Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
File:                     9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa (raw, json)
Hash identifier:          5Kc32tUSf5AynfcIRR3X/IJkY3PSREso+LOMMsFhl8s=
Subject key identifier:   30:C7:A7:AF:80:51:1F:34:FF:46:FC:62:ED:6C:90:7B:6B:96:31:20
Certificate issuer:       /CN=5e4e9a46-06dc-462d-a10c-710a3c461796
Certificate serial:       010D0C9F4328584EA793B980F37E387EFB1D6B80
Authority key identifier: 7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     237
IP address blocks:        192.88.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:b9:80:f3:7e:38:7e:fb:1d:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4e9a46-06dc-462d-a10c-710a3c461796
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0879a04a-9732-4989-8895-d506c9bc5229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:c7:2d:1a:0e:bc:ca:b0:2f:7e:b5:82:01:
                    2e:98:9e:d2:46:f1:a1:40:66:8e:c7:d3:de:02:d0:
                    77:7f:f4:5f:9c:8e:ed:28:34:f9:5b:a1:c0:dc:04:
                    db:0e:18:d9:0d:8c:85:21:31:0a:06:66:a5:ee:3e:
                    a6:f0:1d:3a:08:2f:13:b1:65:65:e9:f4:f8:54:cd:
                    a1:bc:d8:c0:d3:70:24:e2:90:22:bd:5e:21:1f:95:
                    a9:e1:9b:e3:6e:ad:45:04:3d:d8:8d:1f:5e:d2:d8:
                    a0:8a:54:03:c6:48:db:2c:4d:bf:23:c1:7d:32:c2:
                    68:10:1d:72:e6:b7:f8:47:bf:31:49:e4:f0:6f:82:
                    a8:45:cd:d2:5f:91:e4:13:ac:bc:22:ff:95:01:cb:
                    dd:4f:79:e9:09:77:15:ad:46:99:a9:98:5c:24:4d:
                    c5:da:5e:e9:0e:03:05:34:de:05:6a:8e:b0:b2:21:
                    4f:73:e2:e4:fc:e5:8f:60:f8:6b:54:87:02:06:71:
                    da:eb:6b:e6:0a:51:cd:04:b2:d2:8d:0b:71:72:ae:
                    19:35:1e:3b:37:71:7c:eb:7d:7a:2d:55:80:60:d9:
                    33:c2:16:48:56:e3:07:dc:e4:54:ab:11:61:d5:b6:
                    04:8e:8e:4c:68:66:27:f4:e4:50:7b:34:62:43:52:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C7:A7:AF:80:51:1F:34:FF:46:FC:62:ED:6C:90:7B:6B:96:31:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/9c91bbd7-6bd1-360c-bada-d28f3e0a11c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796/5e4e9a46-06dc-462d-a10c-710a3c461796.crl

            X509v3 Authority Key Identifier:
                keyid:7C:40:0D:39:C8:EA:17:EC:66:AD:20:06:D4:15:6B:F8:0F:DC:FB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e4e9a46-06dc-462d-a10c-710a3c461796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:96:6e:05:be:33:fb:85:44:af:09:6d:8a:e9:e1:8d:e3:02:
         61:1a:55:54:32:85:2b:55:20:16:97:6a:98:46:ed:d2:e0:26:
         9e:bf:02:b7:4b:0a:1a:b6:d7:f6:f0:2b:0f:1b:52:30:90:51:
         97:4d:a6:fb:1d:a8:ea:31:6a:aa:da:80:97:1c:a3:bb:0c:ce:
         22:55:77:ca:cd:eb:71:6b:6d:8b:12:13:e8:3d:f8:54:a1:37:
         1d:5b:20:bb:70:4b:9a:ed:78:0c:67:35:b3:d8:4b:b3:5a:73:
         86:b9:66:e8:7d:74:ec:f7:f1:f2:8c:6c:2f:ad:b9:a0:92:36:
         2c:d6:38:1a:96:f3:65:76:21:90:83:9d:3c:f0:f7:c8:88:33:
         08:2c:19:74:66:05:f0:72:64:05:2f:da:60:18:f2:1c:a7:41:
         73:bd:43:7b:8d:7d:3d:1b:fe:b4:53:1f:ab:da:b3:ac:9f:de:
         5f:91:57:76:bb:7b:39:f3:fb:b5:da:97:05:61:52:78:86:f4:
         44:06:95:31:1b:fe:d9:4e:f8:cb:18:f0:81:8d:99:89:91:be:
         20:a3:bc:7d:73:7d:28:6e:92:f0:ef:48:d2:9d:b6:6c:9e:0a:
         19:1f:05:33:f8:0e:29:eb:fd:32:d0:df:17:61:5c:49:25:71:
         0a:f9:c5:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk7mA8344fvsda4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0ZTlhNDYtMDZkYy00NjJkLWExMGMtNzEwYTNjNDYx
Nzk2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDg3OWEwNGEtOTczMi00OTg5LTg4OTUtZDUwNmM5YmM1MjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8rHLRoOvMqwL361ggEumJ7SRvGhQGaOx9Pe
AtB3f/RfnI7tKDT5W6HA3ATbDhjZDYyFITEKBmal7j6m8B06CC8TsWVl6fT4VM2h
vNjA03Ak4pAivV4hH5Wp4Zvjbq1FBD3YjR9e0tigilQDxkjbLE2/I8F9MsJoEB1y
5rf4R78xSeTwb4KoRc3SX5HkE6y8Iv+VAcvdT3npCXcVrUaZqZhcJE3F2l7pDgMF
NN4Fao6wsiFPc+Lk/OWPYPhrVIcCBnHa62vmClHNBLLSjQtxcq4ZNR47N3F86316
LVWAYNkzwhZIVuMH3ORUqxFh1bYEjo5MaGYn9ORQezRiQ1I50wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDDHp6+AUR80/0b8Yu1skHtrljEgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZTRl
OWE0Ni0wNmRjLTQ2MmQtYTEwYy03MTBhM2M0NjE3OTYvOWM5MWJiZDctNmJkMS0z
NjBjLWJhZGEtZDI4ZjNlMGExMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWU0ZTlhNDYtMDZkYy00NjJkLWEx
MGMtNzEwYTNjNDYxNzk2LzVlNGU5YTQ2LTA2ZGMtNDYyZC1hMTBjLTcxMGEzYzQ2
MTc5Ni5jcmwwHwYDVR0jBBgwFoAUfEANOcjqF+xmrSAG1BVr+A/c+0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZTRlOWE0Ni0wNmRjLTQ2MmQtYTEwYy03MTBh
M2M0NjE3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEaWbgW+M/uFRK8JbYrp4Y3jAmEaVVQyhStVIBaXaphG7dLgJp6/ArdL
Chq21/bwKw8bUjCQUZdNpvsdqOoxaqragJcco7sMziJVd8rN63FrbYsSE+g9+FSh
Nx1bILtwS5rteAxnNbPYS7Nac4a5Zuh9dOz38fKMbC+tuaCSNizWOBqW82V2IZCD
nTzw98iIMwgsGXRmBfByZAUv2mAY8hynQXO9Q3uNfT0b/rRTH6vas6yf3l+RV3a7
eznz+7XalwVhUniG9EQGlTEb/tlO+MsY8IGNmYmRviCjvH1zfShukvDvSNKdtmye
ChkfBTP4Dinr/TLQ3xdhXEklcQr5xdc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:24 2026 by rpki-client