Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c15e8976-d111-3493-8cb3-1def47e633e8.roa
File:                     c15e8976-d111-3493-8cb3-1def47e633e8.roa (raw, json)
Hash identifier:          xpxUxSPsXqBGLIYDft1+BsqoKSBJqF4QuaQxz4xd7RQ=
Subject key identifier:   DE:90:62:05:CB:F5:76:BD:DD:91:A6:5F:AA:02:10:75:37:4A:51:D9
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584FA2C882A3FF49E363BA766360
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c15e8976-d111-3493-8cb3-1def47e633e8.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     23316
IP address blocks:        216.193.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:82:a3:ff:49:e3:63:ba:76:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=a8adf396-f6e4-4ba1-9d5d-5a01ba9cba01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:cf:51:33:ca:98:3c:00:6d:44:ec:46:29:
                    ce:7f:e0:c6:3f:51:99:8a:5d:15:dc:c6:64:0d:da:
                    2e:4b:25:7f:9d:07:e8:b4:f3:5c:1d:68:83:d6:7c:
                    e9:a8:4e:f1:ac:93:77:95:0d:85:29:72:c9:c2:f4:
                    fe:da:58:04:0d:2e:62:3d:c0:e5:33:ea:74:73:74:
                    36:c3:61:ed:7f:0c:8d:15:36:1b:50:1d:ae:83:e8:
                    65:20:7d:61:87:0e:55:56:7b:7b:a4:5a:a4:f9:95:
                    f1:5e:98:6d:8a:be:5f:22:5a:49:48:8e:02:e9:37:
                    c9:7a:0e:28:43:7d:d6:e2:41:00:54:81:01:83:88:
                    7d:cb:1e:53:43:d8:3c:41:5f:9b:36:1f:6f:b0:5c:
                    84:0b:21:8a:0e:a8:9d:29:12:b5:49:ce:6d:5a:ff:
                    86:a3:a9:ce:63:af:b0:d8:a9:1e:da:4d:95:bc:51:
                    c5:13:a2:34:01:20:b5:8f:da:f9:fb:0f:22:4d:bd:
                    c0:e1:89:18:c0:7d:c2:ea:09:91:dd:ae:e8:43:56:
                    e1:b9:76:6a:3f:c6:ca:9e:c9:9b:fa:55:24:ed:04:
                    1b:06:aa:1c:cb:71:f1:ba:13:59:10:de:f5:d5:9f:
                    14:a1:1e:7c:a6:0a:91:5f:40:00:24:3f:cc:25:91:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:90:62:05:CB:F5:76:BD:DD:91:A6:5F:AA:02:10:75:37:4A:51:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/c15e8976-d111-3493-8cb3-1def47e633e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.193.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:2f:35:f9:ba:77:f1:eb:b7:89:74:ad:b3:25:ea:d5:79:
         27:cc:51:96:a5:b2:83:4f:8c:6a:04:67:e5:c6:b9:a0:9f:77:
         5f:5c:f3:54:af:e2:7e:b0:a6:3e:97:db:03:26:0a:4d:e3:a5:
         23:32:bc:12:8a:b8:2d:75:16:26:5f:4c:25:99:8f:1b:bf:af:
         c6:9d:76:5d:18:67:f6:05:73:6e:3d:fd:5a:97:07:8e:2a:22:
         c7:b3:43:23:78:f1:fc:6f:dd:65:1b:e7:52:6c:70:d0:dc:ce:
         74:6b:5b:64:79:fc:e2:2b:c3:0b:8c:cc:56:38:3d:01:52:74:
         d7:51:69:69:a2:fb:a0:3d:af:f7:b1:4d:40:40:e3:40:0b:e1:
         2b:7e:5e:55:5b:f0:3c:91:48:17:2b:80:34:5c:7d:95:e6:e4:
         f9:db:32:ce:50:b1:7b:a2:68:0b:fc:d5:2f:81:90:b2:cc:d5:
         56:42:f4:71:96:a7:45:37:a7:7a:3a:d0:f7:c3:e7:78:b8:3f:
         63:a3:e3:cb:6e:fb:03:16:27:a3:69:e4:db:15:a2:f0:c7:fe:
         e4:d2:ad:0f:22:88:3a:45:8e:bd:1b:8e:8e:af:85:2e:37:e5:
         49:8c:46:22:29:3f:a6:54:bc:8b:d7:dc:99:07:e5:1c:9e:9d:
         c3:a0:be:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyIKj/0njY7p2Y2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk
YThhZGYzOTYtZjZlNC00YmExLTlkNWQtNWEwMWJhOWNiYTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHHPUTPKmDwAbUTsRinOf+DGP1GZil0V3MZk
DdouSyV/nQfotPNcHWiD1nzpqE7xrJN3lQ2FKXLJwvT+2lgEDS5iPcDlM+p0c3Q2
w2HtfwyNFTYbUB2ug+hlIH1hhw5VVnt7pFqk+ZXxXphtir5fIlpJSI4C6TfJeg4o
Q33W4kEAVIEBg4h9yx5TQ9g8QV+bNh9vsFyECyGKDqidKRK1Sc5tWv+Go6nOY6+w
2Kke2k2VvFHFE6I0ASC1j9r5+w8iTb3A4YkYwH3C6gmR3a7oQ1bhuXZqP8bKnsmb
+lUk7QQbBqocy3HxuhNZEN711Z8UoR58pgqRX0AAJD/MJZHQVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6QYgXL9Xa93ZGmX6oCEHU3SlHZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYzE1ZTg5NzYtZDExMS0z
NDkzLThjYjMtMWRlZjQ3ZTYzM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MHMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1gLzX5unfx67eJdK2zJerVeSfMUZalsoNPjGoEZ+XGuaCfd19c81Sv
4n6wpj6X2wMmCk3jpSMyvBKKuC11FiZfTCWZjxu/r8addl0YZ/YFc249/VqXB44q
IsezQyN48fxv3WUb51JscNDcznRrW2R5/OIrwwuMzFY4PQFSdNdRaWmi+6A9r/ex
TUBA40AL4St+XlVb8DyRSBcrgDRcfZXm5PnbMs5QsXuiaAv81S+BkLLM1VZC9HGW
p0U3p3o60PfD53i4P2Oj48tu+wMWJ6Np5NsVovDH/uTSrQ8iiDpFjr0bjo6vhS43
5UmMRiIpP6ZUvIvX3JkH5RyencOgvrE=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:02:56 2026 by rpki-client