Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa
File:                     364b006a-dadb-395d-bc34-448cd3148010.roa (raw, json)
Hash identifier:          TGCGajYibY73FAKi6TadXtwFJBJXGR75oy6eqEeujqs=
Subject key identifier:   E2:4D:E3:30:D1:FD:50:33:66:60:BF:CA:0E:21:3F:81:03:89:20:D8
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584DBA3AE4939F261569ADFFD380
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     62651
IP address blocks:        216.131.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e4:93:9f:26:15:69:ad:ff:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=13ebff2d-0603-4f74-a9fe-7bf6b7727f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:bc:0c:9a:38:9b:15:e4:1c:5a:47:f4:04:
                    3e:79:e0:1a:e9:c6:c1:6e:ec:be:5a:5a:a0:99:82:
                    0a:25:d4:47:1f:df:a9:a0:5a:c9:03:5f:7c:de:a9:
                    fb:58:92:24:c0:64:2f:45:c9:e9:97:7e:eb:f0:c0:
                    34:fc:42:fb:a1:f1:30:0a:e4:42:7f:40:bf:06:42:
                    10:89:8f:e6:92:f8:5a:88:6a:10:fe:6c:e2:af:d0:
                    0c:69:e0:fb:fc:4b:75:ae:07:3d:e8:f4:3d:9c:ae:
                    bc:03:33:65:63:ac:ca:41:bf:65:e9:a5:c1:d2:61:
                    94:df:14:69:95:9a:bb:14:5e:14:96:f0:84:1a:f8:
                    66:b4:8e:c4:cb:63:49:c4:43:8e:2d:01:a3:a2:7b:
                    14:54:4b:96:9d:52:48:ad:fc:a5:d0:4f:8a:1a:dc:
                    6d:2d:cc:26:d8:80:83:2b:7c:be:94:5c:8e:4e:b2:
                    7c:92:6b:1c:4f:28:09:ab:f7:64:97:8e:7b:5a:b6:
                    75:80:b0:ee:7c:e8:87:b8:b1:41:b2:1c:aa:fa:bb:
                    22:a5:47:ad:b1:ea:ee:60:a4:19:31:d1:2e:91:7f:
                    18:5d:fc:24:79:45:f4:15:64:dc:87:b9:83:a7:21:
                    77:8c:e2:3b:a5:db:79:1d:0b:3f:d6:32:92:55:25:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4D:E3:30:D1:FD:50:33:66:60:BF:CA:0E:21:3F:81:03:89:20:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/364b006a-dadb-395d-bc34-448cd3148010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:82:3d:3b:71:b8:bf:cf:70:07:24:c7:cb:74:3a:c1:99:88:
         55:a7:33:a9:d6:d7:16:a7:36:0a:b6:1c:67:dc:cb:0c:c7:00:
         b0:7d:aa:0f:50:3d:71:cb:72:af:7f:29:6e:e3:82:53:bd:d7:
         71:95:4b:0b:88:01:d7:02:e2:c1:cf:12:74:ff:ff:16:4d:4e:
         58:ac:4d:65:9a:7e:ca:fa:cd:81:c6:4d:e2:f2:63:6b:75:3c:
         a7:57:19:10:1d:b3:69:d5:72:88:52:73:37:26:0d:fb:fa:69:
         6d:63:3d:d5:a8:77:94:08:ab:50:76:53:60:b1:cf:d1:4d:1f:
         9b:26:7b:95:df:8b:12:f9:e3:79:bd:08:4e:94:d3:4b:18:8f:
         bd:af:ae:8d:83:25:c0:5f:dd:34:d1:2e:fb:85:c0:d5:0d:21:
         6b:ab:0a:01:89:dc:70:db:7a:76:04:ff:22:57:f0:e9:96:e3:
         bd:53:8a:36:e1:d6:bb:ba:6c:b5:4b:78:68:15:f2:d8:5a:24:
         a6:66:2a:b0:08:eb:bf:5b:79:e2:87:e9:b4:69:c5:15:5b:39:
         ba:d2:f1:c3:65:c6:85:64:d8:52:5e:e4:55:5d:fa:33:56:c9:
         0c:26:3f:30:fd:c1:8b:39:cf:ec:bc:d8:71:d3:42:46:84:33:
         ea:5e:e6:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuSTnyYVaa3/04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
MTNlYmZmMmQtMDYwMy00Zjc0LWE5ZmUtN2JmNmI3NzI3ZjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk+8DJo4mxXkHFpH9AQ+eeAa6cbBbuy+Wlqg
mYIKJdRHH9+poFrJA1983qn7WJIkwGQvRcnpl37r8MA0/EL7ofEwCuRCf0C/BkIQ
iY/mkvhaiGoQ/mzir9AMaeD7/Et1rgc96PQ9nK68AzNlY6zKQb9l6aXB0mGU3xRp
lZq7FF4UlvCEGvhmtI7Ey2NJxEOOLQGjonsUVEuWnVJIrfyl0E+KGtxtLcwm2ICD
K3y+lFyOTrJ8kmscTygJq/dkl457WrZ1gLDufOiHuLFBshyq+rsipUetseruYKQZ
MdEukX8YXfwkeUX0FWTch7mDpyF3jOI7pdt5HQs/1jKSVSXU4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJN4zDR/VAzZmC/yg4hP4EDiSDYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMzY0YjAwNmEtZGFkYi0z
OTVkLWJjMzQtNDQ4Y2QzMTQ4MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2INtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGCPTtxuL/PcAckx8t0OsGZiFWnM6nW1xanNgq2HGfcywzHALB9qg9Q
PXHLcq9/KW7jglO913GVSwuIAdcC4sHPEnT//xZNTlisTWWafsr6zYHGTeLyY2t1
PKdXGRAds2nVcohSczcmDfv6aW1jPdWod5QIq1B2U2Cxz9FNH5sme5XfixL543m9
CE6U00sYj72vro2DJcBf3TTRLvuFwNUNIWurCgGJ3HDbenYE/yJX8OmW471Tijbh
1ru6bLVLeGgV8thaJKZmKrAI679beeKH6bRpxRVbObrS8cNlxoVk2FJe5FVd+jNW
yQwmPzD9wYs5z+y82HHTQkaEM+pe5pY=
-----END CERTIFICATE-----
Generated at Wed May 6 02:45:34 2026 by rpki-client