Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/64a2616b-aad7-3d67-9fa7-c1cb1811c952.roa
File:                     64a2616b-aad7-3d67-9fa7-c1cb1811c952.roa (raw, json)
Hash identifier:          URMwyHxS2XxkyedeR/tgwlstb5GmCNd8+zsWUZD9Gyg=
Subject key identifier:   7B:9B:31:65:05:71:F0:1A:BC:F6:41:A0:68:E9:75:44:4A:5D:43:F2
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584DFFFACD25835D087250B998E0
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/64a2616b-aad7-3d67-9fa7-c1cb1811c952.roa
Signing time:             Sat 30 May 2026 00:38:02 +0000
ROA not before:           Sat 30 May 2026 00:38:02 +0000
ROA not after:            Fri 28 Aug 2026 00:38:02 +0000
asID:                     402493
IP address blocks:        192.25.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ff:fa:cd:25:83:5d:08:72:50:b9:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: May 30 00:38:02 2026 GMT
            Not After : Aug 28 00:38:02 2026 GMT
        Subject: CN=13f70f3d-6310-4f8d-9df9-cc3ba62e4e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:47:1e:df:26:5b:91:8f:71:e9:8c:ab:9d:
                    ff:c0:5f:90:50:85:68:44:e2:d2:e9:18:0d:ab:02:
                    c9:4a:4b:ef:23:c4:bd:7b:15:bb:9b:8a:e0:af:71:
                    1e:73:6f:90:6e:a1:52:e9:2a:e7:29:e3:75:62:f0:
                    c7:96:c3:30:c4:7f:29:9c:4e:ed:26:50:6a:e3:9e:
                    7d:eb:ee:07:95:bb:de:80:f1:c9:19:a8:b2:f2:bc:
                    26:6e:be:62:c2:be:65:25:dd:9a:90:a1:d3:04:b3:
                    19:61:b9:fe:c1:0a:f0:81:44:05:4b:c0:5c:3c:2f:
                    b5:91:7a:3a:b6:91:ff:7a:aa:a5:6d:d2:d8:36:3f:
                    70:2a:44:ec:e0:e9:8b:67:42:38:0e:64:2b:cd:25:
                    11:70:46:64:6f:38:5a:ca:89:8a:30:da:04:bc:4f:
                    fb:3f:99:8f:d8:64:22:43:96:67:d0:0a:f5:43:0d:
                    28:4f:5e:0d:8e:d6:b8:de:41:2e:d2:97:d5:ae:8d:
                    5f:b0:3c:73:4f:6a:c4:7d:cf:79:5f:a7:33:e5:72:
                    44:7f:bc:da:b8:62:1f:18:0b:a7:9d:bf:b0:3b:24:
                    91:bb:79:34:43:50:41:be:1a:7f:9a:47:db:2f:51:
                    64:3a:de:46:79:06:bf:05:b9:b2:b9:c9:36:56:69:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9B:31:65:05:71:F0:1A:BC:F6:41:A0:68:E9:75:44:4A:5D:43:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/64a2616b-aad7-3d67-9fa7-c1cb1811c952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:ea:fd:bd:27:d1:39:5e:d6:96:15:9f:d6:5d:c5:1b:a8:
         f9:c1:e9:f0:38:97:97:09:a6:22:0a:bc:68:75:28:a3:78:dd:
         ca:10:f9:08:fd:bb:01:7a:47:86:23:7e:cc:4b:5d:9d:49:5d:
         9a:28:f7:28:89:c0:9b:ab:a3:67:92:c3:f1:95:9b:fa:70:49:
         a9:3c:38:bd:f3:b3:1b:60:9b:6e:fd:9b:a3:8c:98:5e:4a:89:
         ac:51:77:f0:aa:d4:4c:94:d6:c5:99:71:b7:ca:ef:9b:e7:23:
         d6:64:ef:d9:d0:6f:82:73:56:9b:18:5c:13:ed:49:d1:ac:e8:
         2b:ca:52:18:ed:97:02:81:c3:78:8f:29:d5:fd:0d:d7:6d:e1:
         71:a4:9f:b3:e0:8b:cf:b8:2f:5c:29:0b:ec:ed:87:62:b1:94:
         73:11:04:c9:3d:39:9a:2a:cd:ec:6f:84:7d:b5:54:76:6b:e0:
         62:e4:19:d1:0a:b4:8f:3f:d4:d1:17:d3:87:79:b4:6d:96:93:
         0a:a4:ae:e0:00:25:13:42:19:1a:bb:39:55:bc:f2:77:80:fe:
         81:a3:70:f7:5e:c0:a7:28:ce:36:4e:29:3e:8c:7f:8f:47:c3:
         0e:cd:16:7d:74:ca:d2:4c:2b:a1:2f:18:16:5f:ad:72:40:82:
         48:c5:d0:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3/+s0lg10IclC5mOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx
MDQzMB4XDTI2MDUzMDAwMzgwMloXDTI2MDgyODAwMzgwMlowLzEtMCsGA1UEAxMk
MTNmNzBmM2QtNjMxMC00ZjhkLTlkZjktY2MzYmE2MmU0ZTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYhHHt8mW5GPcemMq53/wF+QUIVoROLS6RgN
qwLJSkvvI8S9exW7m4rgr3Eec2+QbqFS6SrnKeN1YvDHlsMwxH8pnE7tJlBq4559
6+4HlbvegPHJGaiy8rwmbr5iwr5lJd2akKHTBLMZYbn+wQrwgUQFS8BcPC+1kXo6
tpH/eqqlbdLYNj9wKkTs4OmLZ0I4DmQrzSURcEZkbzhayomKMNoEvE/7P5mP2GQi
Q5Zn0Ar1Qw0oT14Njta43kEu0pfVro1fsDxzT2rEfc95X6cz5XJEf7zauGIfGAun
nb+wOySRu3k0Q1BBvhp/mkfbL1FkOt5GeQa/Bbmyuck2VmkvFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHubMWUFcfAavPZBoGjpdURKXUPyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw
ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvNjRhMjYxNmItYWFkNy0z
ZDY3LTlmYTctYzFjYjE4MTFjOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5
MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1
MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi
YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBlmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWi6v29J9E5XtaWFZ/WXcUbqPnB6fA4l5cJpiIKvGh1KKN43coQ+Qj9
uwF6R4YjfsxLXZ1JXZoo9yiJwJuro2eSw/GVm/pwSak8OL3zsxtgm279m6OMmF5K
iaxRd/Cq1EyU1sWZcbfK75vnI9Zk79nQb4JzVpsYXBPtSdGs6CvKUhjtlwKBw3iP
KdX9Dddt4XGkn7Pgi8+4L1wpC+zth2KxlHMRBMk9OZoqzexvhH21VHZr4GLkGdEK
tI8/1NEX04d5tG2WkwqkruAAJRNCGRq7OVW88neA/oGjcPdewKcozjZOKT6Mf49H
ww7NFn10ytJMK6EvGBZfrXJAgkjF0OM=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:58 2026 by rpki-client