Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa
File:                     c404092f-b471-3319-8d76-7950384a1e5f.roa (raw, json)
Hash identifier:          /a+oFFDCJImJvYshjv+5Eh8FFv78UVVFlQ6tJJGxqyA=
Subject key identifier:   53:28:13:18:A5:BE:12:0B:40:BC:FC:A0:BC:CC:D9:35:0C:5A:6D:46
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EE0C21185023D0ED19E169080
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     2559
IP address blocks:        198.217.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:11:85:02:3d:0e:d1:9e:16:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=62e364f3-aa0d-4a6f-acf2-d78617d20244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:d5:46:a0:aa:a7:1f:bf:92:02:9f:a5:3f:
                    c0:36:25:ca:20:63:03:0e:f0:25:9d:62:cf:51:25:
                    6c:58:b6:ea:45:28:68:27:a6:0c:8a:a2:5f:2e:9e:
                    d6:c7:1e:65:58:9e:04:3d:01:21:37:5b:9b:a0:ee:
                    81:ce:ca:2d:8a:bb:af:48:57:d7:ae:4e:10:d6:fe:
                    27:78:4f:b3:36:6a:28:d8:1f:8b:31:6b:4e:81:22:
                    a4:07:49:c0:ef:fb:b4:64:81:4b:c3:92:3a:da:34:
                    f3:1e:31:80:67:e2:55:c7:18:16:29:80:2b:4c:4f:
                    15:21:a0:84:1e:b0:ab:a7:6c:3d:1c:9c:2b:c7:95:
                    eb:f0:4f:ec:82:0a:e9:7d:a8:53:63:e8:2f:9c:ad:
                    67:fe:40:5c:ae:05:d9:94:19:1a:54:e2:2b:84:c1:
                    11:22:5c:08:fd:03:1f:11:f3:04:a3:44:17:31:f2:
                    68:0c:d4:3d:74:91:9e:9d:5a:3a:e6:c9:5a:e9:65:
                    7f:94:41:f3:16:8a:fb:8d:6e:b8:0b:42:94:7a:9e:
                    d3:b3:1d:fc:a3:07:26:ed:65:8d:ed:4e:0e:3b:5c:
                    7e:a7:16:6f:61:99:50:2b:07:c3:f5:a4:a5:a9:cf:
                    a3:27:77:01:78:65:bd:95:ab:09:55:dc:38:45:07:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:28:13:18:A5:BE:12:0B:40:BC:FC:A0:BC:CC:D9:35:0C:5A:6D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:2e:96:7e:dc:15:a3:67:9f:33:33:a5:89:be:e3:72:83:
         87:94:37:44:b7:f7:f6:e9:74:89:ee:81:9d:2b:b2:5e:f1:96:
         98:d2:f3:ce:61:54:a1:e5:d3:47:ad:02:c5:e8:2f:bd:d4:44:
         cd:5d:aa:3a:f7:01:47:13:73:3d:15:3c:e9:0e:fc:a5:78:55:
         5a:22:65:6d:53:79:9c:ff:0b:37:3e:bf:3d:2c:c6:e7:f4:eb:
         d2:fb:c0:7a:99:db:20:43:28:9c:09:67:73:e3:50:70:4e:9f:
         4a:38:33:af:80:ea:97:b4:6b:7e:a9:d8:1b:01:74:53:e5:e8:
         20:98:f3:c8:92:e3:f2:d8:0c:56:43:f2:2f:fa:50:cc:18:54:
         c5:ec:6f:e1:5d:5f:4a:fa:f9:0c:06:0f:24:15:13:84:2a:6b:
         50:f1:7d:15:65:df:04:8f:b4:a5:f7:3f:13:00:ad:ac:63:9d:
         67:b3:3e:77:ae:db:91:f6:e7:c7:cb:bd:7c:4c:13:ac:0f:0a:
         d0:d3:36:7f:8f:c7:ac:12:60:15:25:67:ec:d5:5e:6e:32:9a:
         00:93:eb:a3:2f:64:31:09:72:19:45:c1:77:cb:d5:f5:8f:35:
         a3:0c:38:4c:33:d9:9d:f3:31:39:75:89:22:4e:9e:8a:1d:0b:
         c3:9c:80:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhGFAj0O0Z4WkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NjJlMzY0ZjMtYWEwZC00YTZmLWFjZjItZDc4NjE3ZDIwMjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK7VRqCqpx+/kgKfpT/ANiXKIGMDDvAlnWLP
USVsWLbqRShoJ6YMiqJfLp7Wxx5lWJ4EPQEhN1uboO6BzsotiruvSFfXrk4Q1v4n
eE+zNmoo2B+LMWtOgSKkB0nA7/u0ZIFLw5I62jTzHjGAZ+JVxxgWKYArTE8VIaCE
HrCrp2w9HJwrx5Xr8E/sggrpfahTY+gvnK1n/kBcrgXZlBkaVOIrhMERIlwI/QMf
EfMEo0QXMfJoDNQ9dJGenVo65sla6WV/lEHzFor7jW64C0KUep7Tsx38owcm7WWN
7U4OO1x+pxZvYZlQKwfD9aSlqc+jJ3cBeGW9lasJVdw4RQfvfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFMoExilvhILQLz8oLzM2TUMWm1GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYzQwNDA5MmYtYjQ3MS0z
MzE5LThkNzYtNzk1MDM4NGExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFMLpZ+3BWjZ58zM6WJvuNyg4eUN0S39/bpdInugZ0rsl7xlpjS885h
VKHl00etAsXoL73URM1dqjr3AUcTcz0VPOkO/KV4VVoiZW1TeZz/Czc+vz0sxuf0
69L7wHqZ2yBDKJwJZ3PjUHBOn0o4M6+A6pe0a36p2BsBdFPl6CCY88iS4/LYDFZD
8i/6UMwYVMXsb+FdX0r6+QwGDyQVE4Qqa1DxfRVl3wSPtKX3PxMAraxjnWezPneu
25H258fLvXxME6wPCtDTNn+Px6wSYBUlZ+zVXm4ymgCT66MvZDEJchlFwXfL1fWP
NaMMOEwz2Z3zMTl1iSJOnoodC8OcgPM=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:19 2026 by rpki-client