Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa
File:                     49eed83d-dd99-34f1-86ae-41393812eaf5.roa (raw, json)
Hash identifier:          dSDI5LDtVW9YFowNgKpZk+LA1ktmrUmfe0nwTzAXZJ8=
Subject key identifier:   67:3C:C9:73:E7:73:71:31:1A:9D:43:02:5C:F6:79:6E:7B:F7:EA:11
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA79155934FF01050AFD89E00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11233
IP address blocks:        209.237.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:55:93:4f:f0:10:50:af:d8:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4452ebac-8341-4840-a4a1-6c73bd16b19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:10:85:2a:77:e4:b4:90:2d:27:a0:f0:1c:
                    b6:63:de:43:0d:aa:d6:fc:10:8f:2c:ea:fe:06:95:
                    97:37:99:60:d6:33:c3:a6:26:e8:95:00:1a:f9:38:
                    44:a4:c2:91:65:6b:f6:f7:ae:28:cb:dd:6e:65:bb:
                    4e:e2:40:68:95:b4:d6:a3:b7:31:04:be:0a:99:42:
                    fb:21:01:6b:9e:5d:56:e9:06:df:40:45:5b:49:79:
                    4c:e5:f8:1c:36:ab:b2:34:0a:45:db:f8:4d:91:f9:
                    90:6a:a1:33:2e:98:6b:ea:b0:91:c1:09:97:27:f1:
                    f6:1d:8c:16:c2:1d:c3:0e:6a:30:f2:e9:ca:28:10:
                    b4:1d:86:0c:93:57:32:e9:58:45:ff:9b:d4:01:a6:
                    4a:e7:66:1a:39:54:da:aa:f5:1e:bb:81:9f:e3:d7:
                    db:19:1b:f8:9d:8c:dc:44:39:a7:48:e7:cf:d5:18:
                    4c:46:b0:93:3a:a6:a2:a2:79:01:b7:5a:fc:2a:77:
                    01:ec:79:b0:43:06:1c:82:67:57:8b:01:cb:15:61:
                    1d:6a:dd:9d:94:76:a6:d4:47:17:b9:33:d2:f8:6d:
                    d3:ae:d7:71:c4:86:be:aa:db:bc:86:8b:b0:aa:7d:
                    44:f5:66:52:fc:7d:b9:bc:f1:54:85:fc:67:55:63:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3C:C9:73:E7:73:71:31:1A:9D:43:02:5C:F6:79:6E:7B:F7:EA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b5:95:80:1a:db:b1:9f:c3:2e:9c:db:ce:93:96:30:8f:dc:
         7e:0e:82:90:fa:b2:33:ba:96:12:b6:d8:11:8d:1c:2a:31:a6:
         3d:17:7b:8f:50:18:e4:cc:00:4f:b7:f9:d3:6b:61:5d:94:c4:
         ca:aa:18:0b:a1:11:16:b1:56:55:93:50:2f:7d:31:89:5c:d3:
         76:65:6f:b0:b4:c1:7a:28:95:ba:b9:23:28:ac:fc:38:09:9b:
         f5:8e:0f:d3:9e:eb:8f:34:85:0a:30:41:52:71:b3:32:dc:80:
         1c:f9:9a:64:47:2c:c2:a4:d7:c5:42:5d:c0:da:b6:bc:35:28:
         b6:dc:50:18:6e:02:24:1d:e2:f7:5e:14:2e:46:0f:5c:3d:3d:
         e9:2c:3c:f2:9a:e4:be:e9:bd:da:1c:39:63:be:89:59:9d:73:
         e0:33:69:4c:19:44:5b:ad:1c:0d:1f:5b:83:b5:1c:2f:2d:12:
         1d:73:55:8a:ee:af:61:04:3a:9d:97:db:e9:33:a5:3e:84:f8:
         67:d7:b3:42:da:ec:2f:4c:16:46:e0:84:81:6e:8b:71:b1:de:
         d1:52:c1:52:a7:85:36:3e:6c:d9:43:88:a3:52:35:a1:83:f2:
         74:69:c7:57:97:90:91:e7:f8:41:f5:eb:35:ab:fb:e9:74:58:
         0d:e3:3a:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkVWTT/AQUK/YngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDQ1MmViYWMtODM0MS00ODQwLWE0YTEtNmM3M2JkMTZiMTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtwQhSp35LSQLSeg8By2Y95DDarW/BCPLOr+
BpWXN5lg1jPDpibolQAa+ThEpMKRZWv2964oy91uZbtO4kBolbTWo7cxBL4KmUL7
IQFrnl1W6QbfQEVbSXlM5fgcNquyNApF2/hNkfmQaqEzLphr6rCRwQmXJ/H2HYwW
wh3DDmow8unKKBC0HYYMk1cy6VhF/5vUAaZK52YaOVTaqvUeu4Gf49fbGRv4nYzc
RDmnSOfP1RhMRrCTOqaionkBt1r8KncB7HmwQwYcgmdXiwHLFWEdat2dlHam1EcX
uTPS+G3TrtdxxIa+qtu8houwqn1E9WZS/H25vPFUhfxnVWOGTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGc8yXPnc3ExGp1DAlz2eW579+oRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDllZWQ4M2QtZGQ5OS0z
NGYxLTg2YWUtNDEzOTM4MTJlYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFe1lYAa27Gfwy6c286TljCP3H4OgpD6sjO6lhK22BGNHCoxpj0Xe49Q
GOTMAE+3+dNrYV2UxMqqGAuhERaxVlWTUC99MYlc03Zlb7C0wXoolbq5Iyis/DgJ
m/WOD9Oe6480hQowQVJxszLcgBz5mmRHLMKk18VCXcDatrw1KLbcUBhuAiQd4vde
FC5GD1w9PeksPPKa5L7pvdocOWO+iVmdc+AzaUwZRFutHA0fW4O1HC8tEh1zVYru
r2EEOp2X2+kzpT6E+GfXs0La7C9MFkbghIFui3Gx3tFSwVKnhTY+bNlDiKNSNaGD
8nRpx1eXkJHn+EH16zWr++l0WA3jOhI=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:24:10 2026 by rpki-client