Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/836c40ca-190a-32f1-9d85-3ff48c452bed.roa
File:                     836c40ca-190a-32f1-9d85-3ff48c452bed.roa (raw, json)
Hash identifier:          sQJDsWZofFjra9uEr4imX8F7oQZ08gdjmEmF7/pnV+k=
Subject key identifier:   43:80:32:CA:4C:0A:83:5E:28:61:84:E8:82:93:CA:A0:41:23:F3:C1
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584FA85E4814A040207C0EE35440
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/836c40ca-190a-32f1-9d85-3ff48c452bed.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     19901
IP address blocks:        208.161.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:48:14:a0:40:20:7c:0e:e3:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=0373ed32-122f-4158-8ce3-a5a1e08cf36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:92:bb:c4:9e:46:72:06:b0:26:b1:be:fd:
                    68:32:a1:0b:f6:5b:10:eb:fe:81:2d:ad:f7:f2:e6:
                    81:a9:33:f4:09:f4:51:c6:06:f9:87:35:c0:d5:74:
                    5c:0d:70:58:8e:0a:76:71:13:9d:3b:53:44:44:fa:
                    2e:b6:e8:13:cf:2d:97:48:b4:ba:ea:db:98:9b:e6:
                    5d:c5:ed:03:0c:e7:02:63:06:96:1a:8b:c3:4b:0b:
                    0a:5b:f2:0f:51:73:1b:f9:63:60:4e:81:fb:f0:a0:
                    47:b3:f9:7f:f8:1f:72:cf:4a:cd:7a:20:96:77:94:
                    b4:1a:2a:aa:57:40:4c:28:5c:36:de:a6:a0:f5:9b:
                    a6:bc:c8:fb:15:4e:72:1b:19:0c:fe:6a:eb:8f:d3:
                    8d:48:f4:7a:5b:a2:79:75:de:fe:5c:b8:2e:d0:74:
                    72:45:b4:1a:45:f9:09:14:ae:70:36:2c:73:71:07:
                    3f:bd:b7:cb:e8:b7:e4:26:07:23:d5:25:b1:87:70:
                    10:99:eb:e8:9e:32:07:30:72:91:1b:2b:30:e4:07:
                    b4:4d:3c:5d:a4:64:18:f3:b6:35:7e:3a:40:86:41:
                    db:51:fa:fd:c7:0a:a4:61:69:88:fb:98:7b:9d:64:
                    ac:b9:de:7e:a7:0e:6a:98:a0:5d:52:0d:78:9b:af:
                    90:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:80:32:CA:4C:0A:83:5E:28:61:84:E8:82:93:CA:A0:41:23:F3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/836c40ca-190a-32f1-9d85-3ff48c452bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.161.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:60:9b:59:4a:11:c4:6b:a7:0d:05:34:23:b9:67:b5:36:21:
         19:9c:db:bd:b3:f8:e3:a0:ef:6e:6f:02:cc:00:62:64:d4:7e:
         b2:d3:04:e8:6f:fc:a1:62:49:4f:2a:19:6d:eb:6b:ac:83:87:
         81:c3:39:62:94:d1:16:63:4f:e4:30:de:5d:3b:af:e1:db:b8:
         3e:a5:c5:7a:af:a0:8a:f3:18:50:e7:86:24:00:29:5b:68:a0:
         c9:1a:c3:bc:72:6a:93:8b:43:2e:60:ba:ef:f9:44:3f:f1:9a:
         f8:69:9b:68:0e:52:39:71:6f:e1:75:90:45:ab:26:ec:d8:6b:
         23:00:79:ae:6b:ce:50:0c:51:aa:c8:50:8c:1e:7d:b2:17:42:
         5e:8f:2e:62:56:8e:c7:77:d1:01:16:fa:b5:16:66:62:97:08:
         ee:c3:6a:f9:2c:79:46:7e:5f:4e:61:cc:b0:20:98:8d:58:e6:
         a8:69:86:b3:ec:74:c0:cd:48:6b:52:17:e9:e0:d3:a1:f6:78:
         07:b0:39:01:93:19:50:35:e9:10:4c:d0:13:7c:e4:62:37:ab:
         f0:25:55:e9:a0:08:3a:6f:6c:df:ac:8a:2b:fe:de:2c:4d:1c:
         15:4d:dc:b5:71:01:b7:17:e8:dd:65:f5:82:4a:2a:24:bb:6a:
         7c:65:5f:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXkgUoEAgfA7jVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MDM3M2VkMzItMTIyZi00MTU4LThjZTMtYTVhMWUwOGNmMzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ySu8SeRnIGsCaxvv1oMqEL9lsQ6/6BLa33
8uaBqTP0CfRRxgb5hzXA1XRcDXBYjgp2cROdO1NERPoutugTzy2XSLS66tuYm+Zd
xe0DDOcCYwaWGovDSwsKW/IPUXMb+WNgToH78KBHs/l/+B9yz0rNeiCWd5S0Giqq
V0BMKFw23qag9ZumvMj7FU5yGxkM/mrrj9ONSPR6W6J5dd7+XLgu0HRyRbQaRfkJ
FK5wNixzcQc/vbfL6LfkJgcj1SWxh3AQmevonjIHMHKRGysw5Ae0TTxdpGQY87Y1
fjpAhkHbUfr9xwqkYWmI+5h7nWSsud5+pw5qmKBdUg14m6+QzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEOAMspMCoNeKGGE6IKTyqBBI/PBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvODM2YzQwY2EtMTkwYS0z
MmYxLTlkODUtM2ZmNDhjNDUyYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0KEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBgm1lKEcRrpw0FNCO5Z7U2IRmc272z+OOg725vAswAYmTUfrLTBOhv
/KFiSU8qGW3ra6yDh4HDOWKU0RZjT+Qw3l07r+HbuD6lxXqvoIrzGFDnhiQAKVto
oMkaw7xyapOLQy5guu/5RD/xmvhpm2gOUjlxb+F1kEWrJuzYayMAea5rzlAMUarI
UIwefbIXQl6PLmJWjsd30QEW+rUWZmKXCO7DavkseUZ+X05hzLAgmI1Y5qhphrPs
dMDNSGtSF+ng06H2eAewOQGTGVA16RBM0BN85GI3q/AlVemgCDpvbN+siiv+3ixN
HBVN3LVxAbcX6N1l9YJKKiS7anxlX6w=
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:50:10 2026 by rpki-client