Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/1cd2e978-2a42-3181-b6f1-9ac751724860.roa
File:                     1cd2e978-2a42-3181-b6f1-9ac751724860.roa (raw, json)
Hash identifier:          Lf2fKmf3hVRqq0GWcIQ5/dXrBMAl7zPoUWrR7+yQOcE=
Subject key identifier:   6A:96:FF:E1:34:88:8B:93:13:7C:3B:46:9C:5B:A6:D4:A8:EB:90:4B
Certificate issuer:       /CN=70b45451-ee37-49a6-aa31-f94b6a016db8
Certificate serial:       010D0C9F4328584F9E987BD4907FA72D45208600
Authority key identifier: 78:89:A2:DA:91:7D:58:2D:AB:52:DB:70:23:C9:03:F3:B3:37:96:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/1cd2e978-2a42-3181-b6f1-9ac751724860.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     393521
IP address blocks:        206.125.32.0/21 maxlen: 24
                          2607:c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/70b45451-ee37-49a6-aa31-f94b6a016db8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/70b45451-ee37-49a6-aa31-f94b6a016db8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:7b:d4:90:7f:a7:2d:45:20:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b45451-ee37-49a6-aa31-f94b6a016db8
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=29b49793-eec5-40e4-92fa-122d59b639c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:46:8a:5e:d3:03:ec:71:96:93:f4:0b:bb:
                    6f:bc:75:de:6e:21:68:61:f3:71:ec:d6:7c:67:08:
                    ed:4d:3b:b3:bc:a0:34:80:ff:16:e3:fb:ed:c1:98:
                    20:f7:05:d6:1e:15:3e:fe:2b:b6:f8:94:8b:e5:75:
                    75:6c:87:e6:61:83:35:90:ee:f2:b1:b7:8a:e7:94:
                    bf:06:5e:ff:48:50:61:ac:5f:f4:0a:7f:f1:65:28:
                    46:63:a5:fd:e6:9d:34:bf:b6:97:5c:8f:95:f7:48:
                    3e:b3:bf:a7:c1:4d:12:0b:7b:89:b3:9a:7a:b0:6c:
                    31:e2:5b:d5:2f:31:35:ed:5d:ca:c9:f7:64:a8:c0:
                    66:8e:26:89:31:58:4c:70:46:c5:40:42:66:61:1a:
                    56:bf:a8:0e:c0:ea:53:9e:2b:14:6f:30:e3:e4:f4:
                    e3:c2:64:f4:c8:96:cd:14:d0:2f:38:b5:31:7f:b8:
                    88:f3:0c:03:41:2a:77:18:c0:01:f7:6c:24:77:b2:
                    b4:60:9b:fd:34:61:ef:b9:34:32:90:9e:d6:67:d3:
                    0f:8b:c2:bd:9a:ca:f4:01:f6:8c:d0:9f:b0:13:cb:
                    fb:3c:b4:d6:7c:12:3b:b8:7c:de:39:09:9e:df:b7:
                    11:7b:54:b7:e6:3b:f0:75:75:d1:3a:a3:c2:80:c6:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:96:FF:E1:34:88:8B:93:13:7C:3B:46:9C:5B:A6:D4:A8:EB:90:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/1cd2e978-2a42-3181-b6f1-9ac751724860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/70b45451-ee37-49a6-aa31-f94b6a016db8.crl

            X509v3 Authority Key Identifier:
                keyid:78:89:A2:DA:91:7D:58:2D:AB:52:DB:70:23:C9:03:F3:B3:37:96:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.125.32.0/21
                IPv6:
                  2607:c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:36:ec:91:91:7d:17:f4:d5:70:e9:d3:4e:c9:b3:b6:de:
         9e:42:de:b3:64:48:1e:9f:fb:93:ea:86:11:60:c6:b3:cc:b3:
         36:93:ae:a7:c8:27:28:7f:23:da:30:cc:b5:60:4f:ce:a0:f3:
         76:44:ca:62:06:fd:a3:05:45:53:a9:0b:40:bd:b3:32:1d:3b:
         32:2f:d2:7f:e7:65:7e:67:6c:77:4c:a4:d6:d2:54:2a:73:fc:
         4f:c5:fe:57:b9:e9:b1:78:f8:9b:56:a0:0c:3f:7f:c0:5b:1b:
         ca:1c:bb:45:97:64:50:69:bf:7a:5f:9d:3f:76:ec:bd:b6:d1:
         ee:27:c1:f9:ba:06:c5:73:d9:8a:dc:c8:c8:12:8f:5e:48:2a:
         f3:72:8f:ba:98:70:cd:58:8f:95:f6:34:09:29:9a:f9:62:f4:
         db:38:c3:6c:2f:14:9d:13:90:8a:60:12:b5:a0:fb:8f:cc:77:
         8a:67:73:52:54:26:45:95:db:84:fa:6e:f3:15:62:fa:06:87:
         55:26:af:9c:8b:25:12:8e:30:5e:07:5d:e9:41:1d:a9:1e:85:
         48:84:e5:f2:b0:b1:16:f8:4a:0a:75:53:ba:35:1f:4d:7f:87:
         40:97:0f:e8:29:42:98:3a:9b:8c:34:58:ef:4d:a5:1e:33:f2:
         29:4f:34:b0
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE+emHvUkH+nLUUghgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBiNDU0NTEtZWUzNy00OWE2LWFhMzEtZjk0YjZhMDE2
ZGI4MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk
MjliNDk3OTMtZWVjNS00MGU0LTkyZmEtMTIyZDU5YjYzOWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq5Gil7TA+xxlpP0C7tvvHXebiFoYfNx7NZ8
ZwjtTTuzvKA0gP8W4/vtwZgg9wXWHhU+/iu2+JSL5XV1bIfmYYM1kO7ysbeK55S/
Bl7/SFBhrF/0Cn/xZShGY6X95p00v7aXXI+V90g+s7+nwU0SC3uJs5p6sGwx4lvV
LzE17V3KyfdkqMBmjiaJMVhMcEbFQEJmYRpWv6gOwOpTnisUbzDj5PTjwmT0yJbN
FNAvOLUxf7iI8wwDQSp3GMAB92wkd7K0YJv9NGHvuTQykJ7WZ9MPi8K9msr0AfaM
0J+wE8v7PLTWfBI7uHzeOQme37cRe1S35jvwdXXROqPCgMZm/wIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFGqW/+E0iIuTE3w7RpxbptSo65BLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGI0
NTQ1MS1lZTM3LTQ5YTYtYWEzMS1mOTRiNmEwMTZkYjgvMWNkMmU5NzgtMmE0Mi0z
MTgxLWI2ZjEtOWFjNzUxNzI0ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBiNDU0NTEtZWUzNy00OWE2LWFh
MzEtZjk0YjZhMDE2ZGI4LzcwYjQ1NDUxLWVlMzctNDlhNi1hYTMxLWY5NGI2YTAx
NmRiOC5jcmwwHwYDVR0jBBgwFoAUeImi2pF9WC2rUttwI8kD87M3lqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MGI0NTQ1MS1lZTM3LTQ5YTYtYWEzMS1mOTRi
NmEwMTZkYjguY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDzn0gMA0E
AgACMAcDBQAmBwDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAF23NuyRkX0X9NVw6dNOybO23p5C3rNkSB6f
+5PqhhFgxrPMszaTrqfIJyh/I9owzLVgT86g83ZEymIG/aMFRVOpC0C9szIdOzIv
0n/nZX5nbHdMpNbSVCpz/E/F/le56bF4+JtWoAw/f8BbG8ocu0WXZFBpv3pfnT92
7L220e4nwfm6BsVz2YrcyMgSj15IKvNyj7qYcM1Yj5X2NAkpmvli9Ns4w2wvFJ0T
kIpgErWg+4/Md4pnc1JUJkWV24T6bvMVYvoGh1Umr5yLJRKOMF4HXelBHakehUiE
5fKwsRb4Sgp1U7o1H01/h0CXD+gpQpg6m4w0WO9NpR4z8ilPNLA=
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:52:02 2026 by rpki-client