Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
File:                     afcd93bd-2515-3100-bccc-fb4b5902b55e.roa (raw, json)
Hash identifier:          Ehq1uCbaOc8I8jinArNO0W7YaI8zLucyyf/jQVgI4/M=
Subject key identifier:   91:8E:57:17:0E:38:08:A3:3A:6A:9F:71:0D:19:65:AA:89:EA:10:B0
Certificate issuer:       /CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
Certificate serial:       010D0C9F4328584F30527D2DB960ED8D130FBA00
Authority key identifier: BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     271
IP address blocks:        192.197.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:7d:2d:b9:60:ed:8d:13:0f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=791fee1c-1b1f-448c-8937-9a315eb8e9de
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=df53c5fa-a5db-4256-9a8c-f9957cbd0e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:f6:90:90:c9:dd:e5:4a:2b:a8:74:2b:fc:
                    1b:a5:2a:f7:76:51:8d:0f:a4:64:2c:3b:42:6b:37:
                    ed:c7:42:8e:ab:19:26:5e:16:44:51:dc:b3:5a:68:
                    2b:6a:ac:e2:65:6a:a2:c6:4e:f9:71:61:15:44:0f:
                    27:a9:b5:c3:9c:4b:5e:85:e9:5a:4b:11:13:4d:21:
                    a7:8d:fe:2e:11:10:4e:c5:52:fa:c9:bd:c5:82:7d:
                    c1:8c:18:d2:77:9f:68:07:25:57:47:70:67:3d:db:
                    35:32:c4:bd:c0:79:51:42:40:14:f3:be:fe:21:e8:
                    7d:5a:25:e3:94:c9:79:ed:65:f8:e6:a0:49:c1:ee:
                    c7:f7:c5:6f:3a:37:ae:ee:d4:e6:a0:c2:8a:7e:6c:
                    82:d7:0b:d0:ee:b7:c4:f0:3a:55:18:59:85:eb:de:
                    49:b8:38:c2:0b:30:3e:7d:12:ba:72:78:78:3b:de:
                    a6:34:79:87:8f:31:fd:2f:c0:8a:03:b1:35:f7:28:
                    07:21:bf:19:85:58:93:8b:a9:f6:2b:1e:1c:a3:b8:
                    d5:37:2f:dc:df:df:f8:2f:19:72:df:07:5f:39:0d:
                    26:9a:bd:38:77:c5:92:b0:4b:0e:89:76:0b:a5:83:
                    b2:98:9d:da:ca:70:e8:36:29:24:00:f8:0c:a1:6e:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8E:57:17:0E:38:08:A3:3A:6A:9F:71:0D:19:65:AA:89:EA:10:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/afcd93bd-2515-3100-bccc-fb4b5902b55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de/791fee1c-1b1f-448c-8937-9a315eb8e9de.crl

            X509v3 Authority Key Identifier:
                keyid:BA:4F:2B:6E:2B:E8:E9:DE:12:1A:E4:BF:63:30:7F:63:C3:A0:3B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/791fee1c-1b1f-448c-8937-9a315eb8e9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:3d:39:38:59:b0:64:1f:82:32:24:78:d8:81:07:43:fe:
         48:0a:37:97:82:6b:8f:f8:af:94:0b:f1:1e:46:2e:2f:e2:1a:
         37:e0:fc:43:e7:bd:d7:96:2e:6e:c3:a1:7d:80:c3:6c:eb:2b:
         9a:a2:fa:15:c4:08:6f:92:00:2f:e5:72:0d:73:db:0b:c4:ca:
         38:2a:b7:44:65:e7:ea:a8:aa:d7:26:5e:49:5b:24:43:77:a6:
         e6:02:67:92:80:95:d8:2d:30:51:e0:c1:34:42:7f:00:8b:5a:
         88:b7:ee:a5:4a:f2:67:e0:b5:0e:0d:8e:7d:3d:14:7c:8d:0d:
         a0:56:99:6d:64:b9:70:ef:e8:00:24:bd:6d:fa:b9:eb:e2:05:
         f4:4e:bd:a8:75:4e:1e:45:07:e2:d1:c0:b4:73:39:99:68:24:
         3e:f2:b0:b0:0d:60:32:73:27:77:f2:d7:28:aa:d9:c3:f3:97:
         61:38:9f:d2:7f:07:84:f8:f8:cf:e5:9a:b2:61:2b:2e:04:b8:
         31:03:33:86:5e:fc:9c:65:76:b5:11:93:83:d0:55:c0:e6:86:
         ee:62:70:09:80:25:c2:9c:9e:c3:4c:ed:b5:8c:70:17:f6:e8:
         d5:fb:88:1b:c3:9c:ca:9b:6b:e4:20:0a:e3:54:a6:4b:de:67:
         8c:1c:42:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUn0tuWDtjRMPugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzkxZmVlMWMtMWIxZi00NDhjLTg5MzctOWEzMTVlYjhl
OWRlMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZGY1M2M1ZmEtYTVkYi00MjU2LTlhOGMtZjk5NTdjYmQwZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc32kJDJ3eVKK6h0K/wbpSr3dlGND6RkLDtC
azftx0KOqxkmXhZEUdyzWmgraqziZWqixk75cWEVRA8nqbXDnEtehelaSxETTSGn
jf4uERBOxVL6yb3Fgn3BjBjSd59oByVXR3BnPds1MsS9wHlRQkAU877+Ieh9WiXj
lMl57WX45qBJwe7H98VvOjeu7tTmoMKKfmyC1wvQ7rfE8DpVGFmF695JuDjCCzA+
fRK6cnh4O96mNHmHjzH9L8CKA7E19ygHIb8ZhViTi6n2Kx4co7jVNy/c39/4Lxly
3wdfOQ0mmr04d8WSsEsOiXYLpYOymJ3aynDoNikkAPgMoW69lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJGOVxcOOAijOmqfcQ0ZZaqJ6hCwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFm
ZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMxNWViOGU5ZGUvYWZjZDkzYmQtMjUxNS0z
MTAwLWJjY2MtZmI0YjU5MDJiNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzkxZmVlMWMtMWIxZi00NDhjLTg5
MzctOWEzMTVlYjhlOWRlLzc5MWZlZTFjLTFiMWYtNDQ4Yy04OTM3LTlhMzE1ZWI4
ZTlkZS5jcmwwHwYDVR0jBBgwFoAUuk8rbivo6d4SGuS/YzB/Y8OgO9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83OTFmZWUxYy0xYjFmLTQ0OGMtODkzNy05YTMx
NWViOGU5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2tPTk4WbBkH4IyJHjYgQdD/kgKN5eCa4/4r5QL8R5GLi/iGjfg/EPn
vdeWLm7DoX2Aw2zrK5qi+hXECG+SAC/lcg1z2wvEyjgqt0Rl5+qoqtcmXklbJEN3
puYCZ5KAldgtMFHgwTRCfwCLWoi37qVK8mfgtQ4Njn09FHyNDaBWmW1kuXDv6AAk
vW36ueviBfROvah1Th5FB+LRwLRzOZloJD7ysLANYDJzJ3fy1yiq2cPzl2E4n9J/
B4T4+M/lmrJhKy4EuDEDM4Ze/JxldrURk4PQVcDmhu5icAmAJcKcnsNM7bWMcBf2
6NX7iBvDnMqba+QgCuNUpkveZ4wcQvc=
-----END CERTIFICATE-----
Generated at Fri Oct 2 02:09:35 2026 by rpki-client