Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b59b130c-11cd-3528-9835-fc9db286c9c3.roa
File:                     b59b130c-11cd-3528-9835-fc9db286c9c3.roa (raw, json)
Hash identifier:          ZwnAuuOQLWbs+qTKVCpSjVxR9GcbRWjAeo5SN02LI4k=
Subject key identifier:   3A:B3:CF:B2:DC:6F:5C:A1:64:D9:1D:1B:C1:F8:7C:0F:BF:3E:95:9D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584CB6B709FF284371140C0B8780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b59b130c-11cd-3528-9835-fc9db286c9c3.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     36522
IP address blocks:        209.226.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:09:ff:28:43:71:14:0c:0b:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=c8096b19-410c-4839-8081-7c66293499d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:b8:5c:44:bf:1f:f7:af:90:6f:81:02:a5:
                    1b:4e:c7:4f:03:4b:08:33:fe:59:c9:1a:16:88:de:
                    1d:d3:54:5a:2d:82:fc:4d:c6:29:43:06:2c:03:23:
                    b0:47:1b:d5:b5:5e:61:3b:4b:00:0b:5b:fe:9e:4e:
                    3c:d0:d8:81:df:89:91:52:a3:2c:28:ac:bd:6a:45:
                    3f:a9:8f:40:37:b2:5c:7b:04:67:4e:1f:a0:e3:a9:
                    7b:64:f4:fd:af:09:3c:ed:57:89:a5:15:aa:cf:da:
                    c6:64:80:80:22:00:b6:e7:b1:f5:78:3c:b0:8d:ac:
                    18:69:fe:d8:84:47:0b:9a:09:bf:10:b7:f9:16:17:
                    db:ed:7f:62:68:fc:fd:92:de:52:b9:7f:9b:53:81:
                    7d:24:c8:02:ad:c4:7a:67:f7:a8:62:9b:00:a2:76:
                    3f:4d:6c:f7:5a:c9:4d:a0:ea:4d:91:b5:4f:03:48:
                    c9:4d:63:30:8d:80:71:8d:b1:21:66:ae:81:91:3f:
                    29:70:9c:38:86:9d:d7:82:88:27:96:1b:3c:08:72:
                    48:7c:e6:a6:93:b2:5e:33:b5:d3:43:f1:a6:59:70:
                    dc:ad:53:d8:c0:b3:8c:f0:84:82:74:aa:e1:fd:ec:
                    23:7d:9f:84:99:7e:f9:e4:bf:7e:4b:22:7e:5c:b1:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:CF:B2:DC:6F:5C:A1:64:D9:1D:1B:C1:F8:7C:0F:BF:3E:95:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b59b130c-11cd-3528-9835-fc9db286c9c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c7:95:be:e8:2e:c5:a1:d6:52:a1:34:e3:3e:f3:6b:b4:b9:
         30:3f:50:fc:68:4c:03:00:5d:0d:03:aa:a7:53:c6:df:d7:6d:
         f6:58:d4:f6:df:b5:25:85:cd:22:7e:9a:9e:0a:d8:e1:4f:75:
         30:a8:7c:38:a4:8e:12:46:0c:9f:a1:3c:d4:a5:c1:1e:87:cb:
         0e:8c:3f:e7:36:0a:01:49:ff:cb:79:6d:dd:5c:eb:29:5b:a7:
         99:bc:f5:4f:a6:2b:6b:49:93:37:16:0e:9f:dc:01:9b:ef:68:
         9c:74:9c:ec:70:ce:11:22:df:5c:da:17:89:a3:8a:72:0d:c2:
         3a:ed:13:c2:ec:40:b3:4f:35:57:4d:cb:a6:e4:54:cc:36:2e:
         5d:45:eb:84:d8:c0:7d:2f:f7:0e:3f:c2:55:0f:18:1a:e6:c6:
         ac:0d:62:10:47:06:95:c3:f2:3f:6c:13:f5:87:14:e8:a6:b4:
         fd:ac:94:89:0c:b9:45:3e:4f:4e:86:e4:81:5e:54:0c:d6:19:
         7d:2c:ed:15:98:17:37:97:11:23:d4:e5:d8:b5:99:68:96:08:
         8a:19:59:6e:34:00:ba:f6:ff:6f:ef:65:28:95:ba:47:88:d5:
         1d:16:a0:2b:c3:e1:e2:e9:02:23:ec:e8:9a:dc:53:9c:af:39:
         e7:a3:28:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2twn/KENxFAwLh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk
YzgwOTZiMTktNDEwYy00ODM5LTgwODEtN2M2NjI5MzQ5OWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoe4XES/H/evkG+BAqUbTsdPA0sIM/5ZyRoW
iN4d01RaLYL8TcYpQwYsAyOwRxvVtV5hO0sAC1v+nk480NiB34mRUqMsKKy9akU/
qY9AN7JcewRnTh+g46l7ZPT9rwk87VeJpRWqz9rGZICAIgC257H1eDywjawYaf7Y
hEcLmgm/ELf5Fhfb7X9iaPz9kt5SuX+bU4F9JMgCrcR6Z/eoYpsAonY/TWz3WslN
oOpNkbVPA0jJTWMwjYBxjbEhZq6BkT8pcJw4hp3Xgognlhs8CHJIfOamk7JeM7XT
Q/GmWXDcrVPYwLOM8ISCdKrh/ewjfZ+EmX755L9+SyJ+XLEg5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqzz7Lcb1yhZNkdG8H4fA+/PpWdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjU5YjEzMGMtMTFjZC0z
NTI4LTk4MzUtZmM5ZGIyODZjOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eIfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjHlb7oLsWh1lKhNOM+82u0uTA/UPxoTAMAXQ0DqqdTxt/XbfZY1Pbf
tSWFzSJ+mp4K2OFPdTCofDikjhJGDJ+hPNSlwR6Hyw6MP+c2CgFJ/8t5bd1c6ylb
p5m89U+mK2tJkzcWDp/cAZvvaJx0nOxwzhEi31zaF4mjinINwjrtE8LsQLNPNVdN
y6bkVMw2Ll1F64TYwH0v9w4/wlUPGBrmxqwNYhBHBpXD8j9sE/WHFOimtP2slIkM
uUU+T06G5IFeVAzWGX0s7RWYFzeXESPU5di1mWiWCIoZWW40ALr2/2/vZSiVukeI
1R0WoCvD4eLpAiPs6JrcU5yvOeejKLc=
-----END CERTIFICATE-----
Generated at Fri Feb 27 04:53:58 2026 by rpki-client