Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
File:                     7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa (raw, json)
Hash identifier:          Uc6V0Xj+Zdr2KsZ2o22JF74xzdq/h+blSUlcOJcVy1I=
Subject key identifier:   B9:02:4E:74:96:80:7E:CB:4F:F6:83:30:EA:BD:44:AA:DC:E4:76:59
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584EC0A71B5BAEDB9BEC615F6080
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     137443
IP address blocks:        192.185.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:1b:5b:ae:db:9b:ec:61:5f:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=3e4ea94a-ca83-4864-91a3-9186d3759fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:dd:79:69:75:44:61:c1:7c:bf:ba:81:0c:
                    58:0f:05:7b:19:26:57:0a:c3:1b:8d:44:b6:c3:35:
                    b9:ca:c7:88:de:e1:b1:56:a2:32:ee:76:11:aa:31:
                    a5:f0:0c:9b:3d:c6:af:2f:ac:c1:64:57:1f:d4:22:
                    c1:3b:2d:5d:f7:33:cb:7d:32:8a:56:4c:5e:83:2c:
                    c4:ec:a3:b4:f4:88:0c:f3:0c:0c:0b:a3:bf:17:aa:
                    02:7e:86:1b:5f:d7:d5:c3:e6:fe:37:f3:5a:4d:9a:
                    ea:a6:22:c4:b4:21:3d:41:cb:06:f1:fc:c0:6c:68:
                    97:6d:cd:7d:fd:2a:ca:cd:7d:49:1a:d8:58:80:7b:
                    85:cf:e9:8c:45:a5:f6:27:fb:be:2f:fe:dd:30:5f:
                    0b:70:3c:44:18:5e:88:49:fd:39:41:dd:24:60:33:
                    89:fe:76:94:e2:a6:07:3b:4d:91:50:b4:1d:3e:fd:
                    ad:68:85:95:12:6d:76:a0:fc:1b:1c:26:c4:bc:cd:
                    c7:f3:ff:c7:bc:b5:26:5f:34:5d:c9:35:c1:dc:f6:
                    21:35:8d:7f:12:0d:5b:79:0d:7c:21:5d:05:e4:cb:
                    48:03:d8:c8:5d:ca:31:95:f6:ce:05:3c:2d:9c:14:
                    d7:66:9f:8b:12:d6:b8:4a:95:ed:15:d4:fe:02:2d:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:4E:74:96:80:7E:CB:4F:F6:83:30:EA:BD:44:AA:DC:E4:76:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:f0:a8:9e:2c:d3:b1:ec:4d:32:e9:ba:98:5f:dc:7c:eb:
         a5:02:22:c4:58:3b:0a:9f:77:05:e0:c5:eb:01:f2:ea:0b:92:
         b0:01:fd:67:eb:5a:6d:ba:d1:50:42:34:d9:29:12:0d:00:95:
         30:63:fe:2a:2d:e4:85:39:ad:db:ba:2b:6e:dc:fd:df:ae:e8:
         fb:55:53:35:3d:55:19:cb:59:14:d1:0d:f8:b3:3c:b4:a6:35:
         c0:0c:17:d5:54:86:e5:27:87:1b:44:20:cf:cd:4f:3d:4c:ab:
         84:02:21:e1:56:02:14:6e:76:a9:e8:cc:77:2b:3e:55:74:f9:
         f5:02:0d:9e:84:af:87:9c:e2:bf:3c:0a:41:c4:0d:a2:d7:8e:
         96:05:2a:67:ff:b5:5d:3d:7e:aa:19:23:03:bc:a3:5b:95:cf:
         68:04:99:ff:34:01:9a:3f:12:f6:61:5d:3f:01:ca:96:f7:0b:
         ad:1f:d9:63:72:d2:b2:13:af:b0:06:97:b9:70:26:e0:21:95:
         eb:be:c3:95:0a:be:09:98:28:ca:32:04:d2:93:1d:38:96:1a:
         74:b9:5a:be:74:e0:74:46:80:9e:db:ff:ca:fc:0c:21:72:10:
         9d:a6:46:86:bd:d6:0f:b4:57:9e:7e:d7:93:6a:17:2e:aa:62:
         cd:49:be:6f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7Apxtbrtub7GFfYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
M2U0ZWE5NGEtY2E4My00ODY0LTkxYTMtOTE4NmQzNzU5ZmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/fdeWl1RGHBfL+6gQxYDwV7GSZXCsMbjUS2
wzW5yseI3uGxVqIy7nYRqjGl8AybPcavL6zBZFcf1CLBOy1d9zPLfTKKVkxegyzE
7KO09IgM8wwMC6O/F6oCfoYbX9fVw+b+N/NaTZrqpiLEtCE9QcsG8fzAbGiXbc19
/SrKzX1JGthYgHuFz+mMRaX2J/u+L/7dMF8LcDxEGF6ISf05Qd0kYDOJ/naU4qYH
O02RULQdPv2taIWVEm12oPwbHCbEvM3H8//HvLUmXzRdyTXB3PYhNY1/Eg1beQ18
IV0F5MtIA9jIXcoxlfbOBTwtnBTXZp+LEta4SpXtFdT+Ai1SsQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLkCTnSWgH7LT/aDMOq9RKrc5HZZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvN2Y0NzI2MGQtNTc0OS0z
ZDM2LThlOGEtZDZjMGE5ZTIwMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAwLkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcdTwqJ4s07HsTTLpuphf3HzrpQIixFg7Cp93BeDF6wHy6guSsAH9Z+ta
bbrRUEI02SkSDQCVMGP+Ki3khTmt27orbtz9367o+1VTNT1VGctZFNEN+LM8tKY1
wAwX1VSG5SeHG0Qgz81PPUyrhAIh4VYCFG52qejMdys+VXT59QINnoSvh5zivzwK
QcQNoteOlgUqZ/+1XT1+qhkjA7yjW5XPaASZ/zQBmj8S9mFdPwHKlvcLrR/ZY3LS
shOvsAaXuXAm4CGV677DlQq+CZgoyjIE0pMdOJYadLlavnTgdEaAntv/yvwMIXIQ
naZGhr3WD7RXnn7Xk2oXLqpizUm+bw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:43:30 2026 by rpki-client