Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a/4bcc56c4-08e5-3e69-bf8b-6db66fb27db6.roa
File:                     4bcc56c4-08e5-3e69-bf8b-6db66fb27db6.roa (raw, json)
Hash identifier:          hKlTy439o2VGBIP40IZW0OUqlr/b2NHGt7S5F2zV3Bg=
Subject key identifier:   73:79:88:9B:C7:8E:C5:A3:B9:F4:A4:D4:5E:1C:C7:06:1C:E9:D0:23
Certificate issuer:       /CN=94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a
Certificate serial:       010D0C9F4328584F9199ABD2D207B5A0F84989C0
Authority key identifier: 8B:30:F5:B7:B7:26:12:21:DA:4E:F8:80:03:F1:48:45:38:D3:33:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a/4bcc56c4-08e5-3e69-bf8b-6db66fb27db6.roa
Signing time:             Tue 20 Oct 2026 21:17:17 +0000
ROA not before:           Tue 20 Oct 2026 21:17:17 +0000
ROA not after:            Mon 18 Jan 2027 22:17:17 +0000
asID:                     395981
IP address blocks:        168.151.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:91:99:ab:d2:d2:07:b5:a0:f8:49:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a
        Validity
            Not Before: Oct 20 21:17:17 2026 GMT
            Not After : Jan 18 22:17:17 2027 GMT
        Subject: CN=31485d53-0513-4b02-9d63-3db20913d976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:72:ad:26:37:1c:52:61:2f:1d:87:c5:3e:
                    7f:26:56:64:8a:04:e3:11:35:00:de:fd:1b:31:a2:
                    5e:47:9f:25:47:d4:85:ef:db:af:55:f2:54:8d:f3:
                    48:22:ca:b4:f0:a8:ca:51:a8:d1:71:00:6a:79:d0:
                    71:7a:b9:87:94:8f:6b:7d:fb:fd:0a:e9:89:e0:3e:
                    38:b7:ad:ee:a6:e6:c5:9b:6c:7b:b6:eb:0b:b2:5c:
                    bf:6d:2a:55:81:bc:a9:74:5a:49:6d:8b:34:c9:8c:
                    29:76:80:da:6d:c0:92:03:69:2c:86:3e:dd:da:99:
                    df:ec:8c:01:30:a8:93:0f:2d:4c:be:4a:ae:e4:57:
                    8a:0b:f1:b2:86:b6:f3:22:fc:05:8a:33:71:dc:0a:
                    0b:59:30:0b:14:f5:55:ff:78:ef:16:07:2f:27:5b:
                    7f:ae:3f:b5:e9:20:a9:08:6b:b9:89:4d:0b:85:df:
                    2f:18:68:89:80:ce:da:00:e2:94:10:0e:0c:68:0a:
                    26:48:9f:04:c9:1e:ff:eb:bc:54:2f:89:57:be:0f:
                    5c:8f:b8:18:8c:cb:b1:0c:6c:ab:56:64:80:88:63:
                    75:2c:cc:51:04:ea:32:65:f7:8e:af:f2:9a:3a:17:
                    49:02:49:a7:0e:da:ca:b9:0d:47:39:e7:bf:f0:0d:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:88:9B:C7:8E:C5:A3:B9:F4:A4:D4:5E:1C:C7:06:1C:E9:D0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a/4bcc56c4-08e5-3e69-bf8b-6db66fb27db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a.crl

            X509v3 Authority Key Identifier:
                keyid:8B:30:F5:B7:B7:26:12:21:DA:4E:F8:80:03:F1:48:45:38:D3:33:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/94bc16ab-1f3b-48c4-8052-7b0a2a1cd60a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:45:e4:6a:a0:48:45:d5:ac:e1:88:08:af:06:57:b4:98:53:
         ca:3b:69:49:23:c1:39:4e:b6:1c:25:da:e9:67:2b:f5:99:21:
         c0:50:49:9a:0d:4a:b9:e7:74:4b:6e:d9:cb:ca:f1:11:a4:47:
         6b:25:93:0d:8e:d8:4f:9b:b2:b7:2d:d5:30:b9:36:c2:71:c5:
         8e:df:f8:3b:b6:5b:4f:e0:c5:14:ff:bc:a6:03:d5:0c:d2:75:
         e6:68:65:a6:67:0a:9c:03:7d:8b:9c:75:48:c9:63:e8:4a:7f:
         95:45:28:44:60:d8:79:27:8e:14:f7:36:64:2e:ea:2b:61:99:
         47:b5:00:f9:cd:89:c3:76:58:29:60:f2:67:68:ec:75:a2:53:
         09:35:29:ba:3d:52:c5:9b:aa:37:64:26:4c:ce:67:97:9f:8a:
         e1:33:ff:53:0f:6e:09:9e:74:c6:dc:cb:f7:08:88:5c:99:6c:
         35:3f:91:2d:45:62:05:98:8b:e9:2e:52:d0:20:f8:af:84:61:
         b8:6c:b4:61:23:39:69:57:94:26:f7:ff:af:f5:00:d2:a8:3e:
         2b:c9:96:e7:2d:f3:a3:cf:42:fc:e6:89:7a:b2:eb:26:1e:c0:
         9a:b6:f0:89:2f:2a:3d:c6:5b:7f:8f:61:a0:2a:07:c4:c8:7b:
         b0:68:b3:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RmavS0ge1oPhJicAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTRiYzE2YWItMWYzYi00OGM0LTgwNTItN2IwYTJhMWNk
NjBhMB4XDTI2MTAyMDIxMTcxN1oXDTI3MDExODIyMTcxN1owLzEtMCsGA1UEAxMk
MzE0ODVkNTMtMDUxMy00YjAyLTlkNjMtM2RiMjA5MTNkOTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTZyrSY3HFJhLx2HxT5/JlZkigTjETUA3v0b
MaJeR58lR9SF79uvVfJUjfNIIsq08KjKUajRcQBqedBxermHlI9rffv9CumJ4D44
t63upubFm2x7tusLsly/bSpVgbypdFpJbYs0yYwpdoDabcCSA2kshj7d2pnf7IwB
MKiTDy1Mvkqu5FeKC/GyhrbzIvwFijNx3AoLWTALFPVV/3jvFgcvJ1t/rj+16SCp
CGu5iU0Lhd8vGGiJgM7aAOKUEA4MaAomSJ8EyR7/67xUL4lXvg9cj7gYjMuxDGyr
VmSAiGN1LMxRBOoyZfeOr/KaOhdJAkmnDtrKuQ1HOee/8A3mpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHN5iJvHjsWjufSk1F4cxwYc6dAjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85NGJj
MTZhYi0xZjNiLTQ4YzQtODA1Mi03YjBhMmExY2Q2MGEvNGJjYzU2YzQtMDhlNS0z
ZTY5LWJmOGItNmRiNjZmYjI3ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTRiYzE2YWItMWYzYi00OGM0LTgw
NTItN2IwYTJhMWNkNjBhLzk0YmMxNmFiLTFmM2ItNDhjNC04MDUyLTdiMGEyYTFj
ZDYwYS5jcmwwHwYDVR0jBBgwFoAUizD1t7cmEiHaTviAA/FIRTjTM7EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS85NGJjMTZhYi0xZjNiLTQ4YzQtODA1Mi03YjBh
MmExY2Q2MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBF5GqgSEXVrOGICK8GV7SYU8o7aUkjwTlOthwl2ulnK/WZIcBQSZoN
SrnndEtu2cvK8RGkR2slkw2O2E+bsrct1TC5NsJxxY7f+Du2W0/gxRT/vKYD1QzS
deZoZaZnCpwDfYucdUjJY+hKf5VFKERg2HknjhT3NmQu6ithmUe1APnNicN2WClg
8mdo7HWiUwk1Kbo9UsWbqjdkJkzOZ5efiuEz/1MPbgmedMbcy/cIiFyZbDU/kS1F
YgWYi+kuUtAg+K+EYbhstGEjOWlXlCb3/6/1ANKoPivJluct86PPQvzmiXqy6yYe
wJq28IkvKj3GW3+PYaAqB8TIe7Bos/Q=
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:29:56 2026 by rpki-client