Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/37f5c8c2-ac42-3fe4-babd-ed7d1bf9eae1.roa
File:                     37f5c8c2-ac42-3fe4-babd-ed7d1bf9eae1.roa (raw, json)
Hash identifier:          WQwoE8/JpV2DOt7qJ2K4Tqr2tEgR83OSL4YcyVrM1qY=
Subject key identifier:   09:69:AA:1A:58:A6:CF:52:E2:A5:05:09:EE:DA:2B:80:BE:B2:8A:96
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584F9208625A4BDE39BB8617A3C0
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/37f5c8c2-ac42-3fe4-babd-ed7d1bf9eae1.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     19871
IP address blocks:        162.210.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:62:5a:4b:de:39:bb:86:17:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=2ec5b009-dcc6-4bfa-b04c-ad5bf3f36ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:53:06:ed:a7:c1:f8:a4:ad:8b:6e:cb:f0:
                    a5:73:4e:ff:3d:d6:75:a3:a5:3d:8b:87:66:3a:11:
                    d5:11:e1:37:21:ba:ea:15:ff:cf:36:e9:dc:d2:4f:
                    d3:d0:fe:9d:e1:e3:38:52:90:37:58:7e:ab:0e:9c:
                    27:6c:e1:ed:30:47:aa:dc:76:25:36:95:85:1c:bd:
                    d7:67:71:56:33:55:c2:e9:df:44:16:1c:cb:f2:43:
                    a5:55:3a:d7:1c:92:b1:6d:91:4a:94:d1:1f:8b:e0:
                    be:a6:fe:01:a6:64:4c:6b:e4:93:f9:df:31:67:92:
                    17:15:94:3f:9a:78:70:7e:de:b5:9f:48:40:70:a5:
                    fe:17:ef:aa:66:20:dc:3a:1b:c8:0b:b3:46:fb:b1:
                    77:65:87:5c:9a:a3:8b:c0:ba:2e:0d:89:2b:33:9a:
                    10:ba:09:56:63:a8:26:2e:af:04:d9:5b:eb:af:f4:
                    18:48:36:47:87:6d:d6:16:d3:3e:75:bc:7c:fc:c1:
                    f6:cd:49:f3:76:31:8d:00:fd:a7:2e:8d:8d:d7:a7:
                    7d:5c:cd:f7:7b:9a:95:8a:c3:c7:9e:06:0d:4e:82:
                    3f:ef:cb:68:49:29:a8:e5:26:9a:31:ab:ef:20:1a:
                    89:2b:7a:8c:0a:ed:3d:00:05:02:5d:d6:0e:b6:b2:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:69:AA:1A:58:A6:CF:52:E2:A5:05:09:EE:DA:2B:80:BE:B2:8A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/37f5c8c2-ac42-3fe4-babd-ed7d1bf9eae1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:86:d0:59:20:16:d7:aa:ba:99:7e:a3:fa:ee:c1:69:35:20:
         37:33:f5:ba:d1:1c:07:99:f1:7d:57:c7:2c:1d:97:65:9f:26:
         28:81:75:18:73:1a:29:3f:e4:51:df:45:b6:08:85:d7:9f:c4:
         8a:93:a1:2a:3d:f6:81:f8:85:2a:dc:d7:31:f2:5f:87:2c:57:
         0b:85:0f:f8:4e:d3:d1:74:c2:5f:34:2b:73:32:bf:e7:b3:e7:
         51:3d:11:0d:07:1e:a1:36:65:48:68:d8:17:00:ac:d3:15:c4:
         02:fe:fd:53:98:6b:64:3b:19:37:cb:25:e6:71:5f:72:77:22:
         14:74:f1:e6:6e:a4:f7:da:5c:0f:5a:24:7e:87:38:6c:35:df:
         31:27:c9:76:64:23:97:39:52:8b:c9:64:c2:f5:57:36:91:8c:
         1b:32:d4:91:52:5a:d6:d8:36:6f:bf:1b:89:06:c9:2f:19:22:
         4e:43:53:5b:16:0a:88:d1:30:d4:cf:31:fd:9c:b6:b9:e2:b8:
         fb:9a:29:22:3f:d9:be:93:d4:91:7c:86:2c:6a:1a:b6:7c:49:
         15:f6:cd:ae:06:0b:b1:38:c4:a7:5d:45:4c:48:7b:ce:26:a3:
         5b:07:d9:9e:a7:1b:95:e2:83:c4:4e:ec:60:59:b1:10:4b:09:
         db:10:21:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCGJaS945u4YXo8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MmVjNWIwMDktZGNjNi00YmZhLWIwNGMtYWQ1YmYzZjM2YWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslhTBu2nwfikrYtuy/Clc07/PdZ1o6U9i4dm
OhHVEeE3IbrqFf/PNunc0k/T0P6d4eM4UpA3WH6rDpwnbOHtMEeq3HYlNpWFHL3X
Z3FWM1XC6d9EFhzL8kOlVTrXHJKxbZFKlNEfi+C+pv4BpmRMa+ST+d8xZ5IXFZQ/
mnhwft61n0hAcKX+F++qZiDcOhvIC7NG+7F3ZYdcmqOLwLouDYkrM5oQuglWY6gm
Lq8E2Vvrr/QYSDZHh23WFtM+dbx8/MH2zUnzdjGNAP2nLo2N16d9XM33e5qVisPH
ngYNToI/78toSSmo5SaaMavvIBqJK3qMCu09AAUCXdYOtrKHyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAlpqhpYps9S4qUFCe7aK4C+soqWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMzdmNWM4YzItYWM0Mi0z
ZmU0LWJhYmQtZWQ3ZDFiZjllYWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMyG0FkgFtequpl+o/ruwWk1IDcz9brRHAeZ8X1Xxywdl2WfJiiBdRhz
Gik/5FHfRbYIhdefxIqToSo99oH4hSrc1zHyX4csVwuFD/hO09F0wl80K3Myv+ez
51E9EQ0HHqE2ZUho2BcArNMVxAL+/VOYa2Q7GTfLJeZxX3J3IhR08eZupPfaXA9a
JH6HOGw13zEnyXZkI5c5UovJZML1VzaRjBsy1JFSWtbYNm+/G4kGyS8ZIk5DU1sW
CojRMNTPMf2ctrniuPuaKSI/2b6T1JF8hixqGrZ8SRX2za4GC7E4xKddRUxIe84m
o1sH2Z6nG5Xig8RO7GBZsRBLCdsQIZ0=
-----END CERTIFICATE-----
Generated at Fri Oct 23 15:48:00 2026 by rpki-client