Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/f527b007-151b-3aba-b2b3-7645318ebf07.roa
File:                     f527b007-151b-3aba-b2b3-7645318ebf07.roa (raw, json)
Hash identifier:          TLvfRdCrKGKsEsS/uttjomvc8KZgLFb0IKF01WIhODo=
Subject key identifier:   9C:FB:14:8C:9F:6D:14:3F:D9:4A:14:93:3F:4B:10:71:FA:6F:A3:ED
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584EA797574AB4D319E634CAF300
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/f527b007-151b-3aba-b2b3-7645318ebf07.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        204.220.80.0/24 maxlen: 24
                          204.220.81.0/24 maxlen: 24
                          204.220.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:57:4a:b4:d3:19:e6:34:ca:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8295a7bf-b31e-4ae5-bb39-a1de4b9168ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:09:01:4d:3a:81:e4:09:70:e8:af:d7:ba:
                    68:94:f8:db:eb:38:76:0a:a7:e1:eb:b9:f5:28:ec:
                    47:35:ab:6c:b5:97:1a:66:6f:47:d6:15:90:a0:66:
                    4a:8a:89:22:94:6e:59:7e:89:39:0e:64:37:eb:88:
                    3b:b6:41:fb:98:bb:99:9e:47:14:19:5a:af:df:99:
                    8e:79:7f:9d:b9:c6:46:42:c5:9f:d8:ad:04:17:6f:
                    f0:95:04:68:26:fc:53:41:ce:43:73:c7:44:ee:e9:
                    0c:f3:4a:79:54:d5:0a:bc:9a:00:39:d4:15:76:12:
                    a6:94:3c:07:d3:70:6d:68:92:e6:9d:94:e9:81:98:
                    c0:f8:cf:dd:d3:83:14:22:f1:a8:8d:73:e5:3d:89:
                    9f:1c:29:87:2f:8d:2c:6c:fa:25:2a:e3:31:92:79:
                    33:a3:b4:14:e6:ca:b1:c6:3d:e6:7e:6f:92:26:5e:
                    59:3f:a3:67:32:b2:14:27:6c:48:fd:34:ca:01:86:
                    42:a7:88:2f:6d:bd:6e:ec:23:44:0d:9c:d1:ae:c2:
                    af:7d:73:d0:cf:b8:87:2f:5c:fb:a9:ae:6b:ea:6c:
                    1a:7b:c1:44:87:ea:b6:54:3d:63:35:95:9a:3d:2b:
                    b2:41:79:64:ed:82:53:f3:19:f5:93:9c:d2:d1:91:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FB:14:8C:9F:6D:14:3F:D9:4A:14:93:3F:4B:10:71:FA:6F:A3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/f527b007-151b-3aba-b2b3-7645318ebf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.220.80.0/23
                  204.220.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6d:49:b5:6c:8c:b2:05:ea:af:26:36:04:03:12:b6:e3:ca:
         fc:be:5e:7e:26:23:0e:54:ca:05:d8:55:31:c3:de:04:e6:89:
         8f:99:a2:50:14:10:32:ce:ae:43:d7:2b:eb:a4:ff:06:d9:54:
         46:5c:5f:70:78:e3:7e:f9:79:4c:53:b9:a0:5d:c8:8a:ee:fb:
         14:2f:7e:02:bb:e8:d3:4c:74:85:4b:fb:d3:fe:19:73:92:0e:
         f1:63:9b:f8:64:cb:7c:3c:1c:6e:c7:6f:a0:d9:1d:16:9e:b6:
         27:0d:15:5d:af:52:d2:09:12:5d:dd:77:17:d0:ba:30:9f:d5:
         9d:59:ab:ec:8d:1f:22:3d:09:4f:7b:61:da:c6:3d:1f:ed:8a:
         bf:0f:32:bd:71:f2:1a:8a:8d:e5:07:81:52:e0:2b:4c:84:8a:
         34:0a:ca:ab:38:f6:21:29:96:50:ff:fa:dc:94:c9:80:c7:9a:
         1a:53:5d:f6:3c:7d:25:fa:78:57:0e:fc:8a:e2:ca:02:a2:c0:
         00:02:28:8f:58:9c:96:5e:a4:a8:41:09:9d:64:b3:5c:dc:82:
         da:d1:a0:40:a7:74:d5:79:cf:aa:a1:aa:e7:70:c7:65:30:10:
         67:d9:9b:46:52:75:20:e0:86:5d:ba:34:19:44:1d:d7:a1:27:
         25:d5:41:cb
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nl1dKtNMZ5jTK8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk
ZTNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODI5NWE3YmYtYjMxZS00YWU1LWJiMzktYTFkZTRiOTE2OGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj0JAU06geQJcOiv17polPjb6zh2Cqfh67n1
KOxHNatstZcaZm9H1hWQoGZKiokilG5Zfok5DmQ364g7tkH7mLuZnkcUGVqv35mO
eX+ducZGQsWf2K0EF2/wlQRoJvxTQc5Dc8dE7ukM80p5VNUKvJoAOdQVdhKmlDwH
03BtaJLmnZTpgZjA+M/d04MUIvGojXPlPYmfHCmHL40sbPolKuMxknkzo7QU5sqx
xj3mfm+SJl5ZP6NnMrIUJ2xI/TTKAYZCp4gvbb1u7CNEDZzRrsKvfXPQz7iHL1z7
qa5r6mwae8FEh+q2VD1jNZWaPSuyQXlk7YJT8xn1k5zS0ZGwpQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJz7FIyfbRQ/2UoUkz9LEHH6b6PtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0
MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvZjUyN2IwMDctMTUxYi0z
YWJhLWIyYjMtNzY0NTMxOGViZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm
YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl
ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz
NGYxZWRlM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzNxQAwQA
zNy+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACZtSbVsjLIF6q8mNgQDErbjyvy+Xn4mIw5UygXYVTHD3gTm
iY+ZolAUEDLOrkPXK+uk/wbZVEZcX3B44375eUxTuaBdyIru+xQvfgK76NNMdIVL
+9P+GXOSDvFjm/hky3w8HG7Hb6DZHRaeticNFV2vUtIJEl3ddxfQujCf1Z1Zq+yN
HyI9CU97YdrGPR/tir8PMr1x8hqKjeUHgVLgK0yEijQKyqs49iEpllD/+tyUyYDH
mhpTXfY8fSX6eFcO/IriygKiwAACKI9YnJZepKhBCZ1ks1zcgtrRoECndNV5z6qh
qudwx2UwEGfZm0ZSdSDghl26NBlEHdehJyXVQcs=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:32 2026 by rpki-client