Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
File:                     9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa (raw, json)
Hash identifier:          xqFMD0F8xrbkqT2/aNBo7omxBsWAlsgtv3TmA8dB1oM=
Subject key identifier:   41:BB:92:F2:71:3E:03:29:6D:93:2C:25:91:36:26:C2:96:61:30:DE
Certificate issuer:       /CN=6d271821-206b-40ae-ba11-9112dbf17eb4
Certificate serial:       010D0C9F4328584F89A864A3A0211E9759250080
Authority key identifier: F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     12129
IP address blocks:        192.96.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:64:a3:a0:21:1e:97:59:25:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d271821-206b-40ae-ba11-9112dbf17eb4
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=b041e8ad-fdf7-4461-b5ef-c2c5d5673b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:b1:c7:2c:72:56:f6:d5:ac:36:e7:29:30:
                    3f:35:bf:52:3c:88:d3:f2:d7:74:c3:27:c6:35:a4:
                    47:ed:b6:39:f2:70:2d:4b:8c:8c:b2:f0:17:4c:01:
                    5b:a5:fb:5f:0d:77:d5:07:1c:06:14:da:07:83:7b:
                    af:fe:d1:9e:1b:cd:ff:d8:26:76:0b:cc:6d:68:5b:
                    2f:0e:c4:0e:1f:14:27:a4:64:b8:02:56:6f:44:00:
                    eb:15:38:b0:57:ee:16:9f:7c:7e:da:e6:b7:c8:fa:
                    04:99:f6:e1:5c:5f:01:43:94:9f:f9:a2:81:41:2b:
                    67:1b:e9:e3:d6:aa:3d:76:63:12:16:d5:ef:c7:1c:
                    19:59:42:e9:ec:68:67:4d:7f:05:53:38:35:53:45:
                    41:8f:6c:8e:c7:53:aa:7c:a3:a9:f8:4c:0b:c8:f5:
                    8d:f1:41:d2:28:65:40:ab:47:7f:e3:0f:0f:89:54:
                    8b:0d:6f:05:1c:a6:9e:8d:0c:57:58:6b:51:2e:0d:
                    a0:79:67:24:1d:1c:b7:85:0e:40:ea:99:00:ab:70:
                    62:a4:f4:36:d7:d0:1b:dd:7d:c4:ed:e7:67:91:78:
                    cf:a0:97:1b:33:b6:d3:c1:ec:2f:0f:d6:66:8f:6c:
                    d0:2b:03:0d:1c:5c:dd:a3:86:49:a3:0e:cf:a3:64:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BB:92:F2:71:3E:03:29:6D:93:2C:25:91:36:26:C2:96:61:30:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:08:05:50:d4:2d:25:c4:1b:9f:30:15:4f:15:d4:97:ca:
         35:07:44:7f:3b:e1:a9:fd:62:f7:c8:4e:c5:40:27:2b:76:09:
         fc:6d:af:19:d1:1b:e0:58:d6:4e:10:f4:0c:f0:f4:3c:3d:41:
         30:d4:df:cb:e3:fd:62:59:26:bc:28:10:1b:1c:35:02:ff:a4:
         a6:67:ea:22:32:9e:e0:5a:fa:d6:d6:67:3b:66:f7:00:14:02:
         b5:81:d8:89:0a:14:95:b3:87:e2:ad:0b:24:9b:78:7b:16:e1:
         e9:e6:13:44:d0:55:3f:b5:d5:f8:1e:c7:17:a7:90:e6:44:2e:
         44:51:da:35:06:78:f7:92:78:ee:87:ee:ec:dc:98:c1:2d:e6:
         34:fc:3e:12:48:43:cc:80:6e:1b:2d:d7:3e:42:a3:c1:b0:b4:
         d2:ed:e5:22:80:46:51:4a:1f:b7:4a:73:c1:f0:66:ae:61:3b:
         f4:9d:25:c0:ae:1d:c3:10:42:06:9f:e0:14:19:f1:c1:03:2c:
         0d:7e:84:b7:34:14:04:54:5f:e3:a4:df:5c:dc:b3:b6:1f:4a:
         b7:49:9c:64:ab:a1:a3:cf:42:a3:51:af:9f:fd:99:b4:43:c9:
         d9:fe:3e:54:ed:2c:e0:ac:7d:0c:c9:09:39:76:ab:85:95:61:
         8b:9b:c4:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqGSjoCEel1klAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQyNzE4MjEtMjA2Yi00MGFlLWJhMTEtOTExMmRiZjE3
ZWI0MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
YjA0MWU4YWQtZmRmNy00NDYxLWI1ZWYtYzJjNWQ1NjczYjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeWxxyxyVvbVrDbnKTA/Nb9SPIjT8td0wyfG
NaRH7bY58nAtS4yMsvAXTAFbpftfDXfVBxwGFNoHg3uv/tGeG83/2CZ2C8xtaFsv
DsQOHxQnpGS4AlZvRADrFTiwV+4Wn3x+2ua3yPoEmfbhXF8BQ5Sf+aKBQStnG+nj
1qo9dmMSFtXvxxwZWULp7GhnTX8FUzg1U0VBj2yOx1OqfKOp+EwLyPWN8UHSKGVA
q0d/4w8PiVSLDW8FHKaejQxXWGtRLg2geWckHRy3hQ5A6pkAq3BipPQ219Ab3X3E
7ednkXjPoJcbM7bTwewvD9Zmj2zQKwMNHFzdo4ZJow7Po2S5MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEG7kvJxPgMpbZMsJZE2JsKWYTDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDI3
MTgyMS0yMDZiLTQwYWUtYmExMS05MTEyZGJmMTdlYjQvOTU5MGIzODMtYzFjNy0z
YzBkLWIwYjgtOGNjYWU4NzM0NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQyNzE4MjEtMjA2Yi00MGFlLWJh
MTEtOTExMmRiZjE3ZWI0LzZkMjcxODIxLTIwNmItNDBhZS1iYTExLTkxMTJkYmYx
N2ViNC5jcmwwHwYDVR0jBBgwFoAU8LGzdr0DHuSW+9pB2HtplYMuoGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDI3MTgyMS0yMDZiLTQwYWUtYmExMS05MTEy
ZGJmMTdlYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwGDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAy9CAVQ1C0lxBufMBVPFdSXyjUHRH874an9YvfITsVAJyt2CfxtrxnR
G+BY1k4Q9Azw9Dw9QTDU38vj/WJZJrwoEBscNQL/pKZn6iIynuBa+tbWZztm9wAU
ArWB2IkKFJWzh+KtCySbeHsW4enmE0TQVT+11fgexxenkOZELkRR2jUGePeSeO6H
7uzcmMEt5jT8PhJIQ8yAbhst1z5Co8GwtNLt5SKARlFKH7dKc8HwZq5hO/SdJcCu
HcMQQgaf4BQZ8cEDLA1+hLc0FARUX+Ok31zcs7YfSrdJnGSroaPPQqNRr5/9mbRD
ydn+PlTtLOCsfQzJCTl2q4WVYYubxME=
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:37:58 2026 by rpki-client