Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86364858-d10c-3a40-88d9-8d6c740fde0c.roa
File:                     86364858-d10c-3a40-88d9-8d6c740fde0c.roa (raw, json)
Hash identifier:          q8pwO9/SooeOmr4UR3yVghOYl7RUowGfngKgqNo5Nvw=
Subject key identifier:   B1:19:07:81:64:E8:59:53:8B:61:6E:D5:5C:49:AF:5E:BB:44:41:6A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129C59CA4100193C3866480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86364858-d10c-3a40-88d9-8d6c740fde0c.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        192.119.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c5:9c:a4:10:01:93:c3:86:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=471b6116-e5aa-413c-83d6-1f2985e06731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:f0:66:d7:03:79:5e:91:d2:2c:5b:81:30:
                    cc:4c:cc:2f:d6:11:df:02:63:aa:07:d0:ae:bb:88:
                    a1:9d:70:99:92:bf:e5:bc:3c:cb:39:42:58:b9:13:
                    01:62:47:e0:9b:81:33:1b:12:de:2b:1d:34:09:da:
                    b6:f7:ba:db:c8:ff:f0:bb:66:c8:cc:b7:93:6e:9f:
                    86:4a:cb:a0:2d:10:dc:aa:f1:be:2c:3d:be:dd:a1:
                    64:94:d6:ea:59:99:63:cc:05:48:5c:39:d1:1d:69:
                    f0:7f:bf:b8:c2:b0:7a:ae:b9:57:2c:78:9c:0d:06:
                    0d:7d:4f:b1:d2:2c:19:fb:95:50:4f:63:3d:10:e2:
                    9d:86:39:c7:48:46:bb:2c:7a:3c:a6:40:0f:7f:06:
                    c1:aa:f3:c1:ec:bb:86:8f:44:6f:f6:0d:e7:59:75:
                    13:9d:13:81:82:58:ba:48:f7:24:84:4b:9a:cb:09:
                    2b:fd:aa:12:7c:41:02:9d:80:03:18:49:02:6a:28:
                    51:74:73:ab:61:6a:3c:de:58:02:e0:73:79:93:f9:
                    11:e2:90:99:4d:66:75:55:f6:66:b3:e9:ad:30:df:
                    08:a4:8a:7c:48:01:ac:25:8f:a9:4d:7e:f4:d7:24:
                    41:97:87:5b:3d:70:e5:2c:bf:9f:a4:15:32:f4:a9:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:19:07:81:64:E8:59:53:8B:61:6E:D5:5C:49:AF:5E:BB:44:41:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86364858-d10c-3a40-88d9-8d6c740fde0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:95:14:97:71:d3:70:2c:cc:69:da:0c:6d:74:3e:0b:30:68:
         e7:80:d1:e3:17:00:82:b3:87:c3:5f:7b:ab:a2:cd:17:96:6f:
         8f:be:92:23:22:16:2a:92:85:1d:4a:52:95:f6:7b:fc:24:17:
         4c:dc:42:b6:aa:b0:d4:18:ba:b4:5e:cf:76:f8:f0:03:06:57:
         00:12:21:60:e0:c4:d1:60:ae:27:d0:e5:1e:2f:da:f1:0b:d0:
         18:a4:75:18:85:d2:b4:fc:4b:29:f8:ee:a5:50:f8:c6:a2:fd:
         08:c8:de:d8:d2:31:6d:4a:59:c3:bb:bf:20:2b:70:fb:1b:ef:
         16:48:ee:21:65:f4:49:0a:c4:97:87:d8:cf:c1:2f:30:65:1d:
         83:30:d4:d3:ae:b9:a0:99:1e:e9:a2:98:3c:3e:a7:1f:3c:19:
         74:cf:10:69:94:43:58:9b:1b:d8:58:42:79:31:05:22:04:8b:
         72:d8:03:85:60:e4:5d:61:9e:6e:6f:e5:37:33:39:ee:57:de:
         e6:85:ff:ae:4c:eb:d1:bf:22:d1:c3:8d:ed:5d:d5:37:0f:cd:
         af:ab:bc:e8:7d:95:2f:23:3e:be:43:5f:2f:14:fc:a1:aa:7a:
         10:da:df:7c:e3:7a:08:cc:fd:86:d9:41:d4:db:d7:67:ea:bb:
         f9:26:c0:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKcWcpBABk8OGZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
NDcxYjYxMTYtZTVhYS00MTNjLTgzZDYtMWYyOTg1ZTA2NzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrjwZtcDeV6R0ixbgTDMTMwv1hHfAmOqB9Cu
u4ihnXCZkr/lvDzLOUJYuRMBYkfgm4EzGxLeKx00Cdq297rbyP/wu2bIzLeTbp+G
SsugLRDcqvG+LD2+3aFklNbqWZljzAVIXDnRHWnwf7+4wrB6rrlXLHicDQYNfU+x
0iwZ+5VQT2M9EOKdhjnHSEa7LHo8pkAPfwbBqvPB7LuGj0Rv9g3nWXUTnROBgli6
SPckhEuaywkr/aoSfEECnYADGEkCaihRdHOrYWo83lgC4HN5k/kR4pCZTWZ1VfZm
s+mtMN8IpIp8SAGsJY+pTX701yRBl4dbPXDlLL+fpBUy9Kk1KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEZB4Fk6FlTi2Fu1VxJr167REFqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODYzNjQ4NTgtZDEwYy0z
YTQwLTg4ZDktOGQ2Yzc0MGZkZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGVFJdx03AszGnaDG10PgswaOeA0eMXAIKzh8Nfe6uizReWb4++kiMi
FiqShR1KUpX2e/wkF0zcQraqsNQYurRez3b48AMGVwASIWDgxNFgrifQ5R4v2vEL
0BikdRiF0rT8Syn47qVQ+Mai/QjI3tjSMW1KWcO7vyArcPsb7xZI7iFl9EkKxJeH
2M/BLzBlHYMw1NOuuaCZHumimDw+px88GXTPEGmUQ1ibG9hYQnkxBSIEi3LYA4Vg
5F1hnm5v5TczOe5X3uaF/65M69G/ItHDje1d1TcPza+rvOh9lS8jPr5DXy8U/KGq
ehDa33zjegjM/YbZQdTb12fqu/kmwFQ=
-----END CERTIFICATE-----
Generated at Wed Jun 24 03:21:41 2026 by rpki-client