Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/ba685e13-dd5c-39f7-bfc9-26d77446004a.roa
File:                     ba685e13-dd5c-39f7-bfc9-26d77446004a.roa (raw, json)
Hash identifier:          PixAob8kdJBv/TtKh9Ly0CSRiah9/a1Kd1ECAoN1l8o=
Subject key identifier:   0F:D5:42:93:77:F2:D9:15:CD:67:BE:D7:41:79:E9:8C:92:1F:42:1E
Certificate issuer:       /CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
Certificate serial:       010D0C9F4328584EE4F1E72DC0E04CA622FB4D40
Authority key identifier: 0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/ba685e13-dd5c-39f7-bfc9-26d77446004a.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     16633
IP address blocks:        192.69.18.0/24 maxlen: 24
                          208.70.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:e7:2d:c0:e0:4c:a6:22:fb:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdaa083-5b1b-4810-b0a5-c4984449067c
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=18b7863d-db24-47d1-a1a8-f932fc9bf52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:da:e7:ae:88:76:0a:b4:14:ff:74:be:6f:0f:
                    97:53:a1:ab:b2:c1:a3:8a:b0:bd:94:6a:29:59:7f:
                    2c:3f:93:8a:81:7b:9a:6e:11:5a:a8:fd:85:8f:c5:
                    ad:09:52:4c:a7:ca:f9:38:2e:b2:bf:54:e3:95:6c:
                    58:7e:f5:aa:35:d7:92:d9:5f:ce:bd:00:7b:cc:db:
                    c1:a2:88:f4:29:c4:9e:cb:6f:87:9c:b9:19:00:f7:
                    83:c6:46:e9:76:4c:d9:39:df:e7:6d:7b:0c:5a:77:
                    64:bb:49:9f:81:43:cf:0f:d8:cb:54:38:78:5f:5e:
                    d9:fe:3a:78:c9:2d:90:61:9c:8b:27:cb:9b:81:51:
                    2e:78:ea:ad:a0:7f:1e:42:be:fe:23:bd:36:ab:5a:
                    f5:8c:16:b6:0d:db:dd:69:ce:a1:88:b5:cc:9a:c0:
                    cf:38:9e:e2:c9:c9:d5:fb:a6:f2:86:33:20:d0:29:
                    8a:63:9a:29:56:10:3d:a3:6a:4a:33:1b:0e:7d:36:
                    a4:20:d5:3c:6d:8d:11:fd:0d:cc:c4:83:ec:7d:2d:
                    e5:4a:84:9f:73:81:8e:55:c1:ec:9c:49:51:e4:8a:
                    5e:96:cc:5d:a1:90:a8:f6:69:6c:6c:60:5a:b4:6c:
                    f7:f6:dd:32:0c:c9:bb:00:bd:2a:7a:77:e6:44:d8:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D5:42:93:77:F2:D9:15:CD:67:BE:D7:41:79:E9:8C:92:1F:42:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/ba685e13-dd5c-39f7-bfc9-26d77446004a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c/8fdaa083-5b1b-4810-b0a5-c4984449067c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:7C:8F:CE:19:1C:E6:4B:91:4D:0A:58:20:35:39:A4:8B:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8fdaa083-5b1b-4810-b0a5-c4984449067c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.18.0/24
                  208.70.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:06:f0:c5:28:5f:bc:1d:08:c4:ca:98:b8:d2:b1:08:13:58:
         31:c3:69:c7:b1:d1:23:6d:97:c8:ae:2c:38:51:ed:d7:83:55:
         5b:fc:1f:7c:fd:73:98:d3:6a:5d:29:c9:13:a3:db:b4:da:18:
         a3:5c:02:04:96:5b:08:94:49:00:f9:11:60:fa:45:d1:b2:b1:
         b4:5a:e2:e8:f3:bb:ed:1b:d8:28:7b:8d:e9:d1:00:5b:f6:c7:
         92:54:82:5d:e3:62:53:ab:c4:17:4e:f9:c7:33:ee:e6:a9:4b:
         a5:ed:30:8d:1a:10:d4:e4:36:a6:94:8f:8d:a9:c8:be:25:f0:
         17:5b:cc:d3:a9:b8:f0:77:b4:29:44:2b:1a:25:66:9f:b6:eb:
         55:ac:78:42:11:2d:77:ed:5c:5a:ff:6c:5a:19:0e:ff:fe:ea:
         6b:c1:f8:7d:ff:28:15:3b:1a:50:7d:e6:44:73:a7:70:1c:e9:
         f5:e4:9d:a1:b7:14:76:59:29:d5:af:ad:26:c9:24:70:63:58:
         c9:c5:c7:ba:af:0d:08:91:ab:37:19:fd:25:9a:1b:63:33:57:
         a4:ad:85:b0:49:05:6b:02:75:6a:af:da:f9:86:0b:a2:e6:d1:
         e9:a6:b2:f8:64:30:a1:6c:93:28:a3:a2:5e:03:54:3c:8d:61:
         ae:13:e2:49
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7k8ectwOBMpiL7TUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZkYWEwODMtNWIxYi00ODEwLWIwYTUtYzQ5ODQ0NDkw
NjdjMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
MThiNzg2M2QtZGIyNC00N2QxLWExYTgtZjkzMmZjOWJmNTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1drnroh2CrQU/3S+bw+XU6GrssGjirC9lGop
WX8sP5OKgXuabhFaqP2Fj8WtCVJMp8r5OC6yv1TjlWxYfvWqNdeS2V/OvQB7zNvB
ooj0KcSey2+HnLkZAPeDxkbpdkzZOd/nbXsMWndku0mfgUPPD9jLVDh4X17Z/jp4
yS2QYZyLJ8ubgVEueOqtoH8eQr7+I702q1r1jBa2Ddvdac6hiLXMmsDPOJ7iycnV
+6byhjMg0CmKY5opVhA9o2pKMxsOfTakINU8bY0R/Q3MxIPsfS3lSoSfc4GOVcHs
nElR5IpelsxdoZCo9mlsbGBatGz39t0yDMm7AL0qenfmRNitZQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFA/VQpN38tkVzWe+10F56YySH0IeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZmRh
YTA4My01YjFiLTQ4MTAtYjBhNS1jNDk4NDQ0OTA2N2MvYmE2ODVlMTMtZGQ1Yy0z
OWY3LWJmYzktMjZkNzc0NDYwMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGZkYWEwODMtNWIxYi00ODEwLWIw
YTUtYzQ5ODQ0NDkwNjdjLzhmZGFhMDgzLTViMWItNDgxMC1iMGE1LWM0OTg0NDQ5
MDY3Yy5jcmwwHwYDVR0jBBgwFoAUCvR8j84ZHOZLkU0KWCA1OaSLy7MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZmRhYTA4My01YjFiLTQ4MTAtYjBhNS1jNDk4
NDQ0OTA2N2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEUSAwQA
0EZaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEYG8MUoX7wdCMTKmLjSsQgTWDHDacex0SNtl8iuLDhR7deD
VVv8H3z9c5jTal0pyROj27TaGKNcAgSWWwiUSQD5EWD6RdGysbRa4ujzu+0b2Ch7
jenRAFv2x5JUgl3jYlOrxBdO+ccz7uapS6XtMI0aENTkNqaUj42pyL4l8BdbzNOp
uPB3tClEKxolZp+261WseEIRLXftXFr/bFoZDv/+6mvB+H3/KBU7GlB95kRzp3Ac
6fXknaG3FHZZKdWvrSbJJHBjWMnFx7qvDQiRqzcZ/SWaG2MzV6SthbBJBWsCdWqv
2vmGC6Lm0emmsvhkMKFskyijol4DVDyNYa4T4kk=
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:13:18 2026 by rpki-client