Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bcd1cbe5-30e4-3f96-ad9d-210ec283ef20.roa
File:                     bcd1cbe5-30e4-3f96-ad9d-210ec283ef20.roa (raw, json)
Hash identifier:          UVgy2HdfkMLdDrrbejwV+iF/IC2JlFDpV7mNqzcPZZU=
Subject key identifier:   07:24:C4:52:AE:74:1B:30:59:B7:2A:85:CA:A2:93:9B:07:B1:68:34
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584EA793F0806C1068F9D7936F00
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bcd1cbe5-30e4-3f96-ad9d-210ec283ef20.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53959
IP address blocks:        207.171.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:f0:80:6c:10:68:f9:d7:93:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4fdc7c5-cfc7-4cbf-8f11-f3960d43bdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:2c:30:95:83:90:ce:bf:29:2a:b2:6b:85:
                    fc:79:27:42:bf:17:3a:44:ae:79:46:92:10:80:00:
                    a8:7a:c8:14:30:8d:5f:a3:73:88:85:c1:8d:9e:53:
                    59:02:88:99:21:b9:81:24:0d:c4:24:d1:4a:f9:73:
                    d3:6d:eb:93:30:27:bd:b1:27:fa:44:61:d9:86:ae:
                    96:3b:29:c8:d5:a8:c3:63:65:94:cd:f9:5d:af:9a:
                    62:30:4b:b8:83:2d:d3:a2:08:18:9f:f0:2a:4d:b1:
                    d4:83:25:0c:11:c4:9b:d2:07:e7:d9:62:8f:45:53:
                    30:72:8c:6d:07:c2:0b:49:ab:5f:02:85:db:14:00:
                    64:03:57:25:7d:21:e5:5e:f4:34:13:33:38:09:67:
                    24:07:ca:6f:e5:e3:24:66:51:1d:59:f9:17:dc:06:
                    c5:19:2b:82:b4:98:82:a7:e1:32:3e:25:a4:04:69:
                    bb:c1:cd:c1:36:85:43:26:28:73:af:76:dd:f6:b4:
                    f7:e9:dc:7b:b7:90:05:13:1b:ba:d2:ab:fd:ae:3a:
                    12:83:3c:60:64:d6:e3:09:dc:6b:d6:00:01:7b:c1:
                    e8:2e:d0:72:37:aa:c7:b9:05:96:d6:b6:65:0a:93:
                    dc:90:c4:da:58:81:a6:a5:00:ef:da:a2:f6:5e:0a:
                    8c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:24:C4:52:AE:74:1B:30:59:B7:2A:85:CA:A2:93:9B:07:B1:68:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/bcd1cbe5-30e4-3f96-ad9d-210ec283ef20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:09:ef:5e:b0:3e:fb:66:b8:f7:f1:8f:1b:1c:f9:37:4d:
         e6:88:03:3a:08:a8:2e:00:67:e0:a9:a3:21:f7:b6:7e:fc:7e:
         83:4e:97:81:5e:2f:f1:71:c1:f9:0e:71:7c:e3:3f:60:35:e1:
         a4:00:d6:11:13:8b:18:12:12:8a:22:76:28:2f:4e:ae:b1:db:
         f6:a7:cd:f9:65:2f:81:2d:c8:75:4f:b2:e4:95:3c:25:ec:74:
         c7:a6:b3:d2:eb:2b:a9:93:73:b5:48:a5:02:d7:a5:16:17:e3:
         90:36:46:a4:eb:ba:2f:8b:b6:fa:30:0b:3a:2e:b4:07:1d:c5:
         3c:98:1b:f2:b6:d0:60:28:45:19:d7:af:4c:86:df:2a:74:dc:
         63:bc:ff:01:7a:d7:59:20:ac:ff:9a:ff:7c:0c:cc:a4:b5:57:
         b9:b2:b6:64:37:11:c0:a0:7b:40:37:21:5d:8d:a5:80:54:3c:
         77:8b:19:fa:ad:52:81:39:43:d1:f6:6a:2a:f7:af:5b:1c:00:
         f7:91:81:bb:1f:aa:b5:46:24:f6:ae:7b:87:6f:d9:55:77:f0:
         93:47:db:dd:27:6c:de:b0:e5:72:4e:26:57:72:33:ce:e3:fb:
         26:d2:4b:f4:50:6e:79:3c:62:b6:9f:c0:30:5e:3e:1e:ae:a3:
         b6:60:b9:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/CAbBBo+deTbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTRmZGM3YzUtY2ZjNy00Y2JmLThmMTEtZjM5NjBkNDNiZGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOYsMJWDkM6/KSqya4X8eSdCvxc6RK55RpIQ
gACoesgUMI1fo3OIhcGNnlNZAoiZIbmBJA3EJNFK+XPTbeuTMCe9sSf6RGHZhq6W
OynI1ajDY2WUzfldr5piMEu4gy3ToggYn/AqTbHUgyUMEcSb0gfn2WKPRVMwcoxt
B8ILSatfAoXbFABkA1clfSHlXvQ0EzM4CWckB8pv5eMkZlEdWfkX3AbFGSuCtJiC
p+EyPiWkBGm7wc3BNoVDJihzr3bd9rT36dx7t5AFExu60qv9rjoSgzxgZNbjCdxr
1gABe8HoLtByN6rHuQWW1rZlCpPckMTaWIGmpQDv2qL2XgqM8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAckxFKudBswWbcqhcqik5sHsWg0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvYmNkMWNiZTUtMzBlNC0z
Zjk2LWFkOWQtMjEwZWMyODNlZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6vEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEptCe9esD77Zrj38Y8bHPk3TeaIAzoIqC4AZ+CpoyH3tn78foNOl4Fe
L/FxwfkOcXzjP2A14aQA1hETixgSEooidigvTq6x2/anzfllL4EtyHVPsuSVPCXs
dMems9LrK6mTc7VIpQLXpRYX45A2RqTrui+LtvowCzoutAcdxTyYG/K20GAoRRnX
r0yG3yp03GO8/wF611kgrP+a/3wMzKS1V7mytmQ3EcCge0A3IV2NpYBUPHeLGfqt
UoE5Q9H2air3r1scAPeRgbsfqrVGJPaue4dv2VV38JNH290nbN6w5XJOJldyM87j
+ybSS/RQbnk8YrafwDBePh6uo7ZguVU=
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:09 2026 by rpki-client