Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c/04849b6d-aea7-359a-8f21-1c3f2d326cba.roa
File:                     04849b6d-aea7-359a-8f21-1c3f2d326cba.roa (raw, json)
Hash identifier:          CKtcN92NEJNN5OmTGu7uBjLF6T/sC1xwy09OxiEiits=
Subject key identifier:   5C:5D:A0:BA:49:00:D1:6E:56:3F:2C:A6:DE:89:44:01:CB:21:30:A6
Certificate issuer:       /CN=cbc18bd7-6579-4812-8188-61644fe9337c
Certificate serial:       010D0C9F4328584F95387B7C8E0E3BBF83DB6D80
Authority key identifier: 3C:72:C5:06:0A:5A:2A:C0:5B:28:45:18:FB:60:43:0E:2E:8A:C7:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c/04849b6d-aea7-359a-8f21-1c3f2d326cba.roa
Signing time:             Thu 22 Oct 2026 04:24:42 +0000
ROA not before:           Thu 22 Oct 2026 04:24:42 +0000
ROA not after:            Wed 20 Jan 2027 05:24:42 +0000
asID:                     15146
IP address blocks:        64.150.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c/cbc18bd7-6579-4812-8188-61644fe9337c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c/cbc18bd7-6579-4812-8188-61644fe9337c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:95:38:7b:7c:8e:0e:3b:bf:83:db:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc18bd7-6579-4812-8188-61644fe9337c
        Validity
            Not Before: Oct 22 04:24:42 2026 GMT
            Not After : Jan 20 05:24:42 2027 GMT
        Subject: CN=86d67c5a-7809-4dda-a6c9-7cf27ad4d036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:76:7a:af:04:e6:43:c5:95:1b:53:3a:d1:
                    f0:47:a7:23:31:85:6e:2f:dc:d7:b2:6d:22:0a:a4:
                    db:96:f3:09:4e:fd:5b:b3:c3:14:f4:1c:aa:7b:95:
                    d9:71:d3:7d:cb:c8:c5:d1:a8:d9:23:aa:db:e5:9d:
                    6b:b5:49:84:b5:7d:02:6e:23:28:40:24:04:43:53:
                    51:ba:ac:1d:c8:1c:15:f2:f4:29:23:82:19:2f:03:
                    c4:38:8b:01:ac:a5:cf:4f:c3:19:66:0a:aa:06:62:
                    d5:9a:d0:67:18:b4:80:a5:9c:4e:13:c4:a4:1a:65:
                    19:50:cf:71:ef:02:b5:49:54:eb:92:02:73:1b:fb:
                    02:6c:3c:55:63:cc:37:b8:e9:ea:59:d5:e9:9b:11:
                    de:03:e6:aa:bd:2b:35:7b:93:b3:16:3c:cb:5b:b7:
                    1a:b8:e7:be:5d:2e:c7:62:51:e3:1a:15:c9:a2:b3:
                    79:fd:c2:23:30:49:ca:50:d1:10:4f:8a:62:89:48:
                    7b:48:f4:b7:a0:ee:32:39:b9:7c:c8:5e:08:87:d6:
                    e3:44:a0:3f:4e:16:1c:7a:f8:f1:a9:f6:eb:52:ab:
                    61:38:92:a3:d1:32:e0:da:aa:98:7a:d0:ba:85:28:
                    fa:65:8b:b0:58:c7:8b:0f:29:2a:f1:1e:a2:08:a3:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5D:A0:BA:49:00:D1:6E:56:3F:2C:A6:DE:89:44:01:CB:21:30:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c/04849b6d-aea7-359a-8f21-1c3f2d326cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c/cbc18bd7-6579-4812-8188-61644fe9337c.crl

            X509v3 Authority Key Identifier:
                keyid:3C:72:C5:06:0A:5A:2A:C0:5B:28:45:18:FB:60:43:0E:2E:8A:C7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cbc18bd7-6579-4812-8188-61644fe9337c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.150.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:36:1f:ff:46:5b:62:68:14:5c:e8:8f:c1:7e:d5:c7:87:c6:
         d7:eb:3d:a1:ab:93:6b:b0:86:fa:64:bd:4e:27:58:38:a0:28:
         73:d5:e0:f3:08:20:62:52:06:e1:11:8a:43:b9:7d:6e:51:49:
         88:a8:12:b3:32:47:e9:cb:1a:96:dc:45:97:68:e3:c8:6a:fd:
         76:15:3f:8a:3f:f8:89:a4:27:ee:fa:a8:37:59:bf:e9:ce:c3:
         e8:ff:a8:82:12:43:8d:3f:a0:6d:67:d6:7b:7f:a2:3c:34:d1:
         2d:f9:83:f1:8e:b8:7f:d2:04:67:26:51:92:76:45:d5:2b:6e:
         69:30:a4:6d:f1:b4:e1:d3:d2:12:fc:d3:c6:b8:c9:41:84:b7:
         0d:3e:b8:14:f7:17:be:af:d9:0b:2c:14:b5:11:9e:05:46:36:
         d5:a8:3c:4c:a3:32:a8:2e:cf:64:e3:51:c5:fa:b3:16:41:5a:
         99:ab:25:22:db:36:3f:f0:28:22:ec:65:3f:65:bd:34:c0:02:
         ca:ed:0f:52:59:d7:08:d8:bb:4c:d0:0c:bb:bc:ac:1d:ef:c4:
         a5:30:bd:e7:df:8b:27:40:2d:f9:74:8e:07:c3:99:1b:08:54:
         70:1f:8e:e8:2e:11:06:3a:ed:f8:95:06:bc:02:ff:b1:cd:c9:
         fe:f9:6c:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+VOHt8jg47v4PbbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JjMThiZDctNjU3OS00ODEyLTgxODgtNjE2NDRmZTkz
MzdjMB4XDTI2MTAyMjA0MjQ0MloXDTI3MDEyMDA1MjQ0MlowLzEtMCsGA1UEAxMk
ODZkNjdjNWEtNzgwOS00ZGRhLWE2YzktN2NmMjdhZDRkMDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuR2eq8E5kPFlRtTOtHwR6cjMYVuL9zXsm0i
CqTblvMJTv1bs8MU9Byqe5XZcdN9y8jF0ajZI6rb5Z1rtUmEtX0CbiMoQCQEQ1NR
uqwdyBwV8vQpI4IZLwPEOIsBrKXPT8MZZgqqBmLVmtBnGLSApZxOE8SkGmUZUM9x
7wK1SVTrkgJzG/sCbDxVY8w3uOnqWdXpmxHeA+aqvSs1e5OzFjzLW7cauOe+XS7H
YlHjGhXJorN5/cIjMEnKUNEQT4piiUh7SPS3oO4yObl8yF4Ih9bjRKA/ThYcevjx
qfbrUqthOJKj0TLg2qqYetC6hSj6ZYuwWMeLDykq8R6iCKMjjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxdoLpJANFuVj8spt6JRAHLITCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYmMx
OGJkNy02NTc5LTQ4MTItODE4OC02MTY0NGZlOTMzN2MvMDQ4NDliNmQtYWVhNy0z
NTlhLThmMjEtMWMzZjJkMzI2Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2JjMThiZDctNjU3OS00ODEyLTgx
ODgtNjE2NDRmZTkzMzdjL2NiYzE4YmQ3LTY1NzktNDgxMi04MTg4LTYxNjQ0ZmU5
MzM3Yy5jcmwwHwYDVR0jBBgwFoAUPHLFBgpaKsBbKEUY+2BDDi6Kx5cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jYmMxOGJkNy02NTc5LTQ4MTItODE4OC02MTY0
NGZlOTMzN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQJbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAU2H/9GW2JoFFzoj8F+1ceHxtfrPaGrk2uwhvpkvU4nWDigKHPV4PMI
IGJSBuERikO5fW5RSYioErMyR+nLGpbcRZdo48hq/XYVP4o/+ImkJ+76qDdZv+nO
w+j/qIISQ40/oG1n1nt/ojw00S35g/GOuH/SBGcmUZJ2RdUrbmkwpG3xtOHT0hL8
08a4yUGEtw0+uBT3F76v2QssFLURngVGNtWoPEyjMqguz2TjUcX6sxZBWpmrJSLb
Nj/wKCLsZT9lvTTAAsrtD1JZ1wjYu0zQDLu8rB3vxKUwveffiydALfl0jgfDmRsI
VHAfjuguEQY67fiVBrwC/7HNyf75bK8=
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:15 2026 by rpki-client