Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
File:                     bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa (raw, json)
Hash identifier:          fy98ho985/qO7PbrR1j1P4ut3yCW6EBxIgAQvT+FUlk=
Subject key identifier:   CC:AE:B0:97:9F:61:67:85:74:ED:4E:ED:32:3B:D6:2B:4B:CB:8A:58
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584EC7A1D2F3A13557D05E9E6F80
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     26677
IP address blocks:        199.212.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d2:f3:a1:35:57:d0:5e:9e:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=03cd2215-ab4a-4a62-a797-2c5510dc9b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:9d:4f:16:ae:81:cd:71:fd:0f:25:33:2a:
                    83:c4:b6:05:29:98:f3:c0:89:1e:f7:7c:40:c8:ea:
                    a7:1c:78:c0:ea:39:8c:ff:c5:3c:d9:28:45:86:65:
                    59:2e:f1:b7:6d:32:f7:b6:67:6d:5e:36:12:51:b6:
                    2a:6b:b6:c3:c3:7d:5a:ae:78:68:ab:39:ce:1e:58:
                    f7:f3:7f:fc:01:45:1b:5e:c5:23:7b:44:45:8c:77:
                    58:ef:5e:03:7f:6f:aa:d8:a8:8d:7b:a2:32:29:79:
                    9f:8c:7f:5d:62:fa:ce:3d:45:31:39:4f:ee:b6:db:
                    a7:cf:8c:be:c9:d8:8a:59:2e:e3:19:da:c1:5e:05:
                    04:a0:5f:60:0b:0e:8e:ed:64:b6:b3:05:f4:1f:b9:
                    6c:22:02:f6:21:d6:e5:e5:48:00:e8:62:cb:b5:a8:
                    f0:6f:11:50:57:27:82:b1:01:8b:8f:ce:32:ed:fa:
                    08:39:06:4c:f0:b4:2c:d0:2b:00:0e:c1:31:dd:e0:
                    75:b1:23:f7:61:e9:44:92:df:03:a7:bb:53:fe:f3:
                    72:54:39:b8:87:b2:fe:4f:3e:9a:52:66:f6:9d:8f:
                    41:a1:e5:69:19:fd:33:64:1b:fd:a8:9f:d6:c6:a3:
                    db:71:d9:1f:a8:36:81:4a:9b:0c:a5:3b:b0:fa:eb:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AE:B0:97:9F:61:67:85:74:ED:4E:ED:32:3B:D6:2B:4B:CB:8A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5e:c9:13:d4:52:14:62:89:6f:65:69:58:23:85:6f:1a:91:
         ac:9b:66:9c:cb:cf:39:b9:0a:55:2b:cb:c3:5f:db:f7:5b:c5:
         13:d3:f8:cf:56:c9:0e:4c:d9:62:e6:34:e6:2a:27:86:50:32:
         e4:75:c6:65:7a:ab:c5:61:62:a7:96:c0:64:0b:ef:0d:35:1d:
         d5:3e:c0:93:31:73:7d:33:4d:24:63:cf:db:4f:fd:f1:b6:2c:
         9a:e7:c0:01:b6:9f:dc:a6:1f:b8:75:6c:f4:be:02:a1:0c:ee:
         3b:e8:c8:c2:65:41:7e:63:4c:30:92:c9:2e:60:81:b1:cc:06:
         93:8e:74:3a:51:ea:d0:bd:82:85:63:33:92:06:af:c4:41:2e:
         8f:fb:1a:4a:ec:a8:2a:c8:76:7d:ce:c7:03:53:8a:02:88:e9:
         5e:ba:0e:b3:76:96:9e:5b:01:4c:f5:48:9f:67:30:e3:fb:14:
         bc:8c:f3:8c:fb:15:d4:f9:a9:e7:34:d2:48:86:c6:4e:e7:fd:
         75:f8:1a:29:0d:60:16:fd:4c:a1:40:89:c9:65:cb:fb:3d:56:
         06:9d:56:23:de:63:ec:66:20:9f:84:a7:39:97:80:7d:c1:ac:
         83:85:76:1a:52:55:c7:7b:d5:dc:59:da:36:37:31:48:0d:71:
         18:c3:6b:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodLzoTVX0F6eb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx
NDU4MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
MDNjZDIyMTUtYWI0YS00YTYyLWE3OTctMmM1NTEwZGM5YjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnomdTxaugc1x/Q8lMyqDxLYFKZjzwIke93xA
yOqnHHjA6jmM/8U82ShFhmVZLvG3bTL3tmdtXjYSUbYqa7bDw31arnhoqznOHlj3
83/8AUUbXsUje0RFjHdY714Df2+q2KiNe6IyKXmfjH9dYvrOPUUxOU/uttunz4y+
ydiKWS7jGdrBXgUEoF9gCw6O7WS2swX0H7lsIgL2Idbl5UgA6GLLtajwbxFQVyeC
sQGLj84y7foIOQZM8LQs0CsADsEx3eB1sSP3YelEkt8Dp7tT/vNyVDm4h7L+Tz6a
Umb2nY9BoeVpGf0zZBv9qJ/WxqPbcdkfqDaBSpsMpTuw+utp4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMyusJefYWeFdO1O7TI71itLy4pYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl
ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvYmM0MzIzZTMtZTFjMi0z
MjZjLTljMTItNWExNWNlMWEyYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk
ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0
MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz
MzY2NDE0NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9QPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpeyRPUUhRiiW9laVgjhW8akaybZpzLzzm5ClUry8Nf2/dbxRPT+M9W
yQ5M2WLmNOYqJ4ZQMuR1xmV6q8VhYqeWwGQL7w01HdU+wJMxc30zTSRjz9tP/fG2
LJrnwAG2n9ymH7h1bPS+AqEM7jvoyMJlQX5jTDCSyS5ggbHMBpOOdDpR6tC9goVj
M5IGr8RBLo/7GkrsqCrIdn3OxwNTigKI6V66DrN2lp5bAUz1SJ9nMOP7FLyM84z7
FdT5qec00kiGxk7n/XX4GikNYBb9TKFAiclly/s9VgadViPeY+xmIJ+EpzmXgH3B
rIOFdhpSVcd71dxZ2jY3MUgNcRjDa0U=
-----END CERTIFICATE-----
Generated at Sun Sep 13 09:39:57 2026 by rpki-client