Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa
File:                     38446997-5291-39e4-9e78-1e5c939d64cc.roa (raw, json)
Hash identifier:          lwi1I3a5/aP0vgWYbtYHLb6axEbd+bHXg2/e6LYAA2k=
Subject key identifier:   5F:07:C2:A7:FF:9C:34:E2:8C:5B:11:C6:0B:53:35:94:BD:24:17:68
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584EE0C20AA91A50D18E001352B8
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     19257
IP address blocks:        162.222.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:0a:a9:1a:50:d1:8e:00:13:52:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=5bebde6d-f3f5-49d7-bc06-45ef9ff736fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:47:e9:62:b8:1a:a0:ce:76:06:4e:2d:79:
                    ce:a7:56:47:93:5e:42:44:0b:b3:c0:0f:5d:d4:c0:
                    15:2b:f0:d2:f5:36:5e:20:92:34:b8:e7:33:bd:8f:
                    f2:a2:28:e1:4e:0a:41:91:a8:7a:ec:77:f9:de:f2:
                    ba:f9:85:82:01:1c:a9:22:a2:d7:8f:7b:6a:32:d0:
                    53:c4:5b:d2:27:7f:e4:c5:57:a2:f1:4e:d9:7d:4c:
                    1a:5a:a2:0d:cc:a6:8b:1a:70:93:1c:de:d1:58:0c:
                    21:63:10:b6:84:f8:f8:60:ac:e2:bf:09:a6:03:05:
                    e6:6f:e8:e0:07:dd:c4:7f:65:d7:e7:f8:f6:ef:16:
                    40:75:62:d9:e1:73:0a:83:ad:ef:7a:93:95:a7:3e:
                    66:34:6c:f4:b2:19:4a:da:d4:4f:f8:53:6b:eb:0d:
                    77:1e:94:db:ab:50:eb:19:aa:4f:2a:22:cc:2a:eb:
                    68:91:c9:b1:e3:9b:aa:e3:fd:f3:e2:4f:36:d9:9b:
                    0f:f3:33:ab:cf:5a:e9:d8:f7:b7:38:c0:7f:f1:86:
                    bc:7d:e2:3d:0a:93:ca:d3:c1:e0:4a:07:93:23:55:
                    5d:45:2e:13:a8:2c:97:e7:66:46:ef:6c:14:e9:37:
                    6e:d8:3e:09:10:96:17:5b:11:a7:e0:7e:9d:67:5d:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:C2:A7:FF:9C:34:E2:8C:5B:11:C6:0B:53:35:94:BD:24:17:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/38446997-5291-39e4-9e78-1e5c939d64cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:57:69:69:ff:f4:8d:29:11:7c:4f:d4:9f:72:d4:66:08:ed:
         2e:f4:49:39:a2:ad:a6:ab:7c:ff:2d:e7:d6:dc:cd:75:07:c4:
         5a:0b:8d:6f:e0:00:0c:fa:11:b7:90:05:f0:05:f4:02:58:fe:
         25:03:d3:39:43:b9:fb:17:b3:36:e3:35:52:9a:c6:29:f9:60:
         9c:c1:25:3d:a7:21:27:ae:3a:33:d7:72:c9:32:7b:ce:e4:2a:
         8f:98:d3:0f:52:22:a5:60:ce:30:c4:48:79:77:30:b5:f0:25:
         d1:4b:e9:41:95:29:4d:a9:6a:28:56:73:2b:25:77:e9:a3:d8:
         3e:bc:4d:8a:26:fb:dc:16:c6:ef:84:cb:2b:66:38:56:25:b6:
         52:8f:ca:dc:29:47:1b:00:45:3b:c2:10:38:f6:c7:0b:14:86:
         dd:99:ec:ab:ef:a2:94:b1:37:ea:44:32:d1:a9:01:6b:69:27:
         ba:c4:f2:1d:8d:b7:39:87:bf:81:a6:3b:64:fb:fb:b2:e6:35:
         4b:d3:42:4c:5d:b3:5b:20:ef:35:7a:0f:2b:48:f5:dc:6b:05:
         86:5a:9e:dc:fe:8c:44:7a:b6:54:5c:24:82:c4:ed:a0:c7:78:
         b9:98:9f:63:35:94:e9:ee:27:21:bb:f7:08:8c:09:b8:49:34:
         ac:99:87:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgqpGlDRjgATUrgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NWJlYmRlNmQtZjNmNS00OWQ3LWJjMDYtNDVlZjlmZjczNmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpVH6WK4GqDOdgZOLXnOp1ZHk15CRAuzwA9d
1MAVK/DS9TZeIJI0uOczvY/yoijhTgpBkah67Hf53vK6+YWCARypIqLXj3tqMtBT
xFvSJ3/kxVei8U7ZfUwaWqINzKaLGnCTHN7RWAwhYxC2hPj4YKzivwmmAwXmb+jg
B93Ef2XX5/j27xZAdWLZ4XMKg63vepOVpz5mNGz0shlK2tRP+FNr6w13HpTbq1Dr
GapPKiLMKutokcmx45uq4/3z4k822ZsP8zOrz1rp2Pe3OMB/8Ya8feI9CpPK08Hg
SgeTI1VdRS4TqCyX52ZG72wU6Tdu2D4JEJYXWxGn4H6dZ13E7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8Hwqf/nDTijFsRxgtTNZS9JBdoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvMzg0NDY5OTctNTI5MS0z
OWU0LTllNzgtMWU1YzkzOWQ2NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot5cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNXaWn/9I0pEXxP1J9y1GYI7S70STmiraarfP8t59bczXUHxFoLjW/g
AAz6EbeQBfAF9AJY/iUD0zlDufsXszbjNVKaxin5YJzBJT2nISeuOjPXcskye87k
Ko+Y0w9SIqVgzjDESHl3MLXwJdFL6UGVKU2paihWcysld+mj2D68TYom+9wWxu+E
yytmOFYltlKPytwpRxsARTvCEDj2xwsUht2Z7KvvopSxN+pEMtGpAWtpJ7rE8h2N
tzmHv4GmO2T7+7LmNUvTQkxds1sg7zV6DytI9dxrBYZantz+jER6tlRcJILE7aDH
eLmYn2M1lOnuJyG79wiMCbhJNKyZh/A=
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:58:49 2026 by rpki-client