Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f4d36653-6b95-3e33-8177-26de811d2a2c.roa
File:                     f4d36653-6b95-3e33-8177-26de811d2a2c.roa (raw, json)
Hash identifier:          Gc2F8oiqTo/gjwMgql2DF8FgRKc2cX5fl7OjgNUxFxM=
Subject key identifier:   82:D7:E5:03:2C:CC:F0:C1:F7:C9:76:97:BC:1F:E8:4E:97:AC:F7:ED
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DE41B5BF80364668011D11980
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f4d36653-6b95-3e33-8177-26de811d2a2c.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        171.161.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:5b:f8:03:64:66:80:11:d1:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=332ca00d-61b5-45d0-b557-e6ab195d0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:17:04:19:7d:31:83:a5:42:36:d0:0b:18:28:
                    99:c3:1c:af:bf:c0:7e:e7:4a:4b:0c:94:78:9b:4b:
                    f6:e2:8d:c7:84:76:45:ed:84:a1:02:3b:12:96:53:
                    79:6c:c2:2f:60:c1:71:5b:f5:62:de:d3:61:8a:4c:
                    5b:d4:d3:bc:38:fc:05:82:d2:9b:02:0e:9d:02:41:
                    bb:1f:a9:cb:5b:38:5d:30:af:f1:8b:b8:83:83:89:
                    f7:6d:41:d3:0c:c9:16:0d:56:04:cd:52:7c:c3:82:
                    77:37:19:d3:9c:ec:47:ae:8a:7e:3b:46:42:ef:02:
                    07:c9:c7:05:8c:cf:c2:0c:3e:6a:5d:3e:21:cc:25:
                    2f:74:f6:a0:c2:77:8c:ed:3f:f2:d0:90:ce:3c:ca:
                    d5:69:4e:da:8f:84:5a:3b:03:44:eb:74:38:7c:93:
                    75:78:66:1d:24:89:43:56:44:44:a9:3b:f3:11:4d:
                    d4:5a:bc:fe:cd:f9:1f:89:99:09:8a:64:6f:81:e3:
                    e8:28:ec:b5:57:66:92:41:02:37:94:48:39:76:4f:
                    56:ae:69:d3:b1:23:a7:58:c2:73:53:fb:b8:89:99:
                    7d:7b:07:55:52:c4:68:53:23:b3:b9:c8:75:78:db:
                    7e:20:1d:a2:a9:b6:73:ce:40:8e:52:66:09:43:4a:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D7:E5:03:2C:CC:F0:C1:F7:C9:76:97:BC:1F:E8:4E:97:AC:F7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f4d36653-6b95-3e33-8177-26de811d2a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:a4:8c:34:3b:89:f0:1f:28:a4:85:be:49:7b:ff:de:ae:
         af:99:77:fc:eb:2e:5d:32:dd:20:ec:a9:81:c0:67:df:fe:34:
         bc:41:0b:e4:74:90:4d:a6:52:e6:65:72:2c:b0:db:f1:8d:64:
         36:d0:86:66:96:69:11:0a:a2:92:26:85:f4:c3:1c:39:57:87:
         29:94:78:65:c2:b0:2f:1b:88:40:81:d6:cc:67:9e:39:cc:f5:
         a6:ab:90:6e:49:d0:d2:e5:f6:cc:84:f4:3d:06:96:cf:eb:f5:
         83:a7:d3:91:e4:26:14:1b:f4:38:4f:1e:ac:76:c7:2b:b7:76:
         de:e2:0b:a7:4d:ab:a2:99:83:22:1e:50:23:99:3b:58:a4:53:
         77:24:89:9a:9a:c0:cb:4b:4b:ec:13:6c:ce:f9:51:86:17:ff:
         7b:8d:b5:2c:e8:ff:58:dc:99:42:76:27:24:20:2e:6b:28:9a:
         97:2b:16:37:eb:d4:d9:c5:33:9b:a5:64:aa:55:49:e7:23:2a:
         3d:19:e6:85:ce:f6:7f:ad:32:33:e2:9c:85:a4:08:24:b0:8f:
         7c:54:ef:d9:d0:2e:b8:96:e5:73:08:1c:9a:1d:1b:f8:d1:81:
         06:0a:fe:3e:5b:f4:46:2b:2c:08:a9:63:65:68:96:dd:5b:47:
         cc:3f:4a:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG1v4A2RmgBHRGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh
MWEwMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MzMyY2EwMGQtNjFiNS00NWQwLWI1NTctZTZhYjE5NWQwYmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBcEGX0xg6VCNtALGCiZwxyvv8B+50pLDJR4
m0v24o3HhHZF7YShAjsSllN5bMIvYMFxW/Vi3tNhikxb1NO8OPwFgtKbAg6dAkG7
H6nLWzhdMK/xi7iDg4n3bUHTDMkWDVYEzVJ8w4J3NxnTnOxHrop+O0ZC7wIHyccF
jM/CDD5qXT4hzCUvdPagwneM7T/y0JDOPMrVaU7aj4RaOwNE63Q4fJN1eGYdJIlD
VkREqTvzEU3UWrz+zfkfiZkJimRvgePoKOy1V2aSQQI3lEg5dk9WrmnTsSOnWMJz
U/u4iZl9ewdVUsRoUyOzuch1eNt+IB2iqbZzzkCOUmYJQ0pXCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFILX5QMszPDB98l2l7wf6E6XrPftMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5
YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZjRkMzY2NTMtNmI5NS0z
ZTMzLTgxNzctMjZkZTgxMWQyYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm
MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi
YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm
YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6FSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKGSpIw0O4nwHyikhb5Je//erq+Zd/zrLl0y3SDsqYHAZ9/+NLxBC+R0
kE2mUuZlciyw2/GNZDbQhmaWaREKopImhfTDHDlXhymUeGXCsC8biECB1sxnnjnM
9aarkG5J0NLl9syE9D0Gls/r9YOn05HkJhQb9DhPHqx2xyu3dt7iC6dNq6KZgyIe
UCOZO1ikU3ckiZqawMtLS+wTbM75UYYX/3uNtSzo/1jcmUJ2JyQgLmsompcrFjfr
1NnFM5ulZKpVSecjKj0Z5oXO9n+tMjPinIWkCCSwj3xU79nQLriW5XMIHJodG/jR
gQYK/j5b9EYrLAipY2Volt1bR8w/So8=
-----END CERTIFICATE-----
Generated at Thu May 21 18:32:34 2026 by rpki-client