Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa
File:                     10d866bc-ec9c-3557-be0c-1355d534c8a4.roa (raw, json)
Hash identifier:          MFl91bGLp0v44hnfgLnTenj/seAxifILTULHcwFHsCU=
Subject key identifier:   DD:18:DF:1C:F1:10:82:A8:37:3C:24:C3:6D:81:3B:2A:9A:EE:C4:5E
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584EA787937B04136384FA7B2200
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54520
IP address blocks:        199.216.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:93:7b:04:13:63:84:fa:7b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=223d9ec2-4711-4c19-9875-cbf4e5079d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:bd:89:f6:f5:86:48:ab:cb:b0:7f:9c:d0:
                    cc:44:cc:71:81:95:9b:22:db:aa:b5:2e:2c:56:ed:
                    c6:23:12:f4:53:c3:c4:12:56:f4:33:20:5a:6e:6d:
                    f6:05:2c:4e:25:fa:ac:48:fc:2a:03:5c:52:51:4f:
                    d2:7c:31:e4:1b:8b:fb:41:b9:ce:88:39:de:a4:ab:
                    65:16:3a:1d:16:3d:e4:5d:91:14:54:b0:c9:0a:cf:
                    ed:9c:cf:1b:8e:da:13:09:56:84:92:db:28:7d:05:
                    69:05:f5:7b:6e:38:40:b4:61:a5:81:e6:03:1d:c4:
                    cc:51:1b:25:fd:ed:d6:b8:88:c5:1e:79:56:af:be:
                    27:81:85:fb:1b:4c:bb:af:b3:65:ff:da:37:e3:1a:
                    eb:b2:bd:a1:a3:a2:48:f1:c4:89:aa:ec:ed:11:3a:
                    1d:d2:8e:63:b8:f7:65:44:65:a8:c5:68:c5:c9:71:
                    9e:ca:4c:2c:6c:bf:6c:3f:8c:95:da:bd:2e:5e:3c:
                    75:9c:bc:dc:91:28:89:67:7b:bd:c9:c7:03:1a:34:
                    d0:18:d4:ec:4a:00:2c:24:0f:9d:b3:a2:54:9b:cd:
                    1e:4e:5f:6f:16:45:27:29:9e:a4:7d:6c:a7:9a:43:
                    fd:65:d8:a3:b0:e7:66:29:3b:f9:91:e2:0b:20:37:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:18:DF:1C:F1:10:82:A8:37:3C:24:C3:6D:81:3B:2A:9A:EE:C4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/10d866bc-ec9c-3557-be0c-1355d534c8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:28:09:e9:a6:52:39:38:5c:0d:fe:86:06:ad:df:6a:d0:
         e9:8e:4f:b5:cc:63:87:e7:66:69:33:b4:57:88:9d:47:88:f4:
         99:64:ad:42:ea:90:ec:4c:ae:33:36:36:30:57:d1:4b:d3:6e:
         fd:3d:77:9b:e3:17:c7:d5:1f:4d:10:f8:f5:d0:3f:22:ea:3d:
         6a:2f:09:ff:3f:74:5e:48:55:ef:89:55:8a:d6:97:5d:59:65:
         9d:9f:23:aa:33:7f:e6:ba:1f:9c:26:17:de:54:5f:93:34:df:
         69:73:ae:6b:a2:72:c6:7b:34:2a:65:9d:2a:fb:6e:34:54:79:
         06:81:ca:60:5b:63:65:c9:bd:aa:55:fc:c1:da:31:81:c3:90:
         e8:f6:4e:d0:60:e9:be:46:ad:9d:5b:58:9e:9f:69:63:aa:c7:
         06:65:31:60:79:60:f6:17:36:b6:27:d3:f0:aa:bd:0c:1e:89:
         bf:b7:3f:15:51:93:0e:2a:d0:89:56:1b:fb:ef:5f:a9:80:8e:
         f1:ad:36:87:2e:24:14:83:ea:c9:b5:87:7a:0e:d6:07:ef:62:
         e7:d4:e1:62:17:32:22:f7:02:c0:a1:d7:2d:22:f9:56:73:34:
         79:ca:6d:f3:fc:86:7d:fa:55:93:d2:dd:7a:6d:cd:c8:79:7a:
         37:cb:a6:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5N7BBNjhPp7IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjIzZDllYzItNDcxMS00YzE5LTk4NzUtY2JmNGU1MDc5ZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt69ifb1hkiry7B/nNDMRMxxgZWbItuqtS4s
Vu3GIxL0U8PEElb0MyBabm32BSxOJfqsSPwqA1xSUU/SfDHkG4v7QbnOiDnepKtl
FjodFj3kXZEUVLDJCs/tnM8bjtoTCVaEktsofQVpBfV7bjhAtGGlgeYDHcTMURsl
/e3WuIjFHnlWr74ngYX7G0y7r7Nl/9o34xrrsr2ho6JI8cSJquztETod0o5juPdl
RGWoxWjFyXGeykwsbL9sP4yV2r0uXjx1nLzckSiJZ3u9yccDGjTQGNTsSgAsJA+d
s6JUm80eTl9vFkUnKZ6kfWynmkP9ZdijsOdmKTv5keILIDd14QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN0Y3xzxEIKoNzwkw22BOyqa7sReMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMTBkODY2YmMtZWM5Yy0z
NTU3LWJlMGMtMTM1NWQ1MzRjOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9guMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHNKAnpplI5OFwN/oYGrd9q0OmOT7XMY4fnZmkztFeInUeI9JlkrULq
kOxMrjM2NjBX0UvTbv09d5vjF8fVH00Q+PXQPyLqPWovCf8/dF5IVe+JVYrWl11Z
ZZ2fI6ozf+a6H5wmF95UX5M032lzrmuicsZ7NCplnSr7bjRUeQaBymBbY2XJvapV
/MHaMYHDkOj2TtBg6b5GrZ1bWJ6faWOqxwZlMWB5YPYXNrYn0/CqvQweib+3PxVR
kw4q0IlWG/vvX6mAjvGtNocuJBSD6sm1h3oO1gfvYufU4WIXMiL3AsCh1y0i+VZz
NHnKbfP8hn36VZPS3Xptzch5ejfLpq8=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:15:39 2026 by rpki-client