Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa
File:                     2ab65280-fd1c-322e-bb70-8afda5598e79.roa (raw, json)
Hash identifier:          N6NzIksyiqB6n0hFd2xQDu/mLClNjx6AVFBTno8cPUE=
Subject key identifier:   EF:79:99:E0:D9:C7:4B:1A:21:D3:0B:88:02:2A:D9:43:E2:26:BE:FE
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584D895FEDE53299C6CF38E24300
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa
Signing time:             Fri 17 Apr 2026 13:00:31 +0000
ROA not before:           Fri 17 Apr 2026 13:00:31 +0000
ROA not after:            Thu 16 Jul 2026 13:00:31 +0000
asID:                     402139
IP address blocks:        172.99.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:5f:ed:e5:32:99:c6:cf:38:e2:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Apr 17 13:00:31 2026 GMT
            Not After : Jul 16 13:00:31 2026 GMT
        Subject: CN=fad9efa6-bca8-422e-963a-0ffa1022e93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:d3:59:82:17:08:ef:bb:e9:7d:92:e9:7b:
                    03:3b:2a:59:f7:0a:97:52:7b:6d:09:82:e8:a3:a3:
                    ce:6c:91:9c:63:7a:fb:17:39:ec:a3:a0:f0:8e:7e:
                    8a:c1:93:6c:ed:48:ca:35:1d:9c:32:32:0b:73:b9:
                    1e:ec:b1:e5:3d:3e:f6:85:ae:96:9f:bb:a5:88:24:
                    44:c6:74:78:7c:b9:f0:bd:9d:ec:1c:e6:85:50:87:
                    27:ff:ff:72:33:9e:53:48:a8:59:ed:86:d1:db:e5:
                    ed:e2:4f:ab:24:c4:6c:7a:16:c2:59:40:71:eb:dc:
                    13:e0:79:f8:31:7d:d0:af:1b:1b:63:68:12:12:b1:
                    e5:6b:fb:a7:5e:da:04:2c:7a:e5:d4:10:5a:db:22:
                    b5:fe:37:e0:e7:54:61:96:63:d8:39:35:b5:ff:7b:
                    7a:e1:28:00:7c:a7:82:a1:0d:dd:f9:32:dc:08:57:
                    b7:23:f3:2d:11:eb:3e:b4:66:e3:fb:2b:c5:9b:6f:
                    1e:ea:02:a0:1e:4d:1a:f6:53:3d:5b:4f:16:9e:a6:
                    79:78:86:79:0e:cb:13:5b:23:0c:66:36:f9:42:22:
                    c2:cf:0e:e0:5b:e2:41:3c:f2:de:52:f7:76:75:89:
                    ac:5d:2e:e6:17:20:20:ed:75:60:54:5d:66:a4:a3:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:79:99:E0:D9:C7:4B:1A:21:D3:0B:88:02:2A:D9:43:E2:26:BE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:d4:c2:20:7a:01:e3:5d:89:0b:84:2d:48:a2:70:2b:62:
         12:1f:d0:85:50:c8:26:fb:46:20:ab:7a:e8:77:ac:ae:a8:7d:
         ed:c6:9e:60:bb:6a:70:1c:60:92:23:12:cf:fc:61:73:d9:8d:
         0a:63:55:8b:3e:ee:8b:a2:d3:b6:6f:92:2c:d0:a1:d6:8c:35:
         57:ea:1a:6e:9d:7d:91:c0:51:d1:26:0f:b7:59:07:0e:0a:29:
         d1:f1:7d:65:3d:eb:bb:41:e0:15:76:63:fc:5e:cf:49:e4:fd:
         d2:72:90:d2:10:ce:8f:75:74:ae:a6:96:30:06:9f:3f:29:6b:
         16:3f:29:d7:7d:42:da:00:11:45:bf:c0:a8:e7:9b:cb:dc:11:
         11:ec:09:e4:16:8f:d6:c8:de:12:6d:d5:94:bc:c7:5a:13:34:
         f9:e4:bf:b6:33:db:54:69:5a:6e:6d:26:28:38:78:e0:a7:19:
         7b:ab:1f:75:ab:e8:4b:0e:e6:62:48:51:e3:02:3b:8f:da:cb:
         70:21:4f:84:87:12:27:ef:1b:49:08:fd:f5:45:e3:11:11:92:
         3e:2c:75:82:75:77:03:fe:aa:bd:9d:cc:25:88:37:6e:10:dd:
         67:f5:06:be:7a:58:bb:7a:37:37:01:6a:eb:a7:5d:b6:2a:c1:
         4a:db:c0:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2JX+3lMpnGzzjiQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3
ZTRmMB4XDTI2MDQxNzEzMDAzMVoXDTI2MDcxNjEzMDAzMVowLzEtMCsGA1UEAxMk
ZmFkOWVmYTYtYmNhOC00MjJlLTk2M2EtMGZmYTEwMjJlOTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16rTWYIXCO+76X2S6XsDOypZ9wqXUnttCYLo
o6PObJGcY3r7Fznso6Dwjn6KwZNs7UjKNR2cMjILc7ke7LHlPT72ha6Wn7uliCRE
xnR4fLnwvZ3sHOaFUIcn//9yM55TSKhZ7YbR2+Xt4k+rJMRsehbCWUBx69wT4Hn4
MX3QrxsbY2gSErHla/unXtoELHrl1BBa2yK1/jfg51RhlmPYOTW1/3t64SgAfKeC
oQ3d+TLcCFe3I/MtEes+tGbj+yvFm28e6gKgHk0a9lM9W08WnqZ5eIZ5DssTWyMM
Zjb5QiLCzw7gW+JBPPLeUvd2dYmsXS7mFyAg7XVgVF1mpKPJIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO95meDZx0saIdMLiAIq2UPiJr7+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2
ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMmFiNjUyODAtZmQxYy0z
MjJlLWJiNzAtOGFmZGE1NTk4ZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz
YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz
N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz
ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1+1MIgegHjXYkLhC1IonArYhIf0IVQyCb7RiCreuh3rK6ofe3GnmC7
anAcYJIjEs/8YXPZjQpjVYs+7oui07ZvkizQodaMNVfqGm6dfZHAUdEmD7dZBw4K
KdHxfWU967tB4BV2Y/xez0nk/dJykNIQzo91dK6mljAGnz8paxY/Kdd9QtoAEUW/
wKjnm8vcERHsCeQWj9bI3hJt1ZS8x1oTNPnkv7Yz21RpWm5tJig4eOCnGXurH3Wr
6EsO5mJIUeMCO4/ay3AhT4SHEifvG0kI/fVF4xERkj4sdYJ1dwP+qr2dzCWIN24Q
3Wf1Br56WLt6NzcBauunXbYqwUrbwDg=
-----END CERTIFICATE-----
Generated at Sun May 10 15:51:40 2026 by rpki-client