Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa
File:                     060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa (raw, json)
Hash identifier:          Jx/hgKB4B9qUl1nhV+rO++iv42PQ2uqeIdUvsk83XkY=
Subject key identifier:   DE:4F:7D:05:84:47:41:6E:F3:C8:DA:E0:7F:99:B4:F6:D7:72:0F:B5
Certificate issuer:       /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
Certificate serial:       010D0C9F4328584ED6FC82264B0202B9288A7540
Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     55189
IP address blocks:        192.132.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:82:26:4b:02:02:b9:28:8a:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=7607ecf5-4121-4064-b755-c70796c9e8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:1c:1b:2c:47:c4:c2:3b:17:75:c2:6d:fb:
                    9d:d0:b9:1a:fd:07:24:11:0d:5c:8a:19:85:6c:03:
                    d5:21:4d:af:95:68:f3:9d:d9:e2:d4:47:94:ca:23:
                    27:eb:2d:35:ea:8b:05:09:e3:d1:48:ad:7f:2e:44:
                    41:02:48:13:d6:f8:d0:ee:7c:41:df:98:45:3a:ce:
                    7c:8a:2c:0c:5d:21:3f:e7:8b:0b:0f:de:ed:4b:5a:
                    1b:1c:16:7e:0d:02:8c:0e:9f:d3:9f:43:c8:b4:97:
                    b5:fb:50:87:c4:7d:27:6e:8e:e0:15:b0:db:97:ff:
                    53:70:6d:c7:14:a1:21:34:da:d4:08:ae:9f:98:18:
                    dc:20:2f:02:a0:f6:b0:07:01:29:60:e5:fd:29:9f:
                    21:2a:28:e8:44:78:06:94:32:b4:1d:9c:2f:f6:aa:
                    93:bb:d4:a4:8a:65:80:a0:2b:f3:05:6d:10:ec:19:
                    01:ab:a8:ca:eb:e6:16:3b:cd:48:a6:88:57:b3:1f:
                    bf:06:6d:b1:d4:c2:da:45:bf:90:ba:47:cf:cb:92:
                    75:17:c0:a6:e3:10:70:96:44:e6:f0:e8:bb:df:1c:
                    e6:b5:44:8b:04:68:9f:05:a2:27:6e:91:96:ed:08:
                    cd:44:27:de:d2:01:df:f5:2c:8a:8f:2e:47:b3:2a:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:7D:05:84:47:41:6E:F3:C8:DA:E0:7F:99:B4:F6:D7:72:0F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:fc:e1:0a:83:3a:a2:6a:44:a8:c7:89:67:fd:19:96:07:96:
         e9:5a:55:c5:67:63:06:43:06:3a:e2:22:41:d6:01:e9:27:c1:
         7d:90:bf:13:61:a3:47:2c:55:ed:49:0c:02:2a:ee:af:0b:27:
         5e:f6:82:7e:c4:ed:b5:5a:d6:91:38:9c:31:96:4e:3f:88:d4:
         4d:68:a2:94:90:4f:f6:0b:02:a7:37:32:17:d4:dc:b6:e1:4d:
         75:71:df:c9:53:bd:18:b9:3c:1f:aa:d4:7a:83:e5:e2:62:f2:
         04:06:c4:48:b5:a5:1e:60:d4:da:39:2b:d7:31:91:b1:09:f9:
         a2:bc:9f:52:0c:42:8e:ed:0d:1b:32:1b:99:bf:22:06:ea:ed:
         0e:63:0b:4a:8f:1d:20:53:86:b2:9a:29:46:ef:16:c2:eb:f0:
         1d:eb:89:02:21:80:ea:8b:fd:64:5d:79:7f:08:49:33:d5:da:
         ff:99:11:7f:85:b7:73:d5:4b:c2:7b:d3:0a:05:88:b8:6f:8c:
         54:a0:e2:ca:3a:7a:bc:d5:c6:c8:55:37:dc:9f:97:3e:03:f6:
         21:9d:fa:4b:1b:0c:ca:64:9e:02:cb:5e:cb:1e:a5:39:ed:3a:
         b2:c5:28:af:69:da:b8:8c:11:47:75:74:ae:91:27:07:1b:6e:
         d3:f4:6a:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7W/IImSwICuSiKdUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMyZDMzNTktN2JjMi00YzNkLTljMzMtYzI1MDM0ZGJi
MDQ5MB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk
NzYwN2VjZjUtNDEyMS00MDY0LWI3NTUtYzcwNzk2YzllOGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIscGyxHxMI7F3XCbfud0Lka/QckEQ1cihmF
bAPVIU2vlWjzndni1EeUyiMn6y016osFCePRSK1/LkRBAkgT1vjQ7nxB35hFOs58
iiwMXSE/54sLD97tS1obHBZ+DQKMDp/Tn0PItJe1+1CHxH0nbo7gFbDbl/9TcG3H
FKEhNNrUCK6fmBjcIC8CoPawBwEpYOX9KZ8hKijoRHgGlDK0HZwv9qqTu9SkimWA
oCvzBW0Q7BkBq6jK6+YWO81IpohXsx+/Bm2x1MLaRb+QukfPy5J1F8Cm4xBwlkTm
8Oi73xzmtUSLBGifBaInbpGW7QjNRCfe0gHf9SyKjy5HsyqyqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5PfQWER0Fu88ja4H+ZtPbXcg+1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YzJk
MzM1OS03YmMyLTRjM2QtOWMzMy1jMjUwMzRkYmIwNDkvMDYwZTA4NTktOWVlZi0z
YWViLWEyZmQtZWNmMmUzNWNiMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWMyZDMzNTktN2JjMi00YzNkLTlj
MzMtYzI1MDM0ZGJiMDQ5LzljMmQzMzU5LTdiYzItNGMzZC05YzMzLWMyNTAzNGRi
YjA0OS5jcmwwHwYDVR0jBBgwFoAUPtpyMjtFHN6Dqd1yZILSGZmnI30wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85YzJkMzM1OS03YmMyLTRjM2QtOWMzMy1jMjUw
MzRkYmIwNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIQeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMH84QqDOqJqRKjHiWf9GZYHlulaVcVnYwZDBjriIkHWAeknwX2QvxNh
o0csVe1JDAIq7q8LJ172gn7E7bVa1pE4nDGWTj+I1E1oopSQT/YLAqc3MhfU3Lbh
TXVx38lTvRi5PB+q1HqD5eJi8gQGxEi1pR5g1No5K9cxkbEJ+aK8n1IMQo7tDRsy
G5m/Igbq7Q5jC0qPHSBThrKaKUbvFsLr8B3riQIhgOqL/WRdeX8ISTPV2v+ZEX+F
t3PVS8J70woFiLhvjFSg4so6erzVxshVN9yflz4D9iGd+ksbDMpkngLLXssepTnt
OrLFKK9p2riMEUd1dK6RJwcbbtP0atU=
-----END CERTIFICATE-----
Generated at Tue Sep 15 16:26:37 2026 by rpki-client