Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/19f14bc3-bc5d-31c2-991c-746b742458f3.roa
File:                     19f14bc3-bc5d-31c2-991c-746b742458f3.roa (raw, json)
Hash identifier:          cyY6B7w+vqyJEYNpifONT0PwVk6WJJF/luZN8/VGSU4=
Subject key identifier:   F3:54:EE:67:D6:09:26:F7:F6:DC:0B:0C:3F:D1:CE:AD:6A:57:87:CC
Certificate issuer:       /CN=96c1d326-79d5-4bbe-924f-12c4b7c7fec9
Certificate serial:       010D0C9F4328584F6C4E04E0A95FC083006B1D00
Authority key identifier: 7E:4B:AC:D2:37:80:2E:74:CC:1A:3F:0A:83:43:35:BD:99:F4:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/19f14bc3-bc5d-31c2-991c-746b742458f3.roa
Signing time:             Wed 07 Oct 2026 12:39:57 +0000
ROA not before:           Wed 07 Oct 2026 12:39:57 +0000
ROA not after:            Tue 05 Jan 2027 13:39:57 +0000
asID:                     401235
IP address blocks:        198.190.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:4e:04:e0:a9:5f:c0:83:00:6b:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96c1d326-79d5-4bbe-924f-12c4b7c7fec9
        Validity
            Not Before: Oct  7 12:39:57 2026 GMT
            Not After : Jan  5 13:39:57 2027 GMT
        Subject: CN=908c4904-09e1-4037-bd78-2beaeced34bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:53:66:a6:90:ce:1c:a1:08:b0:52:bf:f3:
                    c7:a8:4a:35:6b:09:43:26:f1:01:94:7b:d9:47:30:
                    50:05:83:17:a6:e8:ba:e2:59:de:99:0c:7c:70:72:
                    7a:78:b7:3d:74:4d:ae:a0:8a:83:1c:7d:28:69:9b:
                    a0:ac:3e:19:12:77:3f:60:9c:fd:a2:21:25:43:f3:
                    35:f6:b2:c3:0a:48:98:7c:34:1b:b2:7c:fd:da:bc:
                    08:2e:15:ad:c8:08:35:3a:6e:ad:37:12:af:b3:5f:
                    61:15:ec:3f:de:c6:6c:6e:e3:68:59:1f:16:c9:ab:
                    6d:cf:00:fa:ec:65:4a:48:ab:59:71:a7:5b:fa:83:
                    a1:c5:83:31:64:55:28:8b:66:ba:f7:6f:77:2e:a5:
                    65:a3:b4:9a:74:09:3c:c9:53:59:ba:fc:ce:54:9b:
                    d1:56:77:58:cc:1b:45:d8:b5:a9:ae:ca:35:0a:65:
                    a5:6d:05:9f:55:fc:76:01:02:79:50:6e:1f:32:66:
                    c4:3d:70:b4:86:e8:e9:49:34:e8:4b:fe:d0:a6:a4:
                    2a:22:08:bb:41:1e:d1:e7:ba:81:e3:cb:ca:77:f6:
                    38:0a:c8:4c:d0:88:88:71:af:84:ec:e9:73:21:40:
                    10:a8:92:63:db:8e:85:07:10:75:6a:56:ed:2a:b9:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:54:EE:67:D6:09:26:F7:F6:DC:0B:0C:3F:D1:CE:AD:6A:57:87:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/19f14bc3-bc5d-31c2-991c-746b742458f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:4B:AC:D2:37:80:2E:74:CC:1A:3F:0A:83:43:35:BD:99:F4:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/96c1d326-79d5-4bbe-924f-12c4b7c7fec9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:e8:d9:72:b2:e0:35:b2:3b:d8:78:23:69:fa:42:37:e8:aa:
         19:0e:d3:80:c3:7c:ea:9a:da:28:2e:fc:41:00:99:9b:d2:c5:
         d7:df:d7:d9:f4:a1:bf:b1:33:b2:f5:12:6c:9e:12:1e:7c:12:
         90:2a:06:69:76:b4:a1:e7:98:a7:87:a0:6a:58:8c:a7:9a:eb:
         b6:a2:f6:39:72:ec:cf:d1:8f:9c:ef:9e:fd:1a:37:66:49:90:
         94:07:37:00:98:ab:7d:ad:36:8c:29:39:3e:b0:45:9f:a4:b2:
         f3:38:23:87:71:e4:65:bd:c7:65:64:f5:3e:69:84:b0:84:73:
         e4:1f:01:32:68:07:f4:0a:9a:77:04:92:f9:5c:1b:41:3b:9e:
         2c:31:71:22:c1:48:c5:4d:57:77:a4:55:9b:72:cb:54:a5:6d:
         8d:d7:b4:84:27:2c:97:1e:6b:7c:fd:ef:f0:b6:bb:82:f4:75:
         bc:66:df:81:b2:6c:4e:d5:19:58:79:67:81:a1:a5:20:7a:ef:
         32:e4:37:d5:a8:ef:c5:f4:b7:40:18:c5:62:10:de:de:5d:e2:
         f9:84:90:c7:fd:0a:fc:b1:08:9b:a5:14:f0:9a:74:4d:00:40:
         39:17:19:15:1e:ae:20:b4:37:5c:68:4f:ae:ac:52:25:43:ca:
         63:89:95:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sTgTgqV/AgwBrHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTZjMWQzMjYtNzlkNS00YmJlLTkyNGYtMTJjNGI3Yzdm
ZWM5MB4XDTI2MTAwNzEyMzk1N1oXDTI3MDEwNTEzMzk1N1owLzEtMCsGA1UEAxMk
OTA4YzQ5MDQtMDllMS00MDM3LWJkNzgtMmJlYWVjZWQzNGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMFTZqaQzhyhCLBSv/PHqEo1awlDJvEBlHvZ
RzBQBYMXpui64lnemQx8cHJ6eLc9dE2uoIqDHH0oaZugrD4ZEnc/YJz9oiElQ/M1
9rLDCkiYfDQbsnz92rwILhWtyAg1Om6tNxKvs19hFew/3sZsbuNoWR8WyattzwD6
7GVKSKtZcadb+oOhxYMxZFUoi2a69293LqVlo7SadAk8yVNZuvzOVJvRVndYzBtF
2LWprso1CmWlbQWfVfx2AQJ5UG4fMmbEPXC0hujpSTToS/7QpqQqIgi7QR7R57qB
48vKd/Y4CshM0IiIca+E7OlzIUAQqJJj246FBxB1albtKrn2BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNU7mfWCSb39twLDD/Rzq1qV4fMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS85NmMx
ZDMyNi03OWQ1LTRiYmUtOTI0Zi0xMmM0YjdjN2ZlYzkvMTlmMTRiYzMtYmM1ZC0z
MWMyLTk5MWMtNzQ2Yjc0MjQ1OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvOTZjMWQzMjYtNzlkNS00YmJlLTky
NGYtMTJjNGI3YzdmZWM5Lzk2YzFkMzI2LTc5ZDUtNGJiZS05MjRmLTEyYzRiN2M3
ZmVjOS5jcmwwHwYDVR0jBBgwFoAUfkus0jeALnTMGj8Kg0M1vZn0OPEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS85NmMxZDMyNi03OWQ1LTRiYmUtOTI0Zi0xMmM0
YjdjN2ZlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr6CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANPo2XKy4DWyO9h4I2n6QjfoqhkO04DDfOqa2igu/EEAmZvSxdff19n0
ob+xM7L1EmyeEh58EpAqBml2tKHnmKeHoGpYjKea67ai9jly7M/Rj5zvnv0aN2ZJ
kJQHNwCYq32tNowpOT6wRZ+ksvM4I4dx5GW9x2Vk9T5phLCEc+QfATJoB/QKmncE
kvlcG0E7niwxcSLBSMVNV3ekVZtyy1SlbY3XtIQnLJcea3z97/C2u4L0dbxm34Gy
bE7VGVh5Z4GhpSB67zLkN9Wo78X0t0AYxWIQ3t5d4vmEkMf9CvyxCJulFPCadE0A
QDkXGRUeriC0N1xoT66sUiVDymOJlRM=
-----END CERTIFICATE-----
Generated at Wed Nov 4 07:54:17 2026 by rpki-client