Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/991daa70-f5f2-319f-899f-749cbdd3bb96.roa
File:                     991daa70-f5f2-319f-899f-749cbdd3bb96.roa (raw, json)
Hash identifier:          GlGhLidg1dURxxyttL+Dkoq6DpQ/neqOsMhUt/Sg6aQ=
Subject key identifier:   A9:19:52:3E:82:3C:37:F0:2D:90:2D:D7:9F:E2:90:12:AD:B6:85:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED4325BD994A8EAAE9E9162E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/991daa70-f5f2-319f-899f-749cbdd3bb96.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     397211
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:5b:d9:94:a8:ea:ae:9e:91:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=1a8bac4e-7499-4787-a468-fedd021b9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:36:72:09:62:34:c8:21:61:7d:b3:6e:2a:
                    ea:47:e5:3e:0b:80:b1:1b:1b:a0:ee:f3:57:b8:c5:
                    13:01:12:d9:ec:43:6d:c6:6c:74:fd:70:8e:e2:4f:
                    a2:19:48:50:d3:90:36:d9:0a:00:f8:4a:90:99:45:
                    52:48:31:43:89:7b:37:43:46:9e:1b:04:9b:55:fa:
                    e2:a7:e4:73:d8:05:73:97:c3:c1:e5:61:77:76:9b:
                    f6:98:4c:c3:a5:b1:62:af:b0:d6:3c:f2:7f:43:1d:
                    34:8c:94:44:10:b5:76:a5:27:18:5d:bf:4a:e0:5b:
                    28:cd:d7:d1:50:8f:7b:1a:00:4d:28:10:db:2d:44:
                    39:f1:a1:41:4c:4d:41:b9:96:89:f7:f0:ec:93:93:
                    81:36:50:99:ec:1c:9e:e7:3c:69:81:b6:c4:da:c9:
                    68:3b:b7:93:8d:4c:d2:df:f7:38:48:d7:cd:b2:cd:
                    5b:31:79:ca:93:82:97:e6:da:5d:4c:31:9f:58:a0:
                    0b:61:04:91:f9:a5:84:a0:83:84:90:ab:9a:e2:42:
                    66:30:37:ae:d0:e4:2b:c5:15:93:7d:20:c4:91:14:
                    57:22:6d:aa:f1:84:0a:be:73:f5:67:f3:c7:49:16:
                    1b:93:89:67:57:43:ce:4d:22:9a:3b:c8:93:cb:46:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:19:52:3E:82:3C:37:F0:2D:90:2D:D7:9F:E2:90:12:AD:B6:85:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/991daa70-f5f2-319f-899f-749cbdd3bb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:4e:64:2e:2e:f0:f4:f7:23:60:db:dd:b7:f2:0a:16:38:
         48:8f:1f:9b:97:2f:23:f2:ec:b2:5f:06:d2:0a:8f:ef:94:b6:
         45:6d:46:7b:34:ed:ef:6f:05:40:90:6f:49:4f:87:fa:f0:1b:
         44:a4:eb:d3:64:ea:32:4f:48:e8:28:83:c5:d9:af:ab:04:6c:
         fc:52:af:f9:7e:56:47:61:ae:e7:92:7b:23:00:6c:60:7e:c6:
         e3:87:fe:32:35:38:9f:1c:4d:ba:5b:82:56:b8:cd:0d:fb:78:
         b6:d8:73:be:90:f1:4e:38:a4:24:9c:05:a4:de:95:5b:1c:86:
         5a:2c:02:8e:b0:60:66:33:21:bc:8b:c8:cc:cc:04:c3:13:fd:
         d4:64:90:fb:ad:c2:5d:1f:61:5d:12:4c:28:9f:dd:9b:5b:41:
         1c:96:16:d3:f3:0c:5f:53:4b:5a:36:a5:b7:70:67:b5:8d:49:
         97:8d:8b:12:f6:fe:97:7c:f1:00:0d:81:ce:5d:85:6f:7b:33:
         2d:b1:96:dd:82:00:fd:15:02:ca:92:3e:5c:ae:f3:9d:b2:4b:
         07:91:45:59:a0:58:dd:2a:09:30:81:e5:5b:4f:b2:42:6a:1d:
         33:62:25:3b:1d:d9:ed:2f:5d:ac:63:f8:b7:af:93:cb:19:ff:
         53:4c:b2:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlvZlKjqrp6RYuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MWE4YmFjNGUtNzQ5OS00Nzg3LWE0NjgtZmVkZDAyMWI5NDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhA2cgliNMghYX2zbirqR+U+C4CxGxug7vNX
uMUTARLZ7ENtxmx0/XCO4k+iGUhQ05A22QoA+EqQmUVSSDFDiXs3Q0aeGwSbVfri
p+Rz2AVzl8PB5WF3dpv2mEzDpbFir7DWPPJ/Qx00jJREELV2pScYXb9K4FsozdfR
UI97GgBNKBDbLUQ58aFBTE1BuZaJ9/Dsk5OBNlCZ7Bye5zxpgbbE2sloO7eTjUzS
3/c4SNfNss1bMXnKk4KX5tpdTDGfWKALYQSR+aWEoIOEkKua4kJmMDeu0OQrxRWT
fSDEkRRXIm2q8YQKvnP1Z/PHSRYbk4lnV0POTSKaO8iTy0aw3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkZUj6CPDfwLZAt15/ikBKttoXQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTkxZGFhNzAtZjVmMi0z
MTlmLTg5OWYtNzQ5Y2JkZDNiYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEChTmQuLvD09yNg29238goWOEiPH5uXLyPy7LJfBtIKj++UtkVtRns0
7e9vBUCQb0lPh/rwG0Sk69Nk6jJPSOgog8XZr6sEbPxSr/l+VkdhrueSeyMAbGB+
xuOH/jI1OJ8cTbpbgla4zQ37eLbYc76Q8U44pCScBaTelVschlosAo6wYGYzIbyL
yMzMBMMT/dRkkPutwl0fYV0STCif3ZtbQRyWFtPzDF9TS1o2pbdwZ7WNSZeNixL2
/pd88QANgc5dhW97My2xlt2CAP0VAsqSPlyu852ySweRRVmgWN0qCTCB5VtPskJq
HTNiJTsd2e0vXaxj+Levk8sZ/1NMshw=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:31 2026 by rpki-client