Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
File:                     ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json)
Hash identifier:          PjCdfzf1FdIQWDWUQRMKQLxMww3fhEvme0XLGUmYMKs=
Subject key identifier:   13:73:45:E9:D4:E6:34:FB:1E:18:73:37:5B:7C:2A:E7:42:C8:C1:C3
Certificate issuer:       /CN=117f0c8a-705e-440d-8160-752196eb04a2
Certificate serial:       010D0C9F4328584EFCACD0307A06B427AE8974C0
Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        72.22.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d0:30:7a:06:b4:27:ae:89:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=061e6f6f-f988-4657-98ad-e4df56719fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:b2:8a:5f:1e:83:ff:3a:35:41:d3:f3:b6:
                    30:ac:db:5a:1b:eb:41:91:c7:0c:c8:ca:6a:19:e8:
                    10:8c:5e:da:99:73:8b:5b:9b:d8:b1:e8:62:07:75:
                    a1:b8:01:ad:14:07:2a:7b:ca:04:58:de:a9:2f:82:
                    f1:4b:4d:c6:9c:91:18:d0:09:a3:3e:08:c2:10:01:
                    8f:68:5e:17:16:ae:ee:f0:29:9f:2a:ab:f4:4b:77:
                    70:a6:d2:bf:2f:67:f7:9e:a5:0b:d1:ca:02:73:25:
                    d9:05:c3:92:a7:bb:01:b0:ae:5d:87:42:dc:86:d5:
                    02:6b:33:92:d1:c9:7f:b3:d0:04:cc:9a:ef:d0:45:
                    58:58:2a:0f:36:6b:82:27:88:9d:09:ab:2a:c5:0e:
                    77:dc:87:a2:d2:9d:38:b6:35:8f:01:68:0f:d1:00:
                    5e:d5:ae:05:ba:f4:64:f6:de:8a:7c:6c:9d:2b:0f:
                    1e:7d:15:8d:c2:43:be:46:b8:d0:b8:18:72:49:24:
                    f5:32:21:6a:1b:be:27:44:f1:83:d4:fb:89:e6:f7:
                    67:e1:0a:cd:c6:d2:6d:58:3e:33:68:26:24:f6:b3:
                    e8:c0:89:9b:6b:c5:af:14:f5:9a:0c:ac:a7:da:42:
                    f3:ba:e8:d6:9d:b2:86:1e:4a:a5:ac:8e:35:15:43:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:45:E9:D4:E6:34:FB:1E:18:73:37:5B:7C:2A:E7:42:C8:C1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:7c:a6:91:bf:03:7a:2d:63:b9:dd:52:2c:0c:77:c5:cf:
         53:8b:00:d5:e0:c2:a1:52:ef:7b:63:52:c3:43:50:8b:5c:6b:
         bc:04:4d:56:2b:3e:be:3c:bf:c9:3a:6e:3b:61:cd:1b:c0:d9:
         46:99:07:2b:bd:3e:1a:65:80:e9:48:1d:0a:8e:e9:51:cf:94:
         ac:22:e5:19:83:32:51:5d:17:39:d4:89:2d:d6:fe:33:12:38:
         b9:39:1b:44:56:6b:8d:41:b7:0b:95:30:39:e9:a7:2b:9e:2e:
         26:b9:be:dd:f8:f3:92:ec:d0:13:57:45:4c:48:28:fc:75:27:
         50:aa:8b:f5:4a:9d:f5:9d:bc:f9:52:b8:99:a3:99:fb:f1:b5:
         de:21:0e:f7:ad:1f:62:a2:c4:eb:bb:95:b2:f1:da:cf:4f:e1:
         cb:92:bb:ae:76:99:1b:29:7c:93:ab:7e:25:f1:a2:83:78:3b:
         33:40:5f:52:af:e4:b6:20:76:2d:a0:cc:e9:6a:c9:5b:f3:b7:
         10:47:a1:8a:13:88:97:27:4d:94:8e:59:40:a6:0a:68:05:40:
         9c:16:68:c5:76:55:72:e0:e0:c0:ee:3c:c8:82:1f:90:6d:f8:
         8b:5e:b5:a7:f3:84:69:9b:8c:e1:07:0e:89:ea:fe:69:79:4a:
         fe:f4:22:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rNAwega0J66JdMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw
NGEyMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
MDYxZTZmNmYtZjk4OC00NjU3LTk4YWQtZTRkZjU2NzE5ZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D+yil8eg/86NUHT87YwrNtaG+tBkccMyMpq
GegQjF7amXOLW5vYsehiB3WhuAGtFAcqe8oEWN6pL4LxS03GnJEY0AmjPgjCEAGP
aF4XFq7u8CmfKqv0S3dwptK/L2f3nqUL0coCcyXZBcOSp7sBsK5dh0LchtUCazOS
0cl/s9AEzJrv0EVYWCoPNmuCJ4idCasqxQ533Iei0p04tjWPAWgP0QBe1a4FuvRk
9t6KfGydKw8efRWNwkO+RrjQuBhySST1MiFqG74nRPGD1PuJ5vdn4QrNxtJtWD4z
aCYk9rPowImba8WvFPWaDKyn2kLzuujWnbKGHkqlrI41FUMPGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNzRenU5jT7HhhzN1t8KudCyMHDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm
MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvY2E2ZDVhNmEtNWEwNi0z
NWQ4LWI1YTAtZDFjMzU4ODc3YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx
NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi
MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx
OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGX4fKaRvwN6LWO53VIsDHfFz1OLANXgwqFS73tjUsNDUItca7wETVYr
Pr48v8k6bjthzRvA2UaZByu9PhplgOlIHQqO6VHPlKwi5RmDMlFdFznUiS3W/jMS
OLk5G0RWa41BtwuVMDnppyueLia5vt3485Ls0BNXRUxIKPx1J1Cqi/VKnfWdvPlS
uJmjmfvxtd4hDvetH2KixOu7lbLx2s9P4cuSu652mRspfJOrfiXxooN4OzNAX1Kv
5LYgdi2gzOlqyVvztxBHoYoTiJcnTZSOWUCmCmgFQJwWaMV2VXLg4MDuPMiCH5Bt
+ItetafzhGmbjOEHDonq/ml5Sv70IjA=
-----END CERTIFICATE-----
Generated at Sun Sep 13 09:35:37 2026 by rpki-client