Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/0f5edf3f-6a02-35da-9d6c-388315281f24.roa
File:                     0f5edf3f-6a02-35da-9d6c-388315281f24.roa (raw, json)
Hash identifier:          oZV/DggCxwzqun8QavPuR3sV67jpiNqYEqSUr4WkVK0=
Subject key identifier:   1A:50:79:04:61:C6:C1:8E:B7:2D:63:C9:7F:A5:AD:B2:0C:35:C3:38
Certificate issuer:       /CN=53e52220-fa56-4913-b008-c1121580f510
Certificate serial:       010D0C9F4328584E0CE31E0D2465244FC0851700
Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/0f5edf3f-6a02-35da-9d6c-388315281f24.roa
Signing time:             Wed 03 Jun 2026 15:35:50 +0000
ROA not before:           Wed 03 Jun 2026 15:35:50 +0000
ROA not after:            Tue 01 Sep 2026 15:35:50 +0000
asID:                     12684
IP address blocks:        216.226.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:e3:1e:0d:24:65:24:4f:c0:85:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e52220-fa56-4913-b008-c1121580f510
        Validity
            Not Before: Jun  3 15:35:50 2026 GMT
            Not After : Sep  1 15:35:50 2026 GMT
        Subject: CN=3e268937-7f9c-4528-ad03-9b048d1d21cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:cb:42:60:a2:41:aa:25:06:50:43:ff:fe:
                    ee:46:83:ed:8e:43:ec:75:6b:50:e4:b6:2d:16:a5:
                    6c:6f:e5:c2:c2:c7:2c:b9:6d:67:42:f0:b4:59:72:
                    ff:a4:50:05:8c:ce:82:85:56:58:98:a8:ae:78:1e:
                    da:4e:76:fa:75:a8:e4:be:66:4e:1c:cd:92:be:67:
                    64:ee:9c:a9:7f:e1:43:27:12:d8:66:62:6b:99:62:
                    a0:4c:99:f0:c3:5f:8b:09:7b:95:cd:34:5d:b6:76:
                    61:a4:98:23:d7:99:1c:f5:ec:89:2d:84:3b:9c:1c:
                    04:6c:ee:12:2a:90:47:0c:26:30:14:89:0f:14:8b:
                    25:dd:d7:14:ca:cf:4f:f0:e3:26:c4:36:66:10:62:
                    c1:ea:9b:2f:0f:0d:6f:8c:fb:df:6b:9b:03:2e:74:
                    32:0d:87:0d:e5:5b:98:fd:b7:76:ec:83:38:45:5f:
                    e0:3c:13:eb:79:78:60:2b:23:fc:6b:54:32:e6:9d:
                    64:df:fa:26:d7:8f:40:ad:7a:72:1a:3d:ef:0e:71:
                    ea:48:28:0a:c2:5b:5f:4c:dd:a1:96:67:43:9e:ca:
                    37:de:a9:b0:9a:ff:0e:07:ab:61:0d:0d:7a:cb:ca:
                    8d:f0:c4:ae:81:0c:fb:30:76:19:d3:5f:a5:e3:3c:
                    fa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:50:79:04:61:C6:C1:8E:B7:2D:63:C9:7F:A5:AD:B2:0C:35:C3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/0f5edf3f-6a02-35da-9d6c-388315281f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl

            X509v3 Authority Key Identifier:
                keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.226.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:df:e5:c2:4c:cc:2f:c8:9b:7c:75:6f:fc:47:04:27:f3:66:
         d7:65:15:7a:d0:a3:76:1c:d4:05:1f:4a:3d:a2:d6:bf:6b:67:
         f4:64:5c:f0:a8:66:bd:32:a0:a2:b2:73:a6:26:ae:18:4a:52:
         9c:6b:08:8b:2e:07:6e:be:98:bd:40:5a:a1:2c:21:a5:61:b3:
         c1:1b:b4:2c:ac:70:ed:a0:95:fe:7f:30:07:9b:53:87:66:b4:
         5d:64:4e:da:f6:5e:43:9e:72:89:51:0a:29:74:e7:60:0a:c5:
         2d:b7:54:0d:34:5a:8a:c7:b8:33:81:56:7d:ab:bc:46:be:06:
         6c:a9:33:03:9d:20:2e:f8:98:54:d5:cd:ba:79:b8:c5:2a:42:
         d0:31:61:59:f8:ff:5d:1a:dd:a5:ca:a3:be:24:34:6a:ad:82:
         c9:11:49:93:01:de:ca:fd:8d:36:d7:cd:ad:24:82:3c:d3:89:
         c5:5f:07:b3:cc:be:52:23:07:5a:d6:84:6e:41:43:94:c7:52:
         ee:9a:76:fa:64:58:ce:33:32:17:91:21:e4:6d:fe:aa:90:b8:
         c3:fa:5f:e1:0d:fd:76:a5:86:8b:82:10:3c:29:0e:10:37:d0:
         08:50:c8:8f:ae:0b:ed:cf:37:32:52:5e:63:55:1f:eb:94:e2:
         b6:3d:fc:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4M4x4NJGUkT8CFFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm
NTEwMB4XDTI2MDYwMzE1MzU1MFoXDTI2MDkwMTE1MzU1MFowLzEtMCsGA1UEAxMk
M2UyNjg5MzctN2Y5Yy00NTI4LWFkMDMtOWIwNDhkMWQyMWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCvLQmCiQaolBlBD//7uRoPtjkPsdWtQ5LYt
FqVsb+XCwscsuW1nQvC0WXL/pFAFjM6ChVZYmKiueB7aTnb6dajkvmZOHM2Svmdk
7pypf+FDJxLYZmJrmWKgTJnww1+LCXuVzTRdtnZhpJgj15kc9eyJLYQ7nBwEbO4S
KpBHDCYwFIkPFIsl3dcUys9P8OMmxDZmEGLB6psvDw1vjPvfa5sDLnQyDYcN5VuY
/bd27IM4RV/gPBPreXhgKyP8a1Qy5p1k3/om149ArXpyGj3vDnHqSCgKwltfTN2h
lmdDnso33qmwmv8OB6thDQ16y8qN8MSugQz7MHYZ01+l4zz61QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpQeQRhxsGOty1jyX+lrbIMNcM4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1
MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvMGY1ZWRmM2YtNmEwMi0z
NWRhLTlkNmMtMzg4MzE1MjgxZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw
MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw
ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy
MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OLlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAALf5cJMzC/Im3x1b/xHBCfzZtdlFXrQo3Yc1AUfSj2i1r9rZ/RkXPCo
Zr0yoKKyc6YmrhhKUpxrCIsuB26+mL1AWqEsIaVhs8EbtCyscO2glf5/MAebU4dm
tF1kTtr2XkOecolRCil052AKxS23VA00WorHuDOBVn2rvEa+BmypMwOdIC74mFTV
zbp5uMUqQtAxYVn4/10a3aXKo74kNGqtgskRSZMB3sr9jTbXza0kgjzTicVfB7PM
vlIjB1rWhG5BQ5THUu6advpkWM4zMheRIeRt/qqQuMP6X+EN/XalhouCEDwpDhA3
0AhQyI+uC+3PNzJSXmNVH+uU4rY9/JE=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:49:34 2026 by rpki-client