Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6d39431-9485-353b-a73a-34e63764d706.roa
File:                     a6d39431-9485-353b-a73a-34e63764d706.roa (raw, json)
Hash identifier:          fJz1Ye6TNrb5WGx9dCklDkDnFqCive+SOEq2Sf8LWP4=
Subject key identifier:   68:5B:AF:7E:10:5D:24:98:5B:59:7B:E1:CA:CA:54:B2:2A:D8:23:D9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE38CAEABA9251C36A3F23540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6d39431-9485-353b-a73a-34e63764d706.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        192.119.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:ae:ab:a9:25:1c:36:a3:f2:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=aac387c8-8f44-467f-b170-178d07839ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:49:24:0f:a5:bb:87:75:2d:a3:19:73:57:
                    f0:a3:28:6b:89:7b:c4:a2:3a:61:af:fa:c3:18:3d:
                    b5:e5:fb:ed:1a:c1:3a:50:96:e8:3e:4c:08:be:2e:
                    e4:fc:e1:70:41:b5:d3:ce:5a:45:a3:a4:e4:d9:34:
                    2f:2b:d3:8c:41:57:de:c1:59:68:69:05:4d:e4:63:
                    fb:27:89:f6:45:0e:3f:b6:9b:3f:5b:19:67:14:d3:
                    52:45:05:18:78:44:a4:f3:c8:a7:7b:46:a1:f7:0f:
                    44:c4:ab:bd:82:f1:9a:ea:a0:4d:22:38:0b:63:9f:
                    ae:9a:13:00:ee:2c:ed:7a:e7:8c:84:c7:84:cf:bf:
                    9d:bd:7b:26:86:f9:da:2b:d7:8a:e9:e9:c3:e0:05:
                    ba:a5:a9:d2:7f:6b:60:a0:e4:57:25:b4:c6:d4:8d:
                    59:71:af:8d:73:59:a4:b2:7c:0d:96:38:31:a6:c2:
                    5a:00:f8:6f:6f:74:1d:17:17:de:53:e5:5d:99:46:
                    90:e7:a2:29:b9:19:9b:a7:d3:6d:08:85:e5:3b:64:
                    ab:50:bb:6c:fd:0b:3d:91:ab:a9:72:36:90:be:c6:
                    e1:75:b1:86:19:be:04:52:aa:67:bf:28:d0:06:e6:
                    7a:65:a9:f5:db:db:be:94:52:e4:64:1c:c7:f6:99:
                    9e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:AF:7E:10:5D:24:98:5B:59:7B:E1:CA:CA:54:B2:2A:D8:23:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6d39431-9485-353b-a73a-34e63764d706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:97:a5:c5:38:bf:45:22:20:00:c8:25:13:b0:b6:71:bd:81:
         79:0d:0f:57:fb:a3:7d:eb:ba:2b:14:c4:f0:cd:7d:ed:d8:20:
         2e:ae:94:66:fd:41:0f:99:75:86:3a:68:5c:b3:90:db:2a:5d:
         50:61:e2:ff:e5:0c:e2:8b:fb:3d:32:88:3e:13:4f:51:f8:84:
         12:aa:c9:80:ce:e9:d8:44:c4:fd:e1:63:59:f3:0c:d2:86:cc:
         23:c7:d0:3c:23:c4:0d:52:1a:90:7e:d9:4b:35:f8:d1:cd:90:
         22:7a:8b:f7:cd:cd:35:a7:e9:11:a5:28:99:07:e8:12:61:00:
         4a:29:4c:3c:43:b0:5f:86:00:ef:ca:54:fa:95:7c:2b:2e:c7:
         de:04:fb:09:09:57:c4:cc:a0:0c:43:94:a4:b8:06:b8:96:5b:
         eb:0a:f8:e3:85:b4:c0:b7:b5:bd:b2:23:ef:c0:96:d6:86:7a:
         da:5c:20:f4:af:4f:da:9c:25:f9:63:e9:68:f7:3d:42:21:f9:
         3d:b3:9c:19:9c:3b:94:3a:de:b5:e3:47:de:40:48:6b:e1:3d:
         76:4c:d1:28:9f:d0:f2:58:97:00:1a:d7:75:55:16:5c:8d:d8:
         46:64:17:5d:2c:19:08:51:62:c7:ed:3c:aa:b3:09:9d:72:8d:
         91:a8:3c:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjK6rqSUcNqPyNUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk
YWFjMzg3YzgtOGY0NC00NjdmLWIxNzAtMTc4ZDA3ODM5ZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ9JJA+lu4d1LaMZc1fwoyhriXvEojphr/rD
GD215fvtGsE6UJboPkwIvi7k/OFwQbXTzlpFo6Tk2TQvK9OMQVfewVloaQVN5GP7
J4n2RQ4/tps/WxlnFNNSRQUYeESk88ine0ah9w9ExKu9gvGa6qBNIjgLY5+umhMA
7izteueMhMeEz7+dvXsmhvnaK9eK6enD4AW6panSf2tgoORXJbTG1I1Zca+Nc1mk
snwNljgxpsJaAPhvb3QdFxfeU+VdmUaQ56IpuRmbp9NtCIXlO2SrULts/Qs9kaup
cjaQvsbhdbGGGb4EUqpnvyjQBuZ6Zan129u+lFLkZBzH9pmeiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhbr34QXSSYW1l74crKVLIq2CPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTZkMzk0MzEtOTQ4NS0z
NTNiLWE3M2EtMzRlNjM3NjRkNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiXpcU4v0UiIADIJROwtnG9gXkND1f7o33ruisUxPDNfe3YIC6ulGb9
QQ+ZdYY6aFyzkNsqXVBh4v/lDOKL+z0yiD4TT1H4hBKqyYDO6dhExP3hY1nzDNKG
zCPH0DwjxA1SGpB+2Us1+NHNkCJ6i/fNzTWn6RGlKJkH6BJhAEopTDxDsF+GAO/K
VPqVfCsux94E+wkJV8TMoAxDlKS4BriWW+sK+OOFtMC3tb2yI+/AltaGetpcIPSv
T9qcJflj6Wj3PUIh+T2znBmcO5Q63rXjR95ASGvhPXZM0Sif0PJYlwAa13VVFlyN
2EZkF10sGQhRYsftPKqzCZ1yjZGoPL4=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:48:14 2026 by rpki-client