Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa
File:                     dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa (raw, json)
Hash identifier:          SuvP0dMHMRkrsU2CEwTQDyCsCfAZJ+er6NAjaOA5mD8=
Subject key identifier:   45:2E:64:30:82:C1:C0:B7:A8:CA:8F:33:99:AE:C0:C5:7F:2C:3E:C0
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584FBCE717B87A573D53798A2340
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa
Signing time:             Thu 05 Nov 2026 09:33:03 +0000
ROA not before:           Thu 05 Nov 2026 09:33:03 +0000
ROA not after:            Wed 03 Feb 2027 09:33:03 +0000
asID:                     20326
IP address blocks:        209.222.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:bc:e7:17:b8:7a:57:3d:53:79:8a:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Nov  5 09:33:03 2026 GMT
            Not After : Feb  3 09:33:03 2027 GMT
        Subject: CN=a120ba67-a1bf-4b11-a347-72e4c62f539d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:a2:8c:72:b3:df:c9:8d:44:bc:76:3e:f5:
                    63:68:05:f3:45:86:cd:92:d3:dc:bd:be:30:60:3e:
                    d2:5b:ee:78:d9:38:25:02:0d:a7:21:dd:05:7f:3a:
                    74:e3:4a:1d:20:25:d8:36:d6:87:15:11:87:a5:ce:
                    e8:75:42:a4:7b:17:a1:d1:ed:c7:c9:4b:30:cd:57:
                    c7:38:c1:8a:5d:87:a4:1b:67:66:c7:a9:9c:80:7e:
                    94:d4:b1:72:76:97:9d:f4:8f:ed:b2:b6:80:db:d4:
                    f6:e1:22:e5:f4:6c:07:60:c3:63:07:94:a9:fa:55:
                    e0:17:a1:2e:75:2c:f1:c3:68:29:a1:b2:63:6a:5a:
                    95:49:2a:f8:cf:02:ac:59:91:05:b4:95:f9:73:bb:
                    2a:37:9a:bd:24:83:d6:c0:f1:19:7b:87:82:6c:2c:
                    80:7c:56:b3:1b:6d:e6:12:7a:e0:1a:50:48:ec:6d:
                    6f:20:8f:27:2b:4c:48:7e:99:0b:2d:9b:e2:42:1e:
                    b4:9b:c2:23:9e:df:ee:e3:ef:33:a3:19:d2:65:66:
                    f3:6d:e3:59:63:3d:50:67:05:aa:60:90:b5:cb:63:
                    99:be:a5:88:20:40:a5:8b:9c:d0:50:ef:25:d2:e6:
                    7f:72:b2:20:a2:7d:bf:a3:65:68:1c:1e:7e:7d:5b:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:64:30:82:C1:C0:B7:A8:CA:8F:33:99:AE:C0:C5:7F:2C:3E:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/dd2f23a5-7b05-3f38-804a-ffa5fb709a14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ac:ba:fa:35:df:1a:bc:f3:ba:6f:1b:50:5b:78:5c:06:e9:
         a1:e1:83:72:08:88:d7:e7:38:47:7b:48:f3:90:4e:a0:30:38:
         48:e7:19:f8:dd:00:f7:a2:a1:59:05:0b:0c:77:2c:6b:ef:52:
         c7:36:d1:8d:aa:3a:bd:17:dc:33:97:1e:5e:a7:e5:4f:13:9a:
         aa:f5:9c:9c:00:73:b5:df:b3:5b:a8:d9:b7:74:62:97:4d:aa:
         18:55:a5:ea:ca:2d:a8:ae:53:59:f6:f1:b3:bf:a8:4a:59:4a:
         f3:52:f6:b5:67:40:65:9d:7a:75:9a:5a:20:71:93:5a:0e:56:
         d9:d5:95:1c:f1:75:2d:12:69:9d:ff:08:37:a2:1d:fe:45:36:
         d2:e0:70:83:0d:56:48:81:44:11:32:90:fc:ab:3f:96:c5:26:
         75:90:6b:44:41:42:d5:f5:87:51:a2:9e:cd:61:56:df:74:44:
         12:6e:a4:87:cb:38:e4:52:04:9d:27:3f:5f:8e:c3:59:21:de:
         a0:e7:ca:b1:3d:da:dc:0c:ed:1d:32:79:58:57:29:8d:23:81:
         60:2d:25:7c:c1:a7:41:14:06:5e:9a:44:69:2e:83:9b:4e:d0:
         52:cc:78:4b:94:77:a5:5c:a1:c3:5a:10:83:a4:68:c8:11:98:
         ca:7f:50:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+85xe4elc9U3mKI0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh
NmFlMB4XDTI2MTEwNTA5MzMwM1oXDTI3MDIwMzA5MzMwM1owLzEtMCsGA1UEAxMk
YTEyMGJhNjctYTFiZi00YjExLWEzNDctNzJlNGM2MmY1MzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBSijHKz38mNRLx2PvVjaAXzRYbNktPcvb4w
YD7SW+542TglAg2nId0Ffzp040odICXYNtaHFRGHpc7odUKkexeh0e3HyUswzVfH
OMGKXYekG2dmx6mcgH6U1LFydped9I/tsraA29T24SLl9GwHYMNjB5Sp+lXgF6Eu
dSzxw2gpobJjalqVSSr4zwKsWZEFtJX5c7sqN5q9JIPWwPEZe4eCbCyAfFazG23m
EnrgGlBI7G1vII8nK0xIfpkLLZviQh60m8Ijnt/u4+8zoxnSZWbzbeNZYz1QZwWq
YJC1y2OZvqWIIECli5zQUO8l0uZ/crIgon2/o2VoHB5+fVvIyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEUuZDCCwcC3qMqPM5muwMV/LD7AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj
ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvZGQyZjIzYTUtN2IwNS0z
ZjM4LTgwNGEtZmZhNWZiNzA5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx
YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi
YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw
MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d74MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGsuvo13xq887pvG1BbeFwG6aHhg3IIiNfnOEd7SPOQTqAwOEjnGfjd
APeioVkFCwx3LGvvUsc20Y2qOr0X3DOXHl6n5U8Tmqr1nJwAc7Xfs1uo2bd0YpdN
qhhVperKLaiuU1n28bO/qEpZSvNS9rVnQGWdenWaWiBxk1oOVtnVlRzxdS0SaZ3/
CDeiHf5FNtLgcIMNVkiBRBEykPyrP5bFJnWQa0RBQtX1h1Gins1hVt90RBJupIfL
OORSBJ0nP1+Ow1kh3qDnyrE92twM7R0yeVhXKY0jgWAtJXzBp0EUBl6aRGkug5tO
0FLMeEuUd6VcocNaEIOkaMgRmMp/UNY=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:21 2026 by rpki-client