Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa
File:                     7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa (raw, json)
Hash identifier:          YglU9A7SPF0hlO0A4WCtg5sV82TNSloeHA5wz2PwaPQ=
Subject key identifier:   11:AB:A1:D7:41:D8:D4:B9:2B:3F:CC:B3:D1:2C:F3:06:F7:08:8E:22
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584EDC91EC4FAEE138143F6C1200
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     25945
IP address blocks:        162.253.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ec:4f:ae:e1:38:14:3f:6c:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=4d50b637-f0ba-4b1e-bcf5-74e464010c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:9a:94:39:99:98:6c:fe:57:70:8d:28:c1:
                    94:ca:f6:1d:c9:d1:eb:81:0c:fa:49:62:66:6b:e0:
                    d8:9b:16:1c:ab:96:a5:93:27:48:43:61:44:7c:01:
                    02:df:67:61:dd:9e:06:ac:da:6b:2b:19:0c:71:03:
                    75:88:a4:95:45:c5:da:ad:b3:e8:ce:41:6b:e9:5e:
                    69:31:dd:04:f8:ac:e7:a6:b1:64:ca:c8:32:22:2a:
                    b2:96:4f:d2:98:05:d0:98:a7:70:57:0a:3e:af:83:
                    0e:ca:50:3d:df:5a:e4:bb:41:68:2e:9d:42:9f:f6:
                    96:1f:01:7c:9d:11:0c:55:d6:d1:27:22:c1:86:35:
                    83:20:eb:87:e2:a4:a5:9b:3b:f7:e7:e7:23:23:af:
                    ea:00:d3:65:1d:6c:36:fe:3d:74:4b:1d:d2:27:44:
                    4a:fe:62:a1:e9:2b:bf:2c:fc:d0:fd:30:c8:41:b3:
                    ea:58:5e:55:a4:e2:4e:61:f0:55:01:ec:b4:8d:19:
                    16:7a:25:21:13:18:8a:27:ae:af:5e:2f:cf:55:0e:
                    9f:67:dc:06:01:98:7c:21:92:c5:81:00:5d:42:2f:
                    92:40:3e:9e:4f:f2:30:42:e3:14:73:f7:ce:e5:b5:
                    32:99:a0:ee:6b:c5:f0:7a:b3:d2:bd:45:f0:9c:75:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:A1:D7:41:D8:D4:B9:2B:3F:CC:B3:D1:2C:F3:06:F7:08:8E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7e:fa:67:3d:6b:07:fc:1a:23:da:d5:32:db:a8:6a:0f:08:
         e1:f3:09:41:9d:8a:d2:3c:a5:9d:2f:77:9b:03:1a:99:d2:1c:
         90:49:e8:29:c5:99:24:59:6e:5c:de:e5:21:7f:16:b3:d8:a4:
         9b:15:93:98:fe:1e:79:4a:5b:11:43:18:fc:7f:32:9e:f2:57:
         e3:58:2d:3c:95:0a:e9:00:d9:19:c3:46:9f:3a:3c:b1:fc:6a:
         56:9b:1c:bb:28:32:2b:f8:4d:eb:b0:b9:07:50:4a:fa:bf:4c:
         70:44:fe:f1:51:68:0e:18:f1:6f:60:f1:5c:06:da:c9:fb:40:
         20:64:a3:21:9b:03:48:52:f5:b4:3c:d3:5d:b8:c0:a2:12:44:
         94:cb:ed:fe:4b:bc:9c:a1:a7:b5:e5:ad:0f:cd:e5:dc:a5:b0:
         85:60:bc:79:2c:25:42:d1:5b:f4:ea:5e:f3:f3:52:26:7d:38:
         d6:fa:ce:f1:85:fb:22:19:f0:02:e7:83:5d:4d:d0:2a:b0:e2:
         5e:23:bd:24:68:fb:25:3f:54:21:12:dc:ce:8b:20:da:d8:1e:
         32:ef:07:94:09:d4:83:3a:a0:36:33:a5:41:6a:fa:81:fa:5c:
         5a:f9:05:48:d4:f1:d9:dc:0d:9b:28:0f:ec:d4:7e:dc:38:f4:
         4d:0d:10:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckexPruE4FD9sEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy
ZDVhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NGQ1MGI2MzctZjBiYS00YjFlLWJjZjUtNzRlNDY0MDEwYzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYyalDmZmGz+V3CNKMGUyvYdydHrgQz6SWJm
a+DYmxYcq5alkydIQ2FEfAEC32dh3Z4GrNprKxkMcQN1iKSVRcXarbPozkFr6V5p
Md0E+KznprFkysgyIiqylk/SmAXQmKdwVwo+r4MOylA931rku0FoLp1Cn/aWHwF8
nREMVdbRJyLBhjWDIOuH4qSlmzv35+cjI6/qANNlHWw2/j10Sx3SJ0RK/mKh6Su/
LPzQ/TDIQbPqWF5VpOJOYfBVAey0jRkWeiUhExiKJ66vXi/PVQ6fZ9wGAZh8IZLF
gQBdQi+SQD6eT/IwQuMUc/fO5bUymaDua8XwerPSvUXwnHXlAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGroddB2NS5Kz/Ms9Es8wb3CI4iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz
MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvNzM3OGFjMjUtYTJjMC0z
ZDcyLWI0ZTMtYzFmOTg2ZTFjYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy
MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4
MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3
M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1++mc9awf8GiPa1TLbqGoPCOHzCUGditI8pZ0vd5sDGpnSHJBJ6CnF
mSRZblze5SF/FrPYpJsVk5j+HnlKWxFDGPx/Mp7yV+NYLTyVCukA2RnDRp86PLH8
alabHLsoMiv4TeuwuQdQSvq/THBE/vFRaA4Y8W9g8VwG2sn7QCBkoyGbA0hS9bQ8
0124wKISRJTL7f5LvJyhp7XlrQ/N5dylsIVgvHksJULRW/TqXvPzUiZ9ONb6zvGF
+yIZ8ALng11N0Cqw4l4jvSRo+yU/VCES3M6LINrYHjLvB5QJ1IM6oDYzpUFq+oH6
XFr5BUjU8dncDZsoD+zUftw49E0NECE=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:14:05 2026 by rpki-client