Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/910bdeba-1a15-3ff4-86e3-ada51b130a69.roa
File:                     910bdeba-1a15-3ff4-86e3-ada51b130a69.roa (raw, json)
Hash identifier:          Ch7LZeYCI/KsBfsLJwE48uMhbgIWnYEDAvHCdQ0gBLQ=
Subject key identifier:   3A:DE:05:E8:22:37:AA:17:CC:13:2D:63:4F:A3:ED:10:35:47:FD:0C
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F6D0BDBCC1ABF9AAFD92FCBF0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/910bdeba-1a15-3ff4-86e3-ada51b130a69.roa
Signing time:             Wed 07 Oct 2026 19:02:27 +0000
ROA not before:           Wed 07 Oct 2026 19:02:27 +0000
ROA not after:            Tue 05 Jan 2027 20:02:27 +0000
asID:                     63023
IP address blocks:        204.28.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:0b:db:cc:1a:bf:9a:af:d9:2f:cb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Oct  7 19:02:27 2026 GMT
            Not After : Jan  5 20:02:27 2027 GMT
        Subject: CN=488452ef-6964-40c8-a879-6b2850a01724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:d9:b6:c0:3f:e9:a0:4a:2e:9f:5b:ac:a8:
                    cf:89:ed:7d:55:c2:dd:1f:e5:5c:69:14:27:e9:7f:
                    37:30:ff:e8:77:9c:04:b7:79:4c:31:19:f9:78:93:
                    88:bf:d1:48:38:2e:29:12:6c:4c:f2:86:e7:08:e5:
                    60:e7:aa:20:ce:b3:8f:32:2c:45:ef:84:25:72:ef:
                    2d:fd:b0:ce:96:c0:f0:4b:aa:89:b8:b3:96:58:7d:
                    53:17:40:a6:91:10:22:d5:7e:85:3b:77:3d:23:63:
                    37:aa:aa:cd:14:82:9f:95:c3:21:18:53:d1:95:b9:
                    1f:61:7e:19:34:a8:5f:19:c8:a5:60:88:71:90:aa:
                    61:96:cf:86:9b:7b:f3:03:d4:04:2d:f5:29:c2:0b:
                    77:9d:9e:ad:fe:78:73:cd:3e:78:65:f9:49:a9:e1:
                    cf:f7:78:4a:b4:f7:a3:05:ed:86:16:fd:94:68:49:
                    31:24:98:b1:cb:00:01:c6:0b:5d:cb:9d:a8:ae:02:
                    a2:fb:a9:57:f9:b0:6c:c9:2e:da:dd:5b:bc:9a:a0:
                    f0:83:17:3c:ba:c0:9c:37:ff:13:dd:c6:dc:05:df:
                    9f:0d:eb:89:ba:19:90:5c:78:5a:ce:fe:bc:ae:90:
                    d0:a3:1d:d3:66:27:48:ed:77:75:b0:3b:80:ed:5b:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DE:05:E8:22:37:AA:17:CC:13:2D:63:4F:A3:ED:10:35:47:FD:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/910bdeba-1a15-3ff4-86e3-ada51b130a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.28.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:89:f6:d2:d8:af:1d:af:7d:bc:26:c0:4c:93:99:97:86:
         7a:5d:15:9d:19:db:6e:da:b4:de:13:53:24:6b:d4:8e:45:d0:
         8e:47:44:10:cd:24:b0:91:cf:e4:be:e5:3f:0c:b5:4b:27:94:
         b8:8a:e8:8f:4f:f4:db:2d:e6:7b:f7:f8:f5:59:26:e8:d7:ff:
         db:7a:00:32:e3:37:5a:d1:35:c3:05:fd:cd:03:48:a7:e0:cc:
         5f:3a:34:31:3a:1e:6d:22:a7:87:b1:94:e9:3a:43:6c:bc:6e:
         8e:e3:10:f3:2a:90:2a:a7:c2:f2:d8:a1:1f:a8:2a:b3:df:fd:
         fd:43:e6:f5:40:34:7f:c1:3c:c1:85:b6:dd:8f:b9:4a:5c:94:
         66:b0:28:ba:68:21:ff:8f:a9:de:81:7a:0e:01:00:c6:96:69:
         e0:04:0a:c5:e8:d1:68:c1:94:98:1b:61:19:2b:d7:1b:89:49:
         8a:2b:fa:82:d2:f0:0e:88:97:66:a6:cc:f0:e3:04:a9:f8:64:
         aa:1a:0d:30:0a:bf:11:70:a0:e6:3c:14:95:7c:68:1c:d6:8d:
         17:3c:14:50:0d:ed:1b:09:5a:e6:46:80:8c:97:82:27:19:77:
         b2:91:13:66:3d:15:71:8d:04:e1:1d:ca:e8:1d:b0:b0:80:3b:
         ca:d6:41:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tC9vMGr+ar9kvy/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MTAwNzE5MDIyN1oXDTI3MDEwNTIwMDIyN1owLzEtMCsGA1UEAxMk
NDg4NDUyZWYtNjk2NC00MGM4LWE4NzktNmIyODUwYTAxNzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw/ZtsA/6aBKLp9brKjPie19VcLdH+VcaRQn
6X83MP/od5wEt3lMMRn5eJOIv9FIOC4pEmxM8obnCOVg56ogzrOPMixF74Qlcu8t
/bDOlsDwS6qJuLOWWH1TF0CmkRAi1X6FO3c9I2M3qqrNFIKflcMhGFPRlbkfYX4Z
NKhfGcilYIhxkKphls+Gm3vzA9QELfUpwgt3nZ6t/nhzzT54ZflJqeHP93hKtPej
Be2GFv2UaEkxJJixywABxgtdy52orgKi+6lX+bBsyS7a3Vu8mqDwgxc8usCcN/8T
3cbcBd+fDeuJuhmQXHhazv68rpDQox3TZidI7Xd1sDuA7VvfxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDreBegiN6oXzBMtY0+j7RA1R/0MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTEwYmRlYmEtMWExNS0z
ZmY0LTg2ZTMtYWRhNTFiMTMwYTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVfifbS2K8dr328JsBMk5mXhnpdFZ0Z227atN4TUyRr1I5F0I5HRBDN
JLCRz+S+5T8MtUsnlLiK6I9P9Nst5nv3+PVZJujX/9t6ADLjN1rRNcMF/c0DSKfg
zF86NDE6Hm0ip4exlOk6Q2y8bo7jEPMqkCqnwvLYoR+oKrPf/f1D5vVANH/BPMGF
tt2PuUpclGawKLpoIf+Pqd6Beg4BAMaWaeAECsXo0WjBlJgbYRkr1xuJSYor+oLS
8A6Il2amzPDjBKn4ZKoaDTAKvxFwoOY8FJV8aBzWjRc8FFAN7RsJWuZGgIyXgicZ
d7KRE2Y9FXGNBOEdyugdsLCAO8rWQXU=
-----END CERTIFICATE-----
Generated at Mon Oct 19 00:10:34 2026 by rpki-client