Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef985c12-bcd0-3b44-8303-e03c70c77766.roa
File:                     ef985c12-bcd0-3b44-8303-e03c70c77766.roa (raw, json)
Hash identifier:          MEaKg3sxhfhskdqdbOoLKHz7gkrO3TjO8BaEWrmqEyg=
Subject key identifier:   C2:FD:F3:EF:C6:60:7C:AE:A5:E5:5D:92:D6:20:64:51:80:CF:7F:44
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4F0804D70265E50E3259F440
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef985c12-bcd0-3b44-8303-e03c70c77766.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        173.22.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:04:d7:02:65:e5:0e:32:59:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=91f9b491-62a2-4e98-b04e-1c74828eea42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:c7:3a:ff:59:7d:f3:4b:3f:88:d6:57:a7:
                    3a:e8:bc:71:f2:31:da:18:36:f3:74:5b:ff:5c:cd:
                    13:62:a8:06:4f:1a:c6:55:02:d8:11:2f:c2:21:76:
                    95:a9:51:75:0a:6e:0c:b3:ba:0a:85:c2:72:c7:01:
                    77:44:c8:34:52:59:d4:ee:b5:b8:10:cc:19:38:49:
                    f2:dc:a2:20:54:72:2b:51:87:ec:f6:7e:28:b2:f8:
                    7a:63:64:7a:a0:55:ca:ad:38:96:1c:fd:62:22:0d:
                    33:2c:ef:e3:5d:12:18:1b:12:40:da:9b:84:03:5f:
                    95:60:ca:f0:ca:c4:74:74:d3:ac:65:69:98:61:f1:
                    27:8a:79:6e:da:29:fc:cf:94:cd:94:8d:cf:c8:c5:
                    5d:35:70:d1:fe:1d:e3:f5:69:6e:04:54:21:59:bf:
                    ab:28:53:91:94:74:68:81:50:15:7f:a5:73:ab:41:
                    2d:4f:1a:14:22:4f:ca:95:22:69:f4:6f:3a:a6:75:
                    46:50:44:29:8c:ee:c3:18:e3:24:87:ec:11:f7:13:
                    2a:f7:f3:4d:40:c3:5d:4e:76:34:94:79:eb:57:d9:
                    de:30:9e:6f:04:9b:90:41:d9:86:ef:84:ae:96:8a:
                    81:b6:81:f0:9f:40:a5:6d:2e:1b:e3:fc:1c:c0:3d:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FD:F3:EF:C6:60:7C:AE:A5:E5:5D:92:D6:20:64:51:80:CF:7F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef985c12-bcd0-3b44-8303-e03c70c77766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:31:13:f6:c4:c6:5f:9d:a4:4b:dc:7c:5a:c9:82:a4:49:9d:
         22:03:70:05:8f:f3:d5:60:7b:70:f0:69:38:24:70:e3:cf:3d:
         b7:2b:df:ee:74:12:1e:f8:c6:bc:01:d1:25:91:4f:87:87:ef:
         b3:87:89:29:4d:ed:f3:51:a1:ba:72:49:42:79:ee:d8:57:d6:
         92:47:f6:9f:07:12:46:c9:ba:dc:43:d1:66:f4:01:6e:7a:32:
         bd:7c:ed:a1:d3:38:8a:84:c7:53:bf:1f:cd:1c:4b:5e:1a:23:
         01:8a:7c:05:c5:08:77:ef:39:6b:8c:e8:20:74:96:60:e9:01:
         4b:ad:11:5f:b3:0a:df:bf:fe:58:63:8f:f5:d3:6a:91:f9:22:
         de:23:1e:96:d1:b5:5c:61:4d:27:3e:1a:2c:bf:6a:c9:c1:05:
         6d:63:93:f6:21:7e:44:d0:0c:9c:61:6c:69:33:81:0b:94:53:
         b5:a0:19:c9:1b:88:85:a2:9e:ad:96:bd:7a:36:c2:d7:c4:a0:
         00:d4:41:88:98:54:74:cd:62:36:d6:b3:b4:b1:ab:62:f7:8c:
         81:ad:d4:ab:05:96:96:cd:24:72:2f:14:7c:d6:3f:56:a0:d0:
         e3:b1:64:17:36:18:9f:8a:a6:3d:9c:f0:08:fe:6d:06:82:8e:
         25:74:ee:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCATXAmXlDjJZ9EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
OTFmOWI0OTEtNjJhMi00ZTk4LWIwNGUtMWM3NDgyOGVlYTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+LHOv9ZffNLP4jWV6c66Lxx8jHaGDbzdFv/
XM0TYqgGTxrGVQLYES/CIXaVqVF1Cm4Ms7oKhcJyxwF3RMg0UlnU7rW4EMwZOEny
3KIgVHIrUYfs9n4osvh6Y2R6oFXKrTiWHP1iIg0zLO/jXRIYGxJA2puEA1+VYMrw
ysR0dNOsZWmYYfEninlu2in8z5TNlI3PyMVdNXDR/h3j9WluBFQhWb+rKFORlHRo
gVAVf6Vzq0EtTxoUIk/KlSJp9G86pnVGUEQpjO7DGOMkh+wR9xMq9/NNQMNdTnY0
lHnrV9neMJ5vBJuQQdmG74SuloqBtoHwn0ClbS4b4/wcwD2XwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFML98+/GYHyupeVdktYgZFGAz39EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWY5ODVjMTItYmNkMC0z
YjQ0LTgzMDMtZTAzYzcwYzc3NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUxE/bExl+dpEvcfFrJgqRJnSIDcAWP89Vge3DwaTgkcOPPPbcr3+50
Eh74xrwB0SWRT4eH77OHiSlN7fNRobpySUJ57thX1pJH9p8HEkbJutxD0Wb0AW56
Mr187aHTOIqEx1O/H80cS14aIwGKfAXFCHfvOWuM6CB0lmDpAUutEV+zCt+//lhj
j/XTapH5It4jHpbRtVxhTSc+Giy/asnBBW1jk/YhfkTQDJxhbGkzgQuUU7WgGckb
iIWinq2WvXo2wtfEoADUQYiYVHTNYjbWs7Sxq2L3jIGt1KsFlpbNJHIvFHzWP1ag
0OOxZBc2GJ+Kpj2c8Aj+bQaCjiV07vc=
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:17:26 2026 by rpki-client