Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa
File:                     f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa (raw, json)
Hash identifier:          Fao91em1q4PIR7u6mWLgiU178LNbBzC1K99zPNsBMas=
Subject key identifier:   B0:AF:F9:9A:40:82:DC:C3:D8:02:BF:C3:5C:75:81:E9:4F:AC:DB:2A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EAE81A0B6EC8436AD20F4AF80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     397630
IP address blocks:        199.101.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a0:b6:ec:84:36:ad:20:f4:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=4f8585ef-6989-4795-9b2a-4ad6ed20b3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:34:b0:e8:52:5e:a6:8d:f7:d5:43:68:94:
                    82:3b:f6:c5:17:3d:00:5c:9c:e8:2c:32:90:49:75:
                    a4:5a:78:80:03:4d:fc:7d:bd:da:56:cc:bf:fd:ae:
                    91:ff:66:d2:e5:11:d4:d2:f4:b9:42:d2:5f:91:e9:
                    0e:bf:ec:1f:81:f1:56:d6:f7:1c:3c:b5:6c:31:e5:
                    49:52:d0:ba:5e:0f:c4:b8:f6:67:64:c9:5f:51:28:
                    07:e6:53:6b:19:6c:90:2b:5f:3d:fc:ae:24:1f:da:
                    9e:88:b0:71:6d:1f:c9:b3:28:f2:3f:26:fa:19:0c:
                    ad:a0:ee:58:e9:93:f2:ef:d7:94:a2:9e:f2:1f:e0:
                    94:45:36:86:b2:1c:31:51:11:e5:a1:b2:62:ee:75:
                    b3:3d:b2:38:13:aa:a9:af:15:68:82:bc:e6:27:3c:
                    16:f1:2f:c5:ae:97:76:22:12:45:d9:53:e5:7e:74:
                    87:c7:f7:ba:61:76:ba:f5:1a:a1:33:8d:8e:fb:34:
                    88:f1:d4:3a:bb:e4:76:63:e3:63:98:3b:33:f4:60:
                    0a:e1:1b:31:3b:3f:6b:8e:e7:5c:86:fd:56:65:5a:
                    41:0d:66:7e:02:60:6d:24:c6:c6:18:5a:31:6f:a6:
                    47:7e:83:6e:2a:a7:c2:ad:98:a8:87:d5:5c:1a:b6:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AF:F9:9A:40:82:DC:C3:D8:02:BF:C3:5C:75:81:E9:4F:AC:DB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:cc:6e:d7:c2:91:18:48:ee:d1:84:0f:c4:d2:74:f7:02:92:
         6f:9f:db:54:21:55:3c:58:ff:bb:30:1e:2a:d7:f7:b7:11:cc:
         56:65:87:27:77:aa:12:fc:f7:6f:c3:19:84:38:85:b1:87:16:
         73:13:cc:ae:01:09:fe:13:46:9a:a7:58:92:8c:d8:bd:a9:c9:
         9a:de:fe:85:af:57:da:9f:4e:d3:d8:34:0d:8f:71:9a:b8:cd:
         08:e4:35:ae:9c:e8:d4:f1:68:fb:22:0c:71:83:d8:05:25:bc:
         c5:e7:08:82:27:b5:ca:62:ea:56:69:cc:3d:d9:a7:24:46:34:
         55:e8:ee:22:e7:a3:95:69:99:13:e3:6c:40:6a:d3:84:aa:09:
         e5:87:37:7b:34:7f:71:21:2e:eb:71:6d:1a:76:9c:8a:a0:b6:
         b9:74:46:1e:db:95:bb:1f:e5:63:59:ba:08:b0:54:ae:b3:fb:
         c8:f9:40:57:72:99:84:cf:c7:83:bc:b7:1b:0c:e6:9e:73:91:
         5a:25:04:42:72:3c:3b:e1:9e:b2:17:65:73:f3:91:04:f8:1d:
         b0:b3:ef:1f:41:70:6a:f7:0f:6a:eb:e5:a6:4e:af:f3:f7:9c:
         cf:0a:e6:45:dc:f0:f6:cd:73:43:23:76:63:0d:02:cd:83:62:
         fe:9e:0e:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugaC27IQ2rSD0r4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk
NGY4NTg1ZWYtNjk4OS00Nzk1LTliMmEtNGFkNmVkMjBiM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhk0sOhSXqaN99VDaJSCO/bFFz0AXJzoLDKQ
SXWkWniAA038fb3aVsy//a6R/2bS5RHU0vS5QtJfkekOv+wfgfFW1vccPLVsMeVJ
UtC6Xg/EuPZnZMlfUSgH5lNrGWyQK189/K4kH9qeiLBxbR/JsyjyPyb6GQytoO5Y
6ZPy79eUop7yH+CURTaGshwxURHlobJi7nWzPbI4E6qprxVogrzmJzwW8S/Frpd2
IhJF2VPlfnSHx/e6YXa69RqhM42O+zSI8dQ6u+R2Y+NjmDsz9GAK4RsxOz9rjudc
hv1WZVpBDWZ+AmBtJMbGGFoxb6ZHfoNuKqfCrZioh9VcGrb50wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCv+ZpAgtzD2AK/w1x1gelPrNsqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZjk0YmZjN2MtZjI1YS0z
ZjViLTgyMWQtMGJhZThhYTE5OWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2WJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/MbtfCkRhI7tGED8TSdPcCkm+f21QhVTxY/7swHirX97cRzFZlhyd3
qhL892/DGYQ4hbGHFnMTzK4BCf4TRpqnWJKM2L2pyZre/oWvV9qfTtPYNA2PcZq4
zQjkNa6c6NTxaPsiDHGD2AUlvMXnCIIntcpi6lZpzD3ZpyRGNFXo7iLno5VpmRPj
bEBq04SqCeWHN3s0f3EhLutxbRp2nIqgtrl0Rh7blbsf5WNZugiwVK6z+8j5QFdy
mYTPx4O8txsM5p5zkVolBEJyPDvhnrIXZXPzkQT4HbCz7x9BcGr3D2rr5aZOr/P3
nM8K5kXc8PbNc0MjdmMNAs2DYv6eDi4=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:08:08 2026 by rpki-client