Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa
File:                     6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa (raw, json)
Hash identifier:          qiTomoyRiVV8CRz9fH+4xeObVq1zpE+niquhqLPOG/Q=
Subject key identifier:   F8:75:AC:D1:60:FC:A8:34:9B:E2:DD:75:49:63:46:96:19:E8:6B:7F
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F49891A942746E50C343D9200
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        156.70.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:1a:94:27:46:e5:0c:34:3d:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=031d05ae-e4ad-4c53-a38a-0121624bead4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4d:b3:58:57:48:b2:77:5e:b4:8d:7b:65:0d:
                    7f:c1:64:6a:17:7e:83:95:5b:5d:0e:60:99:58:8a:
                    69:7a:55:cc:81:60:cb:2e:c6:1d:7b:cb:c7:74:17:
                    e1:91:b6:33:b4:0d:9f:69:58:4f:67:d4:89:a8:21:
                    6f:6c:da:6c:3f:be:1a:5d:32:80:ef:a9:f0:44:e1:
                    11:f5:16:31:6c:22:63:8c:0f:cf:2c:bb:50:0b:bf:
                    13:39:3f:b7:a8:ab:03:ed:4a:51:93:a8:4e:74:b9:
                    ed:fd:35:1e:91:e8:54:de:15:2d:fd:d5:4e:23:07:
                    50:e7:00:7d:ca:f0:6c:13:72:ca:b0:98:7c:c6:5f:
                    d1:c5:00:ff:47:e6:fb:84:44:d0:9f:90:75:d9:99:
                    30:28:74:54:6b:7c:ad:3c:94:64:6c:19:80:83:0b:
                    49:9f:00:46:a7:b4:b6:98:27:48:50:7d:fc:38:1c:
                    24:75:6d:1b:87:56:3f:e6:9d:8c:95:b3:9c:c7:b6:
                    e0:4f:24:5c:f3:01:f9:57:ca:83:7a:f0:69:0f:9a:
                    ea:da:a8:d7:a7:e8:36:34:f6:5f:d4:a7:63:32:ab:
                    0c:66:e4:5f:66:46:70:1f:9a:0c:8c:0d:b8:23:60:
                    dd:94:ba:6d:f2:18:2d:7e:e4:a9:cd:34:75:bf:97:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:AC:D1:60:FC:A8:34:9B:E2:DD:75:49:63:46:96:19:E8:6B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/6884c3fe-14ec-3d51-94a3-9ade9c0e42da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9b:3e:56:33:f0:2a:a6:91:44:85:73:83:23:92:6c:20:34:
         c7:bb:b2:24:78:e5:4e:a5:57:24:27:c9:09:d9:a9:d7:22:68:
         01:a9:96:74:88:a7:c3:92:71:c0:ea:56:66:ba:d1:ea:8b:83:
         55:82:0e:6b:48:13:f0:85:93:6d:78:a0:40:25:67:76:c6:a5:
         bc:95:e2:1b:15:ec:df:13:d7:72:74:76:19:a5:b0:dd:42:95:
         99:15:24:78:34:a9:ec:13:e5:84:dc:d6:71:3e:0b:3d:28:27:
         15:2b:08:34:89:a6:61:8d:bd:94:9d:50:66:7f:92:80:85:26:
         aa:4a:8d:a9:1a:4e:1b:57:bb:0f:3d:17:70:9f:9f:0e:b8:aa:
         0b:86:9b:99:a6:50:b2:42:cf:31:26:49:00:5e:ba:64:11:4b:
         55:85:7c:1b:00:40:95:4d:ef:ff:39:34:b9:38:dc:09:4b:2d:
         f3:98:f1:b7:ab:71:5e:27:25:4e:66:3c:10:1d:ee:3f:31:72:
         53:7c:a0:2a:4c:44:9d:35:8e:8c:be:d1:ca:81:46:1a:84:e6:
         e3:02:1a:67:41:80:39:65:d4:81:aa:5b:7d:6b:c5:c8:3f:80:
         54:62:7f:c4:19:b7:df:39:4b:08:bc:a9:64:0f:84:33:df:ba:
         8a:c9:c0:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiRqUJ0blDDQ9kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDMxZDA1YWUtZTRhZC00YzUzLWEzOGEtMDEyMTYyNGJlYWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk2zWFdIsndetI17ZQ1/wWRqF36DlVtdDmCZ
WIppelXMgWDLLsYde8vHdBfhkbYztA2faVhPZ9SJqCFvbNpsP74aXTKA76nwROER
9RYxbCJjjA/PLLtQC78TOT+3qKsD7UpRk6hOdLnt/TUekehU3hUt/dVOIwdQ5wB9
yvBsE3LKsJh8xl/RxQD/R+b7hETQn5B12ZkwKHRUa3ytPJRkbBmAgwtJnwBGp7S2
mCdIUH38OBwkdW0bh1Y/5p2MlbOcx7bgTyRc8wH5V8qDevBpD5rq2qjXp+g2NPZf
1KdjMqsMZuRfZkZwH5oMjA24I2DdlLpt8hgtfuSpzTR1v5ctuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPh1rNFg/Kg0m+LddUljRpYZ6Gt/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvNjg4NGMzZmUtMTRlYy0z
ZDUxLTk0YTMtOWFkZTljMGU0MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnEYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+bPlYz8CqmkUSFc4MjkmwgNMe7siR45U6lVyQnyQnZqdciaAGplnSI
p8OSccDqVma60eqLg1WCDmtIE/CFk214oEAlZ3bGpbyV4hsV7N8T13J0dhmlsN1C
lZkVJHg0qewT5YTc1nE+Cz0oJxUrCDSJpmGNvZSdUGZ/koCFJqpKjakaThtXuw89
F3Cfnw64qguGm5mmULJCzzEmSQBeumQRS1WFfBsAQJVN7/85NLk43AlLLfOY8ber
cV4nJU5mPBAd7j8xclN8oCpMRJ01joy+0cqBRhqE5uMCGmdBgDll1IGqW31rxcg/
gFRif8QZt985Swi8qWQPhDPfuorJwLw=
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:29:09 2026 by rpki-client