Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa
File:                     29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa (raw, json)
Hash identifier:          m6syjlFtR9YTbyJogTft3tLZOeBQBsRxlYu5Po4TH24=
Subject key identifier:   9F:E0:8E:81:0D:4C:B0:BD:0E:15:54:7F:A8:18:43:17:33:11:63:C5
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F4328584D60E509C3238EB0F0EF74D0A0
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     611
IP address blocks:        198.164.104.0/24 maxlen: 24
                          198.164.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:09:c3:23:8e:b0:f0:ef:74:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=d4360a98-8e7f-48af-b3d3-fa7b70356f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:5b:aa:10:7d:65:d4:74:a4:4e:70:41:b5:
                    b7:b6:f5:ca:51:2d:69:bd:bc:78:73:5e:27:84:7b:
                    2e:3f:8e:43:37:ca:07:d1:6c:c5:73:c2:45:f9:8c:
                    12:09:32:94:cd:58:88:0c:af:7c:84:01:26:4c:ab:
                    4d:e7:8a:2b:2c:41:36:e5:d2:03:c7:87:17:b0:50:
                    93:0b:9e:a3:bc:40:f2:e4:f5:6e:c9:13:ba:a2:16:
                    f1:c0:3b:34:f2:af:7a:23:09:cd:07:ac:e2:e3:61:
                    5b:70:b6:02:fa:70:b3:73:b1:2e:96:16:5a:fa:78:
                    f5:bf:5b:72:fd:3a:8e:54:3c:9f:2e:33:1c:ae:2b:
                    77:ba:6c:60:f6:d6:e9:d1:88:14:f7:bc:c1:79:9e:
                    da:22:d3:b6:6f:51:8a:fe:d3:60:f4:20:c9:bd:d8:
                    1e:1f:ff:63:30:3a:59:b8:d9:e3:dd:e1:3e:9e:44:
                    ec:39:f5:da:33:3d:05:e6:cf:59:a5:47:26:6e:0c:
                    fc:cb:c5:ff:80:e4:69:d6:85:69:79:51:04:e6:5d:
                    1e:5e:d7:af:94:b9:c6:40:84:fc:4f:f8:9f:92:28:
                    bd:91:22:a8:43:43:47:c8:c0:8a:c4:a2:4e:dd:7c:
                    97:34:f2:7c:a0:d9:5f:28:7c:58:f6:98:37:b3:8c:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E0:8E:81:0D:4C:B0:BD:0E:15:54:7F:A8:18:43:17:33:11:63:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:2a:c0:9e:6b:3a:65:7f:08:4e:e1:37:91:27:b6:d0:e5:
         f8:56:46:39:e6:67:eb:06:cc:13:e8:96:68:b2:ab:23:f2:c3:
         e2:c9:e6:f5:41:98:ee:2e:89:10:9d:88:1e:9d:ec:90:8c:dd:
         3d:ae:c6:3f:24:c7:09:d4:35:25:07:4b:c9:f4:6e:46:8a:18:
         32:44:85:e4:b8:7e:c4:ad:22:20:86:e3:0d:ea:15:15:a8:62:
         07:5a:5f:25:13:c5:61:de:38:35:72:0e:89:d3:18:ec:65:9e:
         ad:66:46:23:57:44:ac:2c:cf:f1:3d:16:88:2c:cf:62:12:dd:
         23:c2:62:9a:94:e9:ca:6d:26:4d:46:ef:66:6d:48:0c:62:76:
         e0:64:54:d8:95:d2:b2:84:24:8e:a2:a6:b6:5e:2a:b5:86:2c:
         82:31:c6:1d:2e:84:80:44:19:38:de:12:62:86:90:f2:76:0e:
         0a:71:55:14:b7:3d:74:f0:86:00:d2:61:a5:e0:35:d8:fb:d7:
         7f:96:b6:65:1a:96:54:41:dd:07:50:bf:4e:ac:88:a5:b4:56:
         9a:17:c0:e6:37:b5:d2:51:fb:52:16:41:09:44:67:f6:a3:22:
         2c:a9:da:38:ed:3a:87:98:67:b1:4c:ce:25:f8:46:15:3f:4f:
         b4:f4:05:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QnDI46w8O900KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2
OTBkMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
ZDQzNjBhOTgtOGU3Zi00OGFmLWIzZDMtZmE3YjcwMzU2ZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK5bqhB9ZdR0pE5wQbW3tvXKUS1pvbx4c14n
hHsuP45DN8oH0WzFc8JF+YwSCTKUzViIDK98hAEmTKtN54orLEE25dIDx4cXsFCT
C56jvEDy5PVuyRO6ohbxwDs08q96IwnNB6zi42FbcLYC+nCzc7EulhZa+nj1v1ty
/TqOVDyfLjMcrit3umxg9tbp0YgU97zBeZ7aItO2b1GK/tNg9CDJvdgeH/9jMDpZ
uNnj3eE+nkTsOfXaMz0F5s9ZpUcmbgz8y8X/gORp1oVpeVEE5l0eXtevlLnGQIT8
T/ifkii9kSKoQ0NHyMCKxKJO3XyXNPJ8oNlfKHxY9pg3s4wRBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/gjoENTLC9DhVUf6gYQxczEWPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2
ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvMjkzMDhkNDYtZjU1ZC0z
NmE0LTg4YjUtY2MyYWZkY2M3Y2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx
NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl
NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm
MmZkZTY5MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxqRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwbKsCeazplfwhO4TeRJ7bQ5fhWRjnmZ+sGzBPolmiyqyPyw+LJ5vVB
mO4uiRCdiB6d7JCM3T2uxj8kxwnUNSUHS8n0bkaKGDJEheS4fsStIiCG4w3qFRWo
YgdaXyUTxWHeODVyDonTGOxlnq1mRiNXRKwsz/E9Fogsz2IS3SPCYpqU6cptJk1G
72ZtSAxiduBkVNiV0rKEJI6iprZeKrWGLIIxxh0uhIBEGTjeEmKGkPJ2DgpxVRS3
PXTwhgDSYaXgNdj713+WtmUallRB3QdQv06siKW0VpoXwOY3tdJR+1IWQQlEZ/aj
Iiyp2jjtOoeYZ7FMziX4RhU/T7T0BUw=
-----END CERTIFICATE-----
Generated at Wed Apr 15 11:37:22 2026 by rpki-client