Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
File:                     de977a80-b422-3e83-bc77-25aec313c480.roa (raw, json)
Hash identifier:          ukmzox/jZe099igvTSOgv+tgKaL7qQERB1ixznM7nA8=
Subject key identifier:   E8:E7:F7:D2:5F:0D:8C:18:41:23:AD:13:87:EC:67:43:16:FC:A4:60
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F225D0963D21FADF2AE849EB0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     8635
IP address blocks:        16.1.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:09:63:d2:1f:ad:f2:ae:84:9e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=268226dd-1a10-48e6-9edc-2ff9bcaa89ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:8a:e6:f5:fa:f0:b4:83:d4:dd:03:8e:d6:
                    6c:9d:25:70:b4:86:39:b9:cd:d5:b8:9e:3c:e8:a8:
                    42:b4:63:18:d7:03:fe:23:e8:e4:fb:a9:6f:3b:01:
                    fb:bb:9d:5a:58:41:aa:fd:14:e8:81:f0:7d:5d:82:
                    ec:8a:37:9a:d4:d8:01:93:56:94:ec:dd:30:89:e3:
                    ef:e7:c7:15:82:5f:c7:20:33:12:ae:92:28:48:13:
                    ee:15:9d:31:35:63:19:81:c8:8f:1d:28:ec:cd:d4:
                    07:6a:bf:d3:63:54:eb:f6:c0:d3:a2:00:ae:9d:41:
                    cd:3e:af:01:2f:f4:51:ef:e4:d9:06:0e:83:a9:02:
                    c9:93:da:68:6c:29:71:d2:bb:63:dd:5b:6a:8d:9c:
                    90:59:fb:b8:4b:9b:86:2b:17:1c:27:a5:2f:92:d8:
                    6d:96:93:5a:1d:1f:b4:ab:57:1e:64:ce:00:a0:7f:
                    b7:4a:e0:9d:b6:0d:79:c8:e0:59:38:ff:1c:f2:eb:
                    dc:d0:e5:4f:f8:f4:6c:69:6e:9d:29:58:85:14:11:
                    ca:f7:c1:26:30:03:2f:9a:b7:88:7d:de:32:8b:d9:
                    72:3e:43:e5:87:08:35:a9:c1:96:58:45:8d:d6:f0:
                    ee:95:a9:5b:b2:f4:10:38:b8:15:bb:77:ad:87:fd:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E7:F7:D2:5F:0D:8C:18:41:23:AD:13:87:EC:67:43:16:FC:A4:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.1.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:30:0b:65:89:ff:bb:20:ee:2a:c0:e8:87:27:65:8f:b1:
         73:5f:43:6a:c5:15:16:f1:39:44:9d:1a:a6:33:98:80:26:b7:
         b5:f6:87:90:48:5d:60:fa:17:3f:57:52:56:11:be:76:c5:ce:
         ea:7a:c6:6a:7d:49:e9:6c:5d:12:ff:db:c2:d3:da:0f:fd:9e:
         fe:6e:08:6c:2c:f2:39:a0:63:a0:3e:fa:71:32:d3:a2:70:86:
         19:26:d8:81:82:1f:70:b8:30:3d:c5:5a:e7:7b:76:11:a0:87:
         01:de:47:23:fc:36:f2:18:f4:bb:19:0f:c9:6c:d0:81:34:25:
         b3:8d:f1:04:1c:e0:1a:70:15:38:19:73:69:86:fe:cf:e3:59:
         0a:a7:a4:2c:92:40:79:45:b8:c4:41:98:3f:ff:ff:a9:6c:16:
         25:80:5b:08:d1:92:c9:06:ec:bf:59:dd:24:ce:ab:2a:46:c0:
         5b:92:f7:bd:28:05:a6:d2:cb:f4:98:d4:0a:cf:25:e1:4b:68:
         24:0c:db:9d:1c:e7:94:97:65:5d:ea:1c:83:9c:7a:9e:59:ca:
         4a:c0:64:a0:54:bb:e0:99:80:bf:9d:d0:67:44:7f:3b:89:d9:
         04:fc:49:9f:69:59:82:83:b5:a6:88:a1:a9:88:67:bb:8f:63:
         74:cf:e5:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQlj0h+t8q6EnrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
MjY4MjI2ZGQtMWExMC00OGU2LTllZGMtMmZmOWJjYWE4OWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9SK5vX68LSD1N0DjtZsnSVwtIY5uc3VuJ48
6KhCtGMY1wP+I+jk+6lvOwH7u51aWEGq/RTogfB9XYLsijea1NgBk1aU7N0wiePv
58cVgl/HIDMSrpIoSBPuFZ0xNWMZgciPHSjszdQHar/TY1Tr9sDTogCunUHNPq8B
L/RR7+TZBg6DqQLJk9pobClx0rtj3VtqjZyQWfu4S5uGKxccJ6UvkthtlpNaHR+0
q1ceZM4AoH+3SuCdtg15yOBZOP8c8uvc0OVP+PRsaW6dKViFFBHK98EmMAMvmreI
fd4yi9lyPkPlhwg1qcGWWEWN1vDulalbsvQQOLgVu3eth/381QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOjn99JfDYwYQSOtE4fsZ0MW/KRgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZGU5NzdhODAtYjQyMi0z
ZTgzLWJjNzctMjVhZWMzMTNjNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHb1MAtlif+7IO4qwOiHJ2WPsXNfQ2rFFRbxOUSdGqYzmIAmt7X2h5BI
XWD6Fz9XUlYRvnbFzup6xmp9SelsXRL/28LT2g/9nv5uCGws8jmgY6A++nEy06Jw
hhkm2IGCH3C4MD3FWud7dhGghwHeRyP8NvIY9LsZD8ls0IE0JbON8QQc4BpwFTgZ
c2mG/s/jWQqnpCySQHlFuMRBmD///6lsFiWAWwjRkskG7L9Z3STOqypGwFuS970o
BabSy/SY1ArPJeFLaCQM250c55SXZV3qHIOcep5ZykrAZKBUu+CZgL+d0GdEfzuJ
2QT8SZ9pWYKDtaaIoamIZ7uPY3TP5as=
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:06:25 2026 by rpki-client