Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa
File:                     27495369-f50d-3ffe-af45-6c407307205a.roa (raw, json)
Hash identifier:          mKZlmp2My9BN2df/n1SfKo6p/rya+bNS0qHElsK+ufE=
Subject key identifier:   EC:82:FE:8A:CE:24:8D:51:A6:11:37:A8:4C:F3:65:8A:8C:9A:D2:40
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584F9E987E9F8F6FFA6980E3E1A0
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     63023
IP address blocks:        68.168.29.0/24 maxlen: 24
                          186.190.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:7e:9f:8f:6f:fa:69:80:e3:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=84e93df3-b34c-4d1b-a816-90798d8d3943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:5a:92:14:70:b0:c1:0c:d3:ec:ef:cc:2e:
                    3d:8a:a9:69:d3:e5:32:ea:ba:72:e8:1b:18:18:4c:
                    26:81:03:5b:4c:2b:88:ca:3e:6f:8c:3e:59:df:50:
                    5f:4b:a5:83:e5:b3:e4:63:30:0e:fd:d8:57:79:84:
                    52:57:2e:e1:05:29:31:15:66:a7:f8:5b:57:56:67:
                    2d:1c:3f:51:5f:49:3b:37:2f:59:b7:ba:fc:3e:92:
                    2f:a5:2e:59:5a:42:6a:c7:d1:a1:43:1f:17:d3:9c:
                    3c:94:95:ac:ac:fc:c1:b9:3c:9e:31:1f:74:20:f2:
                    da:99:d5:53:46:29:b2:63:36:d2:f9:d9:54:81:ea:
                    a9:03:ce:1b:42:08:7c:94:f0:37:38:d9:7e:b4:85:
                    fa:11:2e:42:73:37:ae:3c:ba:51:33:fb:2d:2e:f6:
                    92:5d:74:49:d7:fe:0c:27:85:51:0c:95:dd:da:02:
                    f6:78:83:75:21:81:ea:14:43:33:05:76:7c:e6:b2:
                    37:f5:90:5e:95:f1:4d:d9:dd:0c:40:ba:a0:b7:24:
                    bf:4d:87:08:be:a6:73:e4:c5:69:b7:00:be:eb:75:
                    bf:ef:ec:9e:e5:36:9a:61:93:f1:10:ae:8f:99:d6:
                    1b:32:c5:f9:3c:ce:ab:b8:73:b5:f8:15:1c:09:e3:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:82:FE:8A:CE:24:8D:51:A6:11:37:A8:4C:F3:65:8A:8C:9A:D2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.29.0/24
                  186.190.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:97:2a:20:79:c0:89:4e:9d:2d:c6:86:54:0a:38:89:f1:3d:
         48:92:70:95:f7:3c:09:0b:2a:4d:48:f8:dd:07:33:a7:e9:a0:
         a2:69:67:14:8b:49:da:58:16:a5:c5:99:55:41:a6:21:ee:e3:
         86:81:86:98:f9:bf:11:1e:a4:b2:66:a7:cd:6f:e4:db:8c:34:
         3c:1c:11:04:df:4e:a1:98:c6:15:90:e0:7f:af:0a:0f:74:06:
         0d:c9:af:19:d0:c4:0d:6a:60:9e:50:85:cd:20:49:dc:4b:a4:
         de:13:31:1c:1b:80:20:19:87:9c:f8:ea:6b:8d:75:cd:4b:5b:
         9c:8e:ea:2c:c3:2d:8d:9d:06:5c:82:6d:95:03:91:7d:70:e7:
         19:0e:89:98:34:73:92:87:95:ce:a2:f3:51:c0:0c:89:ff:05:
         d2:ed:9b:a5:53:4c:ee:3f:6a:44:dc:91:0a:ab:70:6d:17:d2:
         52:9a:f1:78:67:8b:a2:cb:8b:a2:cd:ac:ed:c4:f3:23:d1:18:
         e2:d9:83:8c:54:ef:4c:97:0c:e1:9d:01:bf:2b:7a:89:9b:b5:
         16:2e:b8:79:0d:e6:b0:ab:ed:b1:9a:62:bb:c0:81:fc:e2:81:
         28:39:bc:f2:25:e3:ba:14:8e:23:7e:02:67:fd:40:b8:c2:3f:
         14:1b:70:60
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+emH6fj2/6aYDj4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk
ODRlOTNkZjMtYjM0Yy00ZDFiLWE4MTYtOTA3OThkOGQzOTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+dakhRwsMEM0+zvzC49iqlp0+Uy6rpy6BsY
GEwmgQNbTCuIyj5vjD5Z31BfS6WD5bPkYzAO/dhXeYRSVy7hBSkxFWan+FtXVmct
HD9RX0k7Ny9Zt7r8PpIvpS5ZWkJqx9GhQx8X05w8lJWsrPzBuTyeMR90IPLamdVT
RimyYzbS+dlUgeqpA84bQgh8lPA3ONl+tIX6ES5CczeuPLpRM/stLvaSXXRJ1/4M
J4VRDJXd2gL2eIN1IYHqFEMzBXZ85rI39ZBelfFN2d0MQLqgtyS/TYcIvqZz5MVp
twC+63W/7+ye5TaaYZPxEK6PmdYbMsX5PM6ruHO1+BUcCeOfIQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOyC/orOJI1RphE3qEzzZYqMmtJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMjc0OTUzNjktZjUwZC0z
ZmZlLWFmNDUtNmM0MDczMDcyMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARKgdAwQA
ur7VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBANiXKiB5wIlOnS3GhlQKOInxPUiScJX3PAkLKk1I+N0HM6fp
oKJpZxSLSdpYFqXFmVVBpiHu44aBhpj5vxEepLJmp81v5NuMNDwcEQTfTqGYxhWQ
4H+vCg90Bg3JrxnQxA1qYJ5Qhc0gSdxLpN4TMRwbgCAZh5z46muNdc1LW5yO6izD
LY2dBlyCbZUDkX1w5xkOiZg0c5KHlc6i81HADIn/BdLtm6VTTO4/akTckQqrcG0X
0lKa8Xhni6LLi6LNrO3E8yPRGOLZg4xU70yXDOGdAb8reombtRYuuHkN5rCr7bGa
YrvAgfzigSg5vPIl47oUjiN+Amf9QLjCPxQbcGA=
-----END CERTIFICATE-----
Generated at Thu Oct 29 14:00:06 2026 by rpki-client