Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa
File:                     48183b0d-014a-3b40-903d-63977be0fd76.roa (raw, json)
Hash identifier:          BvtyHqLTpEoOHQdeMVorYA+2+rUTC+yjUFzphH7vOEE=
Subject key identifier:   28:F5:53:6B:55:C0:A9:52:0F:73:43:85:13:D6:52:C7:7D:B6:72:BB
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584EA78869FFF9AD6CCA44538A64
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        209.15.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:69:ff:f9:ad:6c:ca:44:53:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=af7ad12e-fb2a-4171-9d0b-ce8d72c26436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:b6:0c:3e:ab:e7:11:a0:92:fe:76:3a:64:
                    ca:b9:3c:7b:2e:bf:66:4b:e5:ea:f0:2b:ae:79:6e:
                    e4:06:1e:dd:45:3d:bd:f8:df:11:dc:26:6d:91:a4:
                    48:06:81:42:23:59:4b:79:2e:3e:18:58:be:17:f0:
                    b0:3c:e0:2a:38:79:82:14:43:b8:0c:6e:b2:71:8d:
                    bb:38:37:3f:eb:d8:0d:3e:1a:d7:46:12:7f:bc:04:
                    e3:5a:1d:1f:e6:73:17:51:d5:2a:4c:54:74:07:3e:
                    34:a3:4f:8f:78:2c:ec:2a:72:68:49:28:5d:40:02:
                    30:e1:ce:e3:7a:6f:15:26:1a:8b:03:c7:f1:f7:88:
                    5d:59:53:cb:2b:83:00:e8:75:83:4e:53:68:fe:1e:
                    d5:74:cb:d6:92:b0:3e:69:ec:e4:6d:1e:a9:a9:c9:
                    52:fa:39:d2:9b:d5:f0:21:67:e2:75:51:e6:c1:ea:
                    b0:dd:e4:b8:ee:3a:e0:19:53:94:cb:25:57:fa:7c:
                    22:b7:f1:ce:44:0b:bc:95:d7:09:e9:92:45:a3:94:
                    0a:1e:ec:57:83:40:4a:fd:9b:c4:14:15:93:d6:6d:
                    8c:be:8a:e0:16:ec:04:a3:f4:b7:2e:bb:ee:e1:10:
                    9f:8f:ed:c6:23:12:00:cd:fa:5f:4a:88:3a:e7:1b:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F5:53:6B:55:C0:A9:52:0F:73:43:85:13:D6:52:C7:7D:B6:72:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/48183b0d-014a-3b40-903d-63977be0fd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:83:d2:76:aa:21:fd:75:06:22:d2:fa:20:2d:68:f9:c9:b8:
         e5:b7:95:c6:5f:aa:6a:05:ba:ff:56:c5:6a:f8:9f:36:24:a8:
         0b:0d:65:84:e4:95:0c:77:3a:19:97:2c:0e:d1:53:c4:18:b1:
         b4:d8:14:8b:16:8d:f7:c1:ae:0a:ea:4f:f7:9b:54:6f:ef:44:
         da:8a:ad:1a:6c:72:6a:ad:fe:fc:e5:47:b2:bb:3d:6c:f2:4e:
         5c:78:af:2d:38:8b:5f:ae:92:d8:6a:03:65:91:6f:71:8b:f9:
         2e:f0:a6:b3:dc:be:a0:39:0d:c7:4b:59:1b:96:70:8b:c2:f9:
         3d:1e:23:e7:ce:e3:cf:fb:b0:5c:95:55:17:10:7b:23:a6:ff:
         6f:9b:91:7e:21:e1:69:30:97:1d:dc:42:94:15:21:8b:05:70:
         24:41:b1:92:83:c2:d9:72:09:67:72:87:c8:9b:a9:78:14:73:
         67:d4:7d:f0:9b:cd:46:3e:2b:3e:59:d0:46:ca:71:9c:22:7f:
         bd:b2:dc:e8:a0:81:9c:5a:3b:85:15:d7:96:75:19:be:27:2e:
         0a:94:03:01:b8:9a:04:de:01:38:29:fc:51:39:34:0b:9b:d2:
         92:84:2e:cf:8a:9e:ab:0e:b0:2e:ec:66:6c:f4:da:21:b3:43:
         28:c1:2f:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGn/+a1sykRTimQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWY3YWQxMmUtZmIyYS00MTcxLTlkMGItY2U4ZDcyYzI2NDM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHO2DD6r5xGgkv52OmTKuTx7Lr9mS+Xq8Cuu
eW7kBh7dRT29+N8R3CZtkaRIBoFCI1lLeS4+GFi+F/CwPOAqOHmCFEO4DG6ycY27
ODc/69gNPhrXRhJ/vATjWh0f5nMXUdUqTFR0Bz40o0+PeCzsKnJoSShdQAIw4c7j
em8VJhqLA8fx94hdWVPLK4MA6HWDTlNo/h7VdMvWkrA+aezkbR6pqclS+jnSm9Xw
IWfidVHmweqw3eS47jrgGVOUyyVX+nwit/HORAu8ldcJ6ZJFo5QKHuxXg0BK/ZvE
FBWT1m2MvorgFuwEo/S3Lrvu4RCfj+3GIxIAzfpfSog65xv7EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCj1U2tVwKlSD3NDhRPWUsd9tnK7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDgxODNiMGQtMDE0YS0z
YjQwLTkwM2QtNjM5NzdiZTBmZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Q8lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWD0naqIf11BiLS+iAtaPnJuOW3lcZfqmoFuv9WxWr4nzYkqAsNZYTk
lQx3OhmXLA7RU8QYsbTYFIsWjffBrgrqT/ebVG/vRNqKrRpscmqt/vzlR7K7PWzy
Tlx4ry04i1+ukthqA2WRb3GL+S7wprPcvqA5DcdLWRuWcIvC+T0eI+fO48/7sFyV
VRcQeyOm/2+bkX4h4Wkwlx3cQpQVIYsFcCRBsZKDwtlyCWdyh8ibqXgUc2fUffCb
zUY+Kz5Z0EbKcZwif72y3OiggZxaO4UV15Z1Gb4nLgqUAwG4mgTeATgp/FE5NAub
0pKELs+KnqsOsC7sZmz02iGzQyjBLzY=
-----END CERTIFICATE-----
Generated at Thu Aug 6 10:39:47 2026 by rpki-client