Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b64a3a0e-1580-3c3b-8b75-2441882a9dd9.roa
File:                     b64a3a0e-1580-3c3b-8b75-2441882a9dd9.roa (raw, json)
Hash identifier:          APMdwz/ZVdfLVVs1SMl/wT5k4pulDhr/Oiws5DOIHhw=
Subject key identifier:   B8:F2:12:3E:97:12:D2:39:86:80:9B:57:94:62:21:49:2D:47:D9:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED9C730397458E2E1B562EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b64a3a0e-1580-3c3b-8b75-2441882a9dd9.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     396615
IP address blocks:        192.41.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:30:39:74:58:e2:e1:b5:62:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=2993defe-f29a-49b1-8764-f252d1ada757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:9b:d2:c3:b3:bb:90:49:1a:4c:74:ef:59:
                    64:95:ff:24:e5:99:3a:88:2b:d3:a0:61:db:ed:cd:
                    40:1e:60:8f:07:f8:ad:9a:6d:03:24:11:5d:85:a0:
                    d6:40:6f:3b:e4:7e:9e:66:0a:e0:0f:d3:96:f5:ce:
                    60:01:14:5e:54:b8:13:c7:2c:1c:74:d4:b0:f3:bf:
                    75:c3:dc:2e:be:74:e1:7f:72:14:76:83:b9:d9:5d:
                    65:af:40:3c:9f:f5:34:22:41:15:5a:6d:b1:bc:c9:
                    f3:96:d4:ca:06:c9:80:df:26:ff:17:d4:57:6c:44:
                    b2:3e:98:34:f4:8c:4e:5b:40:6d:ff:51:42:30:a5:
                    d0:cd:89:da:67:22:8b:cc:ff:be:bc:9a:21:40:a3:
                    ed:83:f1:ef:d6:79:60:1e:45:fd:24:f2:da:98:a5:
                    1d:2f:78:29:31:12:22:79:58:07:1f:67:ca:4e:85:
                    98:68:98:2e:1c:20:e6:9b:ae:53:9f:31:09:c3:14:
                    86:86:b8:4c:81:23:18:51:0b:50:db:15:06:66:28:
                    93:61:a6:8b:dd:51:51:db:8d:10:34:e3:9a:33:83:
                    87:73:dd:c9:89:37:a3:9e:ea:75:a7:77:1f:99:27:
                    83:84:4a:3a:68:8f:4d:7a:a1:a8:e6:6b:c5:53:ea:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F2:12:3E:97:12:D2:39:86:80:9B:57:94:62:21:49:2D:47:D9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b64a3a0e-1580-3c3b-8b75-2441882a9dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:c7:63:f9:fa:70:bb:79:60:dd:49:39:40:c5:b4:de:99:
         c7:01:b2:7b:b2:a8:26:63:d5:d2:27:0e:f5:1c:21:2e:49:a5:
         56:23:2c:c9:00:a6:16:c8:d4:51:ad:4d:d0:2f:11:cc:48:ae:
         02:9e:b5:ed:09:c6:ce:5b:29:f8:ba:14:bb:b2:da:e9:af:d0:
         8d:2e:d9:8c:d4:62:f1:39:e1:1e:a4:8d:b4:da:06:5d:89:45:
         4f:d7:cb:d2:df:69:3d:7f:3a:e6:06:21:8f:3e:ad:a8:c3:f4:
         f5:f2:c0:bd:30:5d:d2:af:dc:34:37:f3:85:e1:2f:fb:88:cd:
         1b:01:74:b2:93:a5:c5:64:61:4b:a8:44:61:d8:e1:6c:24:e6:
         b6:6a:e9:db:f6:45:61:e5:5d:37:a7:3d:f7:93:35:95:f2:2c:
         11:ad:a4:15:22:5e:cd:c8:3c:af:fc:ef:f1:19:8c:ff:a3:a0:
         df:77:2a:80:c0:b9:5a:14:65:b0:08:be:17:9a:c7:77:dc:76:
         1e:da:af:82:eb:1f:af:d1:03:a0:14:6d:d1:32:e9:41:76:2c:
         59:c9:e6:40:a8:69:36:9b:a9:bb:c3:8c:d3:27:b1:dd:50:1c:
         33:fc:81:cd:1b:29:07:83:ea:c6:a5:5d:68:72:75:76:22:9a:
         53:31:dd:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ZxzA5dFji4bVi74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
Mjk5M2RlZmUtZjI5YS00OWIxLTg3NjQtZjI1MmQxYWRhNzU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJqb0sOzu5BJGkx071lklf8k5Zk6iCvToGHb
7c1AHmCPB/itmm0DJBFdhaDWQG875H6eZgrgD9OW9c5gARReVLgTxywcdNSw8791
w9wuvnThf3IUdoO52V1lr0A8n/U0IkEVWm2xvMnzltTKBsmA3yb/F9RXbESyPpg0
9IxOW0Bt/1FCMKXQzYnaZyKLzP++vJohQKPtg/Hv1nlgHkX9JPLamKUdL3gpMRIi
eVgHH2fKToWYaJguHCDmm65TnzEJwxSGhrhMgSMYUQtQ2xUGZiiTYaaL3VFR240Q
NOOaM4OHc93JiTejnup1p3cfmSeDhEo6aI9NeqGo5mvFU+rmqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjyEj6XEtI5hoCbV5RiIUktR9kuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjY0YTNhMGUtMTU4MC0z
YzNiLThiNzUtMjQ0MTg4MmE5ZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz7x2P5+nC7eWDdSTlAxbTemccBsnuyqCZj1dInDvUcIS5JpVYjLMkA
phbI1FGtTdAvEcxIrgKete0Jxs5bKfi6FLuy2umv0I0u2YzUYvE54R6kjbTaBl2J
RU/Xy9LfaT1/OuYGIY8+rajD9PXywL0wXdKv3DQ384XhL/uIzRsBdLKTpcVkYUuo
RGHY4Wwk5rZq6dv2RWHlXTenPfeTNZXyLBGtpBUiXs3IPK/87/EZjP+joN93KoDA
uVoUZbAIvheax3fcdh7ar4LrH6/RA6AUbdEy6UF2LFnJ5kCoaTabqbvDjNMnsd1Q
HDP8gc0bKQeD6salXWhydXYimlMx3aQ=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:28:38 2026 by rpki-client