Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
File:                     4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa (raw, json)
Hash identifier:          sCBfk79PPWZ/kvfUDyysSZ8DKX/vTsTXz021/Lp1UdA=
Subject key identifier:   FF:70:7C:58:8D:3F:9E:E6:2D:A7:7D:96:90:FE:85:F1:24:14:F1:29
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F4328584F506D5640BF38939C03D573A0
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     197841
IP address blocks:        23.188.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:56:40:bf:38:93:9c:03:d5:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=27f4b95c-2359-4f4d-a5c1-dc00b56e5603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:0d:ba:ff:f9:2b:a8:aa:d2:44:96:6b:82:
                    e6:04:93:7d:09:c5:8e:8e:85:ec:b9:01:b2:b2:35:
                    55:74:05:e3:6a:c6:a3:73:64:d5:ff:0d:24:ce:e7:
                    0f:57:d6:1c:7f:77:1b:8b:8e:67:32:c8:8f:68:c6:
                    e4:4f:d8:4d:71:48:11:c5:7e:de:5f:7d:7c:0b:01:
                    19:df:af:99:e5:30:0f:99:f9:90:fe:57:6d:bd:1d:
                    37:5c:d1:bf:48:68:6e:76:b0:73:03:7b:a6:f4:d8:
                    b7:b5:c7:d8:49:62:e8:d1:80:c7:4b:d9:f9:a1:f6:
                    3d:e4:80:1a:fd:96:9c:a2:59:69:3b:5a:f1:d7:f9:
                    f5:5f:69:e3:1f:81:76:35:68:f4:e9:c0:d1:13:10:
                    e4:64:c6:5a:fd:52:ed:76:f0:75:f7:1f:b3:e5:0d:
                    ff:a9:c9:ea:4c:7a:00:e7:8a:c7:8b:d6:21:04:14:
                    66:1d:0b:da:7a:9e:6f:98:f5:be:e6:90:d4:95:1d:
                    f7:17:72:fa:2f:57:4f:32:e7:39:6b:a1:ce:3d:9f:
                    9b:0d:f5:c6:8d:f9:ac:30:7e:4c:21:18:82:ad:c5:
                    76:3e:08:fc:9a:a8:5e:ce:1b:6b:f2:1a:73:ea:fe:
                    b8:9c:cb:85:44:e0:ea:c9:b0:ab:f9:df:00:f4:3c:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:7C:58:8D:3F:9E:E6:2D:A7:7D:96:90:FE:85:F1:24:14:F1:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/4d6f27a4-0b19-3b6a-ba2b-e2a8b7bf4568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:98:c9:21:61:bb:a5:fe:51:93:31:fd:48:69:4c:a4:c8:a2:
         5a:33:df:03:58:de:cd:3c:30:06:75:90:80:21:f5:da:53:f9:
         04:15:63:51:05:bd:4e:de:9b:d7:da:75:61:f3:91:33:0e:7a:
         72:48:79:80:ef:ca:ea:f3:02:82:7b:2e:fc:f2:cc:64:7b:b5:
         c1:6d:91:88:25:04:69:02:b0:92:15:ae:34:9e:58:2e:8c:6d:
         45:99:57:1b:69:93:19:28:5a:91:20:43:51:5b:49:0c:cf:28:
         c7:ef:22:c9:b7:2e:7f:97:9a:95:b8:95:5a:91:6b:9b:bb:25:
         91:88:2d:02:1c:98:76:04:a1:3f:8e:db:47:03:ca:e4:e4:1b:
         d0:05:cf:39:a5:fa:7d:a5:64:98:05:84:be:2d:95:fa:7c:e3:
         41:4f:42:4f:84:45:b8:62:45:15:de:3c:ae:14:c5:84:f3:7e:
         4a:91:2b:64:02:f9:9c:07:0f:4f:07:79:22:83:11:53:7a:39:
         c0:34:aa:7a:49:78:75:45:3d:ca:27:53:f6:78:8e:0f:5d:1b:
         59:58:84:6c:23:9a:a8:64:1c:52:81:58:ac:47:b8:33:e8:47:
         77:b2:9e:11:f9:e9:5f:08:91:6f:44:40:da:c4:31:c1:92:d1:
         d5:d3:d0:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVZAvziTnAPVc6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTRmYmIxNDgtOGIxYi00YTE3LTg2YjItYWZkMDQ2MmQ4
MmZmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk
MjdmNGI5NWMtMjM1OS00ZjRkLWE1YzEtZGMwMGI1NmU1NjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJANuv/5K6iq0kSWa4LmBJN9CcWOjoXsuQGy
sjVVdAXjasajc2TV/w0kzucPV9Ycf3cbi45nMsiPaMbkT9hNcUgRxX7eX318CwEZ
36+Z5TAPmfmQ/ldtvR03XNG/SGhudrBzA3um9Ni3tcfYSWLo0YDHS9n5ofY95IAa
/ZacollpO1rx1/n1X2njH4F2NWj06cDRExDkZMZa/VLtdvB19x+z5Q3/qcnqTHoA
54rHi9YhBBRmHQvaep5vmPW+5pDUlR33F3L6L1dPMuc5a6HOPZ+bDfXGjfmsMH5M
IRiCrcV2Pgj8mqhezhtr8hpz6v64nMuFRODqybCr+d8A9DykIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9wfFiNP57mLad9lpD+hfEkFPEpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85NGZi
YjE0OC04YjFiLTRhMTctODZiMi1hZmQwNDYyZDgyZmYvNGQ2ZjI3YTQtMGIxOS0z
YjZhLWJhMmItZTJhOGI3YmY0NTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTRmYmIxNDgtOGIxYi00YTE3LTg2
YjItYWZkMDQ2MmQ4MmZmLzk0ZmJiMTQ4LThiMWItNGExNy04NmIyLWFmZDA0NjJk
ODJmZi5jcmwwHwYDVR0jBBgwFoAUM8r0MLDxVMpzf55J/FGeoNXTBZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85NGZiYjE0OC04YjFiLTRhMTctODZiMi1hZmQw
NDYyZDgyZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiYySFhu6X+UZMx/UhpTKTIoloz3wNY3s08MAZ1kIAh9dpT+QQVY1EF
vU7em9fadWHzkTMOenJIeYDvyurzAoJ7LvzyzGR7tcFtkYglBGkCsJIVrjSeWC6M
bUWZVxtpkxkoWpEgQ1FbSQzPKMfvIsm3Ln+XmpW4lVqRa5u7JZGILQIcmHYEoT+O
20cDyuTkG9AFzzml+n2lZJgFhL4tlfp840FPQk+ERbhiRRXePK4UxYTzfkqRK2QC
+ZwHD08HeSKDEVN6OcA0qnpJeHVFPconU/Z4jg9dG1lYhGwjmqhkHFKBWKxHuDPo
R3eynhH56V8IkW9EQNrEMcGS0dXT0JE=
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:37:23 2026 by rpki-client