Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/9975863a-80cd-38c8-b717-e4ab9d1ec8c5.roa
File:                     9975863a-80cd-38c8-b717-e4ab9d1ec8c5.roa (raw, json)
Hash identifier:          1l94eUt9Z66YDt2tHM/RMRY3yCVlEiKceOlp+s4ZS/s=
Subject key identifier:   80:5A:F6:71:D2:F5:39:B5:11:A3:BC:EB:CB:18:05:46:7E:EF:31:5E
Certificate issuer:       /CN=145bac4b-d098-4846-b4b1-ac1761209cd4
Certificate serial:       010D0C9F4328584ED001E7971E1C6D2CA05CF180
Authority key identifier: AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/9975863a-80cd-38c8-b717-e4ab9d1ec8c5.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     21891
IP address blocks:        192.86.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e7:97:1e:1c:6d:2c:a0:5c:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145bac4b-d098-4846-b4b1-ac1761209cd4
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=48fc5813-cf19-4d5c-8752-c348cc66282a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:12:af:10:a2:3c:0c:fe:47:c2:9a:c7:c0:4d:
                    5f:45:a6:c1:cd:20:b3:5e:9d:91:e8:b1:81:f2:80:
                    b8:19:6d:c9:92:64:fe:c0:20:94:1a:52:a5:48:7b:
                    0c:0f:91:65:4d:1e:53:f4:c4:72:9b:e3:70:63:28:
                    af:7e:af:c8:50:3c:06:94:85:4c:48:fc:ac:f9:bc:
                    e3:de:d9:a1:3a:8e:21:33:50:3c:53:48:a3:82:d7:
                    dc:a8:98:5c:ba:5b:14:1e:72:6b:74:8a:b2:1b:c6:
                    e7:5a:45:99:5a:37:16:53:0a:55:27:3d:3d:34:43:
                    9b:b9:93:d2:86:2a:5f:d4:1f:de:2c:1a:70:7f:31:
                    aa:2e:a7:fe:69:7b:6e:6e:81:d5:6a:b7:43:2e:de:
                    fb:59:00:a8:de:ed:1a:39:79:5a:0b:c8:a2:50:3f:
                    d7:07:5f:8e:09:01:79:f8:01:8d:af:fc:06:92:87:
                    65:78:9c:fb:4a:eb:fd:9b:fd:73:a4:8a:d5:ae:ff:
                    f9:7e:83:bb:bd:cc:a4:7a:37:7a:d9:1f:d2:66:6d:
                    14:f7:11:4f:ce:a6:79:02:73:23:e0:99:1c:b4:40:
                    f7:4e:a4:41:36:33:c2:e9:10:d9:99:2b:e4:cd:c9:
                    0e:01:d2:e7:87:68:bd:27:55:2f:96:0e:39:d1:9b:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:F6:71:D2:F5:39:B5:11:A3:BC:EB:CB:18:05:46:7E:EF:31:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/9975863a-80cd-38c8-b717-e4ab9d1ec8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4/145bac4b-d098-4846-b4b1-ac1761209cd4.crl

            X509v3 Authority Key Identifier:
                keyid:AB:FC:69:04:AA:F5:94:85:0E:C8:FB:C7:A1:22:07:1D:20:CE:ED:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/145bac4b-d098-4846-b4b1-ac1761209cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.86.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:81:06:82:5f:31:22:28:94:6f:46:b5:59:a9:7c:34:79:
         20:e4:29:98:55:45:44:d2:4e:7f:43:f2:91:55:4a:84:91:e6:
         d1:bb:8d:b3:0c:05:3e:41:c1:24:af:cd:62:bc:55:36:06:e1:
         47:05:28:0f:af:a2:d0:29:1c:87:dd:29:d8:42:80:5d:7d:f2:
         30:d1:a8:5b:7a:cf:73:54:1e:e1:4c:fb:64:eb:b4:3c:c0:bc:
         86:e6:ad:7f:8d:21:aa:e8:98:01:16:0a:16:9d:94:b7:b3:72:
         fc:c4:77:18:d1:a3:35:10:3f:ab:52:79:ca:e0:50:e9:81:6c:
         70:e0:43:89:61:76:64:57:72:36:f5:d3:57:58:df:b5:54:b0:
         59:c4:23:3d:a7:c2:ba:bc:ae:be:b9:97:a6:22:7c:69:73:6a:
         2b:f3:0b:3d:39:41:a9:74:a9:92:81:c0:4f:29:4f:37:91:20:
         c4:f5:ae:40:81:37:33:73:53:26:7b:ee:53:ff:77:b4:59:f2:
         af:2d:1f:11:34:d9:d5:4e:2b:e7:dd:ac:57:7b:84:18:01:d8:
         ca:f0:3d:e9:a8:5c:54:2a:87:e6:58:a5:1d:a8:47:71:83:9e:
         7e:0f:1b:b0:a9:b2:a8:d1:c3:3f:2a:eb:f6:e5:35:75:9d:f2:
         50:8a:44:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeeXHhxtLKBc8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ1YmFjNGItZDA5OC00ODQ2LWI0YjEtYWMxNzYxMjA5
Y2Q0MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NDhmYzU4MTMtY2YxOS00ZDVjLTg3NTItYzM0OGNjNjYyODJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRKvEKI8DP5HwprHwE1fRabBzSCzXp2R6LGB
8oC4GW3JkmT+wCCUGlKlSHsMD5FlTR5T9MRym+NwYyivfq/IUDwGlIVMSPys+bzj
3tmhOo4hM1A8U0ijgtfcqJhculsUHnJrdIqyG8bnWkWZWjcWUwpVJz09NEObuZPS
hipf1B/eLBpwfzGqLqf+aXtuboHVardDLt77WQCo3u0aOXlaC8iiUD/XB1+OCQF5
+AGNr/wGkodleJz7Suv9m/1zpIrVrv/5foO7vcykejd62R/SZm0U9xFPzqZ5AnMj
4JkctED3TqRBNjPC6RDZmSvkzckOAdLnh2i9J1Uvlg450ZuGBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBa9nHS9Tm1EaO868sYBUZ+7zFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xNDVi
YWM0Yi1kMDk4LTQ4NDYtYjRiMS1hYzE3NjEyMDljZDQvOTk3NTg2M2EtODBjZC0z
OGM4LWI3MTctZTRhYjlkMWVjOGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTQ1YmFjNGItZDA5OC00ODQ2LWI0
YjEtYWMxNzYxMjA5Y2Q0LzE0NWJhYzRiLWQwOTgtNDg0Ni1iNGIxLWFjMTc2MTIw
OWNkNC5jcmwwHwYDVR0jBBgwFoAUq/xpBKr1lIUOyPvHoSIHHSDO7bEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xNDViYWM0Yi1kMDk4LTQ4NDYtYjRiMS1hYzE3
NjEyMDljZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFYVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsPgQaCXzEiKJRvRrVZqXw0eSDkKZhVRUTSTn9D8pFVSoSR5tG7jbMM
BT5BwSSvzWK8VTYG4UcFKA+votApHIfdKdhCgF198jDRqFt6z3NUHuFM+2TrtDzA
vIbmrX+NIaromAEWChadlLezcvzEdxjRozUQP6tSecrgUOmBbHDgQ4lhdmRXcjb1
01dY37VUsFnEIz2nwrq8rr65l6YifGlzaivzCz05Qal0qZKBwE8pTzeRIMT1rkCB
NzNzUyZ77lP/d7RZ8q8tHxE02dVOK+fdrFd7hBgB2MrwPemoXFQqh+ZYpR2oR3GD
nn4PG7CpsqjRwz8q6/blNXWd8lCKRKQ=
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:55:21 2026 by rpki-client