Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/feba746b-1378-3dbe-a8e3-e72c4cbd64d2.roa
File:                     feba746b-1378-3dbe-a8e3-e72c4cbd64d2.roa (raw, json)
Hash identifier:          pEoFk3ykBVy7Ic7myp8LTg3/7VJO9KY3XxvEf3qA9Es=
Subject key identifier:   CF:DF:21:89:5D:3A:0A:41:36:62:0E:5A:7A:B2:88:DC:A4:88:0F:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D52434DA6E7CDD109862D2970
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/feba746b-1378-3dbe-a8e3-e72c4cbd64d2.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     397205
IP address blocks:        192.82.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:4d:a6:e7:cd:d1:09:86:2d:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=91bd7a00-57e6-4d2f-8195-10ee7cea85f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:cc:fe:d8:43:9d:ac:89:19:9e:a8:3d:fb:
                    87:3d:a7:1f:02:02:c9:9f:25:43:03:f8:11:47:18:
                    1f:c9:61:ea:5f:f1:7c:19:ad:b0:17:3b:f0:78:f5:
                    63:51:37:19:b4:dc:96:5e:31:7e:ea:fe:75:2e:e7:
                    2d:e4:6c:4f:54:97:d2:13:78:9c:02:ab:42:1d:66:
                    3b:80:24:c8:da:d7:60:42:b9:b5:71:f5:64:69:7a:
                    75:a3:1b:bc:8d:62:26:50:5c:57:6d:7a:40:2d:64:
                    85:50:37:a6:7a:ad:9c:70:24:2b:90:bf:3a:8a:aa:
                    9c:4c:84:5b:7c:77:b2:36:ac:80:b4:84:60:3b:a1:
                    7b:2b:44:9d:80:7b:c8:6c:a2:a9:7e:20:76:67:40:
                    b6:da:63:69:81:a1:e3:88:75:9c:3c:55:1c:42:62:
                    48:4d:ea:58:cd:a9:c4:36:b9:1d:4c:84:a3:0e:82:
                    ca:4e:96:da:85:a9:27:13:8d:cd:f7:b2:00:61:59:
                    ea:db:79:ff:af:0b:77:57:5e:17:d9:82:7f:95:f7:
                    9c:02:c1:b9:08:22:ca:99:f3:75:a0:0c:4c:16:d9:
                    11:34:34:fa:80:ce:2e:1b:6d:61:f5:fb:69:da:71:
                    a7:01:30:da:27:a3:56:0d:e8:76:ee:4b:14:76:fc:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DF:21:89:5D:3A:0A:41:36:62:0E:5A:7A:B2:88:DC:A4:88:0F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/feba746b-1378-3dbe-a8e3-e72c4cbd64d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:30:fb:3a:56:9e:e8:20:f6:58:b6:07:78:90:6a:5f:66:35:
         e7:33:ef:8c:eb:8e:2c:a0:43:da:12:d8:63:4d:a5:22:ae:3f:
         83:82:56:93:44:01:64:2d:4e:ff:71:e5:db:48:4f:b0:52:84:
         6a:8b:fa:17:21:e7:b8:11:2b:91:cd:0b:43:c5:d8:b7:a6:72:
         74:d7:51:f1:04:e5:0e:5b:51:19:53:13:48:a9:79:23:ee:9d:
         ec:89:d2:84:5a:89:33:80:37:3c:76:86:69:06:53:31:cd:5c:
         74:50:fd:9b:47:20:2f:de:e8:3a:5e:03:11:cb:28:ef:8d:4a:
         d8:e4:e3:67:8a:7a:2b:a0:cb:bf:8d:d0:e7:95:41:c2:4e:c4:
         db:77:f3:27:30:ab:c8:e9:39:ed:1a:93:c3:40:7b:a4:8e:f2:
         90:2b:43:0e:35:7a:35:f7:35:14:7d:87:4f:b1:6b:6e:2c:5b:
         4a:4a:5c:38:e2:5a:80:fc:14:97:0e:60:2b:1f:24:66:1f:ee:
         ea:d8:68:52:07:bf:66:50:f3:b2:53:0b:da:58:f9:1b:85:82:
         87:f7:4b:89:1f:58:e8:f9:e6:49:15:80:e5:86:0b:e6:06:f6:
         cc:5e:85:1b:0c:08:29:b7:0a:4a:59:a1:99:13:32:1a:9e:fc:
         73:64:c7:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ02m583RCYYtKXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
OTFiZDdhMDAtNTdlNi00ZDJmLTgxOTUtMTBlZTdjZWE4NWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJDM/thDnayJGZ6oPfuHPacfAgLJnyVDA/gR
RxgfyWHqX/F8Ga2wFzvwePVjUTcZtNyWXjF+6v51Luct5GxPVJfSE3icAqtCHWY7
gCTI2tdgQrm1cfVkaXp1oxu8jWImUFxXbXpALWSFUDemeq2ccCQrkL86iqqcTIRb
fHeyNqyAtIRgO6F7K0SdgHvIbKKpfiB2Z0C22mNpgaHjiHWcPFUcQmJITepYzanE
NrkdTISjDoLKTpbahaknE43N97IAYVnq23n/rwt3V14X2YJ/lfecAsG5CCLKmfN1
oAxMFtkRNDT6gM4uG21h9ftp2nGnATDaJ6NWDeh27ksUdvzDhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/fIYldOgpBNmIOWnqyiNykiA9nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmViYTc0NmItMTM3OC0z
ZGJlLWE4ZTMtZTcyYzRjYmQ2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMw+zpWnugg9li2B3iQal9mNecz74zrjiygQ9oS2GNNpSKuP4OCVpNE
AWQtTv9x5dtIT7BShGqL+hch57gRK5HNC0PF2LemcnTXUfEE5Q5bURlTE0ipeSPu
neyJ0oRaiTOANzx2hmkGUzHNXHRQ/ZtHIC/e6DpeAxHLKO+NStjk42eKeiugy7+N
0OeVQcJOxNt38ycwq8jpOe0ak8NAe6SO8pArQw41ejX3NRR9h0+xa24sW0pKXDji
WoD8FJcOYCsfJGYf7urYaFIHv2ZQ87JTC9pY+RuFgof3S4kfWOj55kkVgOWGC+YG
9sxehRsMCCm3CkpZoZkTMhqe/HNkxww=
-----END CERTIFICATE-----
Generated at Sun Mar 29 23:45:38 2026 by rpki-client