVT+yCLDh9w39acqYbDmnkbphBa2VHp
JFRT/WhDMeOLIjkkR9QReIXiZDcQkYsFWU0Ih6mDxLRLgvCJOUiaDpB9PgkCiIkA
2E+gwApykuGYJWjiWnmrUrYvivxBjx2/NTt1xv9WkbK9yxF3+v+W6dULpvoxwr6D
iQDXbr3VT/+fcMPw/Wu98p+bSw2G++ifzgt/iKW00bnham2gwMB9CV2Gr3BBdqHq
5j0TAn/UB9ccM3Qvs4wpxqAB9h79D50=
-----END CERTIFICATE-----
Generated at Mon Sep 14 21:32:32 2026 by rpki-client