Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/fbe6a14d-c7ef-3cdc-9d66-425a8f8883c9.roa
File:                     fbe6a14d-c7ef-3cdc-9d66-425a8f8883c9.roa (raw, json)
Hash identifier:          6wSvDsIglMWBRDhAdVChwl4LkP5U/SKdNFiuJlgTB1s=
Subject key identifier:   BF:D1:7D:37:4E:BC:E2:02:D2:42:DE:07:4F:85:83:70:29:8C:3D:6B
Certificate issuer:       /CN=2d9ac3b5-bc3d-4120-9a59-43d61605d2cb
Certificate serial:       010D0C9F4328584F9A248FC0522A7FC37799B000
Authority key identifier: 11:E1:6D:39:BF:61:A9:52:3A:E5:04:FA:79:AD:75:F0:99:D5:24:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/fbe6a14d-c7ef-3cdc-9d66-425a8f8883c9.roa
Signing time:             Fri 23 Oct 2026 22:43:36 +0000
ROA not before:           Fri 23 Oct 2026 22:43:36 +0000
ROA not after:            Thu 21 Jan 2027 23:43:36 +0000
asID:                     16509
IP address blocks:        192.35.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:24:8f:c0:52:2a:7f:c3:77:99:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9ac3b5-bc3d-4120-9a59-43d61605d2cb
        Validity
            Not Before: Oct 23 22:43:36 2026 GMT
            Not After : Jan 21 23:43:36 2027 GMT
        Subject: CN=0e1aacbb-1362-48df-ba79-e2754f1f473c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:6a:f7:72:87:59:08:8d:c0:0f:89:87:8a:
                    9c:96:ce:62:d6:64:00:06:1c:d6:86:3b:c6:41:05:
                    94:c0:5e:31:db:2c:0b:65:17:3b:5a:92:37:38:f4:
                    85:c6:08:11:b5:da:33:6d:6a:2d:a2:8a:16:b1:5d:
                    a1:75:38:46:15:90:c3:20:ff:ec:9e:f0:ea:5e:ab:
                    86:14:bf:ac:fc:da:8d:62:37:15:7f:18:1e:6a:68:
                    01:1e:4a:56:7a:0e:51:02:c7:a9:c3:b7:ed:94:5c:
                    69:1f:fa:46:f4:28:ce:87:b3:09:a7:12:1b:ca:86:
                    15:94:76:4e:48:29:c3:f5:b6:2e:4e:10:bb:b3:8e:
                    c6:e7:cc:43:2f:22:79:43:23:42:93:58:aa:0d:0a:
                    5c:ce:2e:03:ee:9e:ff:68:67:05:2f:09:30:72:04:
                    0d:9a:33:4a:ba:71:40:65:b0:b1:e9:a9:2f:0d:89:
                    43:5b:ef:4e:59:fb:ee:b5:9e:58:2b:21:89:79:db:
                    71:1f:92:5e:fd:33:0f:10:db:69:0d:10:58:3f:d0:
                    dd:ec:a6:f9:00:8a:34:2b:cf:91:fb:f4:59:e4:4f:
                    45:0e:e2:89:5e:0f:5c:14:ff:8d:25:86:32:55:42:
                    ad:64:81:f1:bb:b6:66:21:d5:65:7c:82:9a:e6:1f:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:7D:37:4E:BC:E2:02:D2:42:DE:07:4F:85:83:70:29:8C:3D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/fbe6a14d-c7ef-3cdc-9d66-425a8f8883c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.crl

            X509v3 Authority Key Identifier:
                keyid:11:E1:6D:39:BF:61:A9:52:3A:E5:04:FA:79:AD:75:F0:99:D5:24:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2d9ac3b5-bc3d-4120-9a59-43d61605d2cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:b0:d4:fa:94:00:d5:a2:04:63:59:2d:2e:b7:28:64:fd:
         a4:f5:71:b6:65:bf:ff:27:61:f9:e0:a7:75:c9:19:e3:ff:87:
         1b:15:bd:cb:19:16:d9:9e:ba:39:f7:bf:df:14:17:62:42:36:
         f5:78:ef:9a:d9:92:f2:c0:12:d2:66:4e:ad:02:eb:56:0c:d5:
         62:e1:a4:c7:6e:e1:43:f0:94:66:14:e0:4b:cb:8f:29:21:96:
         8d:f3:13:b5:20:6e:c3:b9:bb:17:af:31:3a:c2:42:86:ab:f5:
         ac:4d:7d:e9:88:ac:69:44:de:c8:ba:c6:2c:e0:94:09:13:be:
         2f:7c:38:d6:ad:e1:b2:f6:25:53:75:bd:6f:7c:c3:f5:4f:b3:
         91:c0:96:f1:18:3e:0d:97:c5:21:b8:ad:b8:cd:1b:58:b7:ad:
         08:b3:21:ac:6d:49:57:b2:c4:e0:33:f4:fb:9e:4d:6f:d4:f0:
         0c:f3:22:a1:5f:9f:63:c2:33:c1:82:e4:5a:03:c4:39:f3:27:
         05:0f:af:0d:b7:a0:ea:9a:2f:b1:8a:1b:31:6a:e8:40:ae:38:
         3e:96:3d:20:c4:5e:ec:c3:5c:a6:3f:11:47:b8:4a:3c:ff:9f:
         aa:1b:c6:fe:93:c0:72:23:b1:47:5d:0e:4f:d5:a7:9c:a8:95:
         24:69:87:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aJI/AUip/w3eZsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ5YWMzYjUtYmMzZC00MTIwLTlhNTktNDNkNjE2MDVk
MmNiMB4XDTI2MTAyMzIyNDMzNloXDTI3MDEyMTIzNDMzNlowLzEtMCsGA1UEAxMk
MGUxYWFjYmItMTM2Mi00OGRmLWJhNzktZTI3NTRmMWY0NzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc9q93KHWQiNwA+Jh4qcls5i1mQABhzWhjvG
QQWUwF4x2ywLZRc7WpI3OPSFxggRtdozbWotoooWsV2hdThGFZDDIP/snvDqXquG
FL+s/NqNYjcVfxgeamgBHkpWeg5RAsepw7ftlFxpH/pG9CjOh7MJpxIbyoYVlHZO
SCnD9bYuThC7s47G58xDLyJ5QyNCk1iqDQpczi4D7p7/aGcFLwkwcgQNmjNKunFA
ZbCx6akvDYlDW+9OWfvutZ5YKyGJedtxH5Je/TMPENtpDRBYP9Dd7Kb5AIo0K8+R
+/RZ5E9FDuKJXg9cFP+NJYYyVUKtZIHxu7ZmIdVlfIKa5h+NswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/RfTdOvOIC0kLeB0+Fg3ApjD1rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yZDlh
YzNiNS1iYzNkLTQxMjAtOWE1OS00M2Q2MTYwNWQyY2IvZmJlNmExNGQtYzdlZi0z
Y2RjLTlkNjYtNDI1YThmODg4M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMmQ5YWMzYjUtYmMzZC00MTIwLTlh
NTktNDNkNjE2MDVkMmNiLzJkOWFjM2I1LWJjM2QtNDEyMC05YTU5LTQzZDYxNjA1
ZDJjYi5jcmwwHwYDVR0jBBgwFoAUEeFtOb9hqVI65QT6ea118JnVJEMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8yZDlhYzNiNS1iYzNkLTQxMjAtOWE1OS00M2Q2
MTYwNWQyY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFacsNT6lADVogRjWS0utyhk/aT1cbZlv/8nYfngp3XJGeP/hxsVvcsZ
Ftmeujn3v98UF2JCNvV475rZkvLAEtJmTq0C61YM1WLhpMdu4UPwlGYU4EvLjykh
lo3zE7UgbsO5uxevMTrCQoar9axNfemIrGlE3si6xizglAkTvi98ONat4bL2JVN1
vW98w/VPs5HAlvEYPg2XxSG4rbjNG1i3rQizIaxtSVeyxOAz9PueTW/U8AzzIqFf
n2PCM8GC5FoDxDnzJwUPrw23oOqaL7GKGzFq6ECuOD6WPSDEXuzDXKY/EUe4Sjz/
n6obxv6TwHIjsUddDk/Vp5yolSRph1c=
-----END CERTIFICATE-----
Generated at Wed Nov 4 11:15:08 2026 by rpki-client