Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/fff8fdef-c126-33ca-957f-f8698bc90aa9.roa
File:                     fff8fdef-c126-33ca-957f-f8698bc90aa9.roa (raw, json)
Hash identifier:          8ETEF6AkGuhCVp03LxzqLe0hXUnV0fhe+QtgA1OzbPA=
Subject key identifier:   2B:DF:CE:A8:02:1A:40:CE:78:C2:73:93:75:55:1B:22:0E:80:1D:88
Certificate issuer:       /CN=3222ae3e-3a47-4ecc-ac38-ef4126e91558
Certificate serial:       010D0C9F4328584F5338DCA0CF1C563EEE6C1B80
Authority key identifier: 25:1F:44:E9:45:9C:13:7B:7B:8A:B2:2F:A5:BA:C7:01:32:1E:36:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/fff8fdef-c126-33ca-957f-f8698bc90aa9.roa
Signing time:             Mon 28 Sep 2026 13:02:07 +0000
ROA not before:           Mon 28 Sep 2026 13:02:07 +0000
ROA not after:            Sun 27 Dec 2026 14:02:07 +0000
asID:                     13688
IP address blocks:        137.20.0.0/16 maxlen: 16
                          162.22.240.0/24 maxlen: 24
                          162.22.248.0/22 maxlen: 22
                          162.22.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/3222ae3e-3a47-4ecc-ac38-ef4126e91558.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/3222ae3e-3a47-4ecc-ac38-ef4126e91558.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:38:dc:a0:cf:1c:56:3e:ee:6c:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3222ae3e-3a47-4ecc-ac38-ef4126e91558
        Validity
            Not Before: Sep 28 13:02:07 2026 GMT
            Not After : Dec 27 14:02:07 2026 GMT
        Subject: CN=18c55520-6c59-46af-9af5-906ab6ba978a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:16:f0:d7:75:b4:f9:f5:7a:84:1b:d7:ce:
                    39:1b:ef:cf:32:d6:1e:77:79:e6:7e:e0:44:24:b5:
                    df:4c:8e:30:6b:ab:3a:c7:4e:19:26:5f:d3:dd:31:
                    8e:a8:1a:a0:a7:aa:f5:3b:5a:5b:de:f4:49:0d:5b:
                    29:7e:00:43:71:13:0f:f2:a8:69:43:0f:fa:f5:a5:
                    ca:8b:c9:3c:36:11:79:29:3d:43:d1:56:84:e5:f9:
                    75:c8:04:8f:c6:fa:bb:86:12:26:ca:ee:e0:31:4b:
                    36:36:de:d0:04:3c:2a:da:fe:0d:14:8b:28:fd:3e:
                    3e:51:54:6f:cb:21:be:e9:13:e8:53:ba:01:97:34:
                    11:45:22:b1:f5:7c:df:e9:79:c0:9d:ba:47:8c:8b:
                    b6:b4:95:fa:d4:e8:43:1a:c8:f9:90:62:93:4d:86:
                    a5:c0:d2:78:a4:8a:3b:d8:b8:a2:56:e9:dc:2e:f4:
                    fd:39:8e:64:3f:d0:bf:db:2b:00:6b:24:01:55:83:
                    10:84:af:ea:0f:6e:e6:72:21:00:63:ed:5b:fd:1d:
                    23:eb:c6:6b:3c:c1:00:d6:e3:9f:bb:90:a9:db:ed:
                    14:70:3f:84:db:31:29:f6:a6:ee:c3:3d:b7:a0:03:
                    b3:4b:e9:2f:10:9f:30:6e:2b:6f:1a:04:31:6f:df:
                    3a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:CE:A8:02:1A:40:CE:78:C2:73:93:75:55:1B:22:0E:80:1D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/fff8fdef-c126-33ca-957f-f8698bc90aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558/3222ae3e-3a47-4ecc-ac38-ef4126e91558.crl

            X509v3 Authority Key Identifier:
                keyid:25:1F:44:E9:45:9C:13:7B:7B:8A:B2:2F:A5:BA:C7:01:32:1E:36:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3222ae3e-3a47-4ecc-ac38-ef4126e91558.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.20.0.0/16
                  162.22.240.0/24
                  162.22.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:af:2a:c5:0a:e2:e5:41:e9:ec:a7:3b:7e:59:e1:c3:2b:88:
         22:f5:45:41:d9:ad:03:7b:5d:4c:a4:bd:2c:f5:f7:c8:9b:17:
         92:93:cd:8e:ff:36:14:1b:00:d3:20:77:3f:44:ce:fd:2a:ab:
         ee:c5:6f:b5:67:fd:93:6d:2f:cf:63:1a:96:cd:c4:28:4b:82:
         27:3e:d1:8b:3f:ca:11:84:dc:0d:12:65:c1:cd:02:a9:0f:6a:
         7d:70:e6:f1:6c:6a:01:7d:fe:03:12:cf:e1:c2:01:ba:5f:17:
         c4:a7:0a:6d:3c:cf:f0:55:96:0c:94:da:f3:17:87:e5:04:02:
         3d:6d:3e:5c:c6:45:3d:61:52:54:31:6e:d9:83:b7:3b:e2:58:
         2e:6b:20:bd:ba:6d:b6:89:85:50:a9:99:74:0d:41:ca:f1:26:
         25:ed:38:e1:e0:e5:67:7d:d5:fd:7a:4c:55:95:7d:bd:a1:f0:
         1c:a3:f8:66:95:63:62:04:3a:63:67:98:68:f3:98:98:9c:7e:
         02:01:42:bd:7d:3b:33:7a:db:de:e9:3c:13:dc:9c:a7:a8:a3:
         8f:3c:49:d7:2e:5a:f5:4e:fe:3e:59:45:8c:9d:cf:a5:f6:71:
         93:de:51:19:33:9b:25:b0:8f:7d:35:d9:58:60:21:63:b0:d6:
         bd:cd:b4:bc
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE9TONygzxxWPu5sG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyMmFlM2UtM2E0Ny00ZWNjLWFjMzgtZWY0MTI2ZTkx
NTU4MB4XDTI2MDkyODEzMDIwN1oXDTI2MTIyNzE0MDIwN1owLzEtMCsGA1UEAxMk
MThjNTU1MjAtNmM1OS00NmFmLTlhZjUtOTA2YWI2YmE5NzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3EW8Nd1tPn1eoQb1845G+/PMtYed3nmfuBE
JLXfTI4wa6s6x04ZJl/T3TGOqBqgp6r1O1pb3vRJDVspfgBDcRMP8qhpQw/69aXK
i8k8NhF5KT1D0VaE5fl1yASPxvq7hhImyu7gMUs2Nt7QBDwq2v4NFIso/T4+UVRv
yyG+6RPoU7oBlzQRRSKx9Xzf6XnAnbpHjIu2tJX61OhDGsj5kGKTTYalwNJ4pIo7
2LiiVuncLvT9OY5kP9C/2ysAayQBVYMQhK/qD27mciEAY+1b/R0j68ZrPMEA1uOf
u5Cp2+0UcD+E2zEp9qbuwz23oAOzS+kvEJ8wbitvGgQxb986NwIDAQABo4IDYDCC
A1wwHQYDVR0OBBYEFCvfzqgCGkDOeMJzk3VVGyIOgB2IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zMjIy
YWUzZS0zYTQ3LTRlY2MtYWMzOC1lZjQxMjZlOTE1NTgvZmZmOGZkZWYtYzEyNi0z
M2NhLTk1N2YtZjg2OThiYzkwYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzIyMmFlM2UtM2E0Ny00ZWNjLWFj
MzgtZWY0MTI2ZTkxNTU4LzMyMjJhZTNlLTNhNDctNGVjYy1hYzM4LWVmNDEyNmU5
MTU1OC5jcmwwHwYDVR0jBBgwFoAUJR9E6UWcE3t7irIvpbrHATIeNvAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi8zMjIyYWUzZS0zYTQ3LTRlY2MtYWMzOC1lZjQx
MjZlOTE1NTguY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAiRQDBACi
FvADBAOiFvgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAV68qxQri5UHp7Kc7flnhwyuIIvVFQdmtA3tdTKS9
LPX3yJsXkpPNjv82FBsA0yB3P0TO/Sqr7sVvtWf9k20vz2Mals3EKEuCJz7Riz/K
EYTcDRJlwc0CqQ9qfXDm8WxqAX3+AxLP4cIBul8XxKcKbTzP8FWWDJTa8xeH5QQC
PW0+XMZFPWFSVDFu2YO3O+JYLmsgvbpttomFUKmZdA1ByvEmJe044eDlZ33V/XpM
VZV9vaHwHKP4ZpVjYgQ6Y2eYaPOYmJx+AgFCvX07M3rb3uk8E9ycp6ijjzxJ1y5a
9U7+PllFjJ3PpfZxk95RGTObJbCPfTXZWGAhY7DWvc20vA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:41:10 2026 by rpki-client