Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
File:                     53331bc6-138c-3866-b898-40211d5855b6.roa (raw, json)
Hash identifier:          Ukubgeu4UDYeMMpWrfthF2SNheMPuJwuUMfrsjnKtA4=
Subject key identifier:   F1:0F:82:73:23:99:58:7C:6A:A3:C1:23:21:E7:89:EC:D3:5B:CD:FE
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584EC20C718F1ADBE456CEA92180
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     5511
IP address blocks:        167.100.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:71:8f:1a:db:e4:56:ce:a9:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=abf47556-b5fe-47b6-8981-6bc31a9f4bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:ab:6c:90:6c:1d:13:a9:44:93:4f:53:3f:
                    09:8f:59:a1:66:7a:aa:62:4c:6a:fe:9e:e9:b0:f7:
                    b8:ef:0f:0b:d4:c3:15:d7:df:c7:b2:49:44:9c:d7:
                    86:ee:eb:d2:26:7a:85:f8:bc:1f:bf:0c:25:b8:81:
                    cf:05:40:ca:1b:58:82:b5:81:38:5d:81:9a:3b:b2:
                    79:f0:b4:8a:62:46:74:07:23:41:4f:eb:5d:8a:98:
                    b0:5e:ad:6e:53:59:16:9e:20:ff:84:a1:5d:c8:8b:
                    f2:1d:2e:76:34:86:de:e5:bb:eb:fb:4e:09:35:f5:
                    16:89:4a:76:29:de:0b:0c:0b:5e:cd:26:2a:38:e4:
                    64:3e:79:6b:60:66:a9:08:c8:50:b7:e7:f7:e2:d2:
                    66:5f:03:f6:65:92:b9:2e:e2:40:d9:bf:f9:8e:8a:
                    ce:dc:b9:0e:30:e3:2f:6e:66:1f:c0:f3:77:7d:00:
                    98:b7:92:fd:d6:c4:9d:19:23:2f:24:da:79:a4:6e:
                    1a:49:bb:2a:f2:4a:d0:51:aa:c9:16:45:a3:cb:6e:
                    1a:b8:f4:30:2e:1a:86:d2:a7:7a:a5:90:c6:1f:77:
                    5b:c4:ea:60:91:ef:ed:19:30:6d:20:e1:5c:58:85:
                    29:4d:71:a2:bd:8e:6c:be:8c:87:75:ad:02:5a:09:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0F:82:73:23:99:58:7C:6A:A3:C1:23:21:E7:89:EC:D3:5B:CD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:ab:01:9a:2f:d5:c7:ba:96:d4:06:c9:b8:44:b8:0a:12:
         59:84:f6:2c:bc:aa:ca:d2:3c:32:44:f0:11:d0:bf:a9:fc:2a:
         01:57:93:6a:5f:3b:00:3a:6d:a9:4b:c2:6d:99:6e:ac:cd:67:
         b8:1d:2f:4f:15:da:ae:56:b8:39:33:8b:b9:42:e7:8e:c0:c2:
         43:a1:e7:fc:c7:92:cf:3e:b4:b2:fe:d5:c3:d6:d0:19:1c:37:
         d4:e7:73:a4:bd:a4:29:50:c8:83:81:db:04:20:d1:0e:8b:96:
         04:9f:5a:86:ed:af:b6:bb:49:87:66:c0:b0:ea:ae:85:53:9b:
         3c:de:21:35:40:d8:f4:ea:92:dd:15:25:4f:52:14:26:4e:1a:
         e0:59:c8:5d:ca:c2:56:f1:2c:4d:5b:d2:1d:19:28:9b:d3:fd:
         e7:4d:72:92:a4:92:42:60:63:fa:83:6c:b2:37:8a:4f:77:ba:
         ed:24:88:17:5f:24:b1:d2:51:9a:ea:9e:11:d0:b5:c1:c4:e5:
         14:18:eb:c8:fe:51:c1:da:cc:6e:50:c3:88:39:98:6e:37:b8:
         48:a1:b7:a9:34:4e:fa:06:4c:90:de:e9:48:be:d9:a3:f1:b0:
         27:e9:ef:eb:79:cd:42:cd:84:63:e2:8c:d1:ca:0e:de:c8:42:
         f9:28:e2:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHGPGtvkVs6pIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw
MWIxMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
YWJmNDc1NTYtYjVmZS00N2I2LTg5ODEtNmJjMzFhOWY0YmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndOrbJBsHROpRJNPUz8Jj1mhZnqqYkxq/p7p
sPe47w8L1MMV19/HsklEnNeG7uvSJnqF+LwfvwwluIHPBUDKG1iCtYE4XYGaO7J5
8LSKYkZ0ByNBT+tdipiwXq1uU1kWniD/hKFdyIvyHS52NIbe5bvr+04JNfUWiUp2
Kd4LDAtezSYqOORkPnlrYGapCMhQt+f34tJmXwP2ZZK5LuJA2b/5jorO3LkOMOMv
bmYfwPN3fQCYt5L91sSdGSMvJNp5pG4aSbsq8krQUarJFkWjy24auPQwLhqG0qd6
pZDGH3dbxOpgke/tGTBtIOFcWIUpTXGivY5svoyHda0CWgmCtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEPgnMjmVh8aqPBIyHniezTW83+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj
NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNTMzMzFiYzYtMTM4Yy0z
ODY2LWI4OTgtNDAyMTFkNTg1NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3
YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy
MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz
MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp2RhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1kqwGaL9XHupbUBsm4RLgKElmE9iy8qsrSPDJE8BHQv6n8KgFXk2pf
OwA6balLwm2ZbqzNZ7gdL08V2q5WuDkzi7lC547AwkOh5/zHks8+tLL+1cPW0Bkc
N9Tnc6S9pClQyIOB2wQg0Q6LlgSfWobtr7a7SYdmwLDqroVTmzzeITVA2PTqkt0V
JU9SFCZOGuBZyF3KwlbxLE1b0h0ZKJvT/edNcpKkkkJgY/qDbLI3ik93uu0kiBdf
JLHSUZrqnhHQtcHE5RQY68j+UcHazG5Qw4g5mG43uEiht6k0TvoGTJDe6Ui+2aPx
sCfp7+t5zULNhGPijNHKDt7IQvko4lo=
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:26:06 2026 by rpki-client