Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa
File:                     d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa (raw, json)
Hash identifier:          EwFGjYYsbD/X2Hd7dCt6DnXvYZ+Fn+Xx/Ix/HVd7buM=
Subject key identifier:   44:CC:D2:74:6E:29:0C:F8:78:5A:61:17:BB:52:5E:C0:7C:25:3B:F4
Certificate issuer:       /CN=b927dc15-9316-467a-b50d-d6b361478436
Certificate serial:       010D0C9F4328584D8EF57C787D995A4DFF038680
Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     2901
IP address blocks:        192.133.99.0/24 maxlen: 24
                          192.150.253.0/24 maxlen: 24
                          198.49.160.0/24 maxlen: 24
                          198.59.96.0/24 maxlen: 24
                          198.59.98.0/23 maxlen: 24
                          198.59.100.0/22 maxlen: 24
                          198.59.104.0/23 maxlen: 24
                          198.59.109.0/24 maxlen: 24
                          198.59.110.0/23 maxlen: 24
                          198.59.112.0/23 maxlen: 24
                          198.59.114.0/24 maxlen: 24
                          198.59.116.0/22 maxlen: 24
                          198.59.120.0/21 maxlen: 24
                          198.187.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:7c:78:7d:99:5a:4d:ff:03:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=e6de278e-4f37-4e16-8606-9fb54690195e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:33:ac:42:6d:9d:58:e8:33:57:6e:9b:d7:
                    34:f9:e3:46:28:05:52:37:32:27:43:56:4a:9a:07:
                    b1:47:22:fe:43:05:58:4d:5f:ea:9c:75:a2:a0:0e:
                    b1:72:b6:c4:bf:bc:0f:46:6b:1c:ac:bd:4f:eb:85:
                    17:b7:4c:a4:53:7c:0f:36:1d:da:39:f6:d3:c6:63:
                    c2:64:3d:71:07:89:4e:e9:ec:c2:58:f9:50:06:0a:
                    4c:25:7e:92:33:a2:bf:21:1d:cb:6c:4b:91:db:27:
                    9e:76:8d:14:b5:39:e2:bb:b9:ce:4a:c8:f1:1f:b6:
                    b7:4d:ee:cf:f1:75:24:37:ea:eb:50:06:33:ea:6c:
                    82:d2:2e:33:77:96:a2:39:df:f8:2e:b3:26:f6:73:
                    1c:d3:af:8b:c9:6f:66:d9:90:77:79:eb:d2:eb:17:
                    97:df:f6:bc:d1:37:09:9d:ff:3b:4c:ca:bb:e1:c7:
                    f8:5b:84:71:fe:35:0b:90:41:e9:7b:32:94:02:04:
                    ac:c0:cc:f8:f0:1d:26:2e:7a:df:94:03:17:87:3d:
                    55:2b:a4:76:69:f7:97:88:96:58:ff:cc:64:f8:f0:
                    10:06:c7:e1:9d:ea:79:7c:65:ca:e5:b8:ce:d6:76:
                    77:d1:82:0d:79:cb:49:f7:5a:f9:b4:42:96:3a:07:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CC:D2:74:6E:29:0C:F8:78:5A:61:17:BB:52:5E:C0:7C:25:3B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/d14d0d3e-1701-3a5b-9ca7-34aa336c65db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.99.0/24
                  192.150.253.0/24
                  198.49.160.0/24
                  198.59.96.0/24
                  198.59.98.0-198.59.105.255
                  198.59.109.0-198.59.114.255
                  198.59.116.0-198.59.127.255
                  198.187.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:d9:07:cc:e7:5a:dd:18:57:22:7c:6c:44:1d:fd:71:70:
         66:ad:3c:e6:3f:eb:62:ac:a8:05:2a:46:92:a5:91:66:2a:3d:
         57:31:ab:45:96:8b:ed:ff:4c:c6:f9:ad:94:2c:a7:b3:6b:e0:
         a7:da:49:e3:4a:f9:a3:19:c4:76:32:b2:26:73:d1:b5:73:6e:
         53:80:fe:ad:80:df:de:da:83:67:af:12:d1:29:c8:17:22:e6:
         ce:f0:d6:87:3a:6e:6e:25:2a:a7:c6:b6:cb:44:81:40:be:a4:
         1e:6d:b0:90:fd:b6:f7:5e:32:81:ef:13:ad:b0:db:2c:f9:26:
         d3:cf:75:ac:f3:0a:38:fa:11:b8:63:c3:49:48:93:cd:6d:bd:
         fb:e6:5c:05:1b:a1:29:bb:50:d0:a2:35:d4:f4:27:e2:28:6b:
         74:94:dd:79:86:53:04:ca:f7:1f:70:80:8f:fd:25:1e:de:ec:
         0f:8f:17:87:d2:91:bc:83:86:1e:b2:db:96:dd:42:97:1d:eb:
         3d:ff:e5:15:fc:ad:41:55:cf:69:61:05:87:4f:a3:0f:c2:c5:
         59:fb:45:ba:5d:e5:d2:4f:00:16:13:36:54:93:65:b3:82:43:
         f2:d3:d0:b9:db:40:2e:e8:ec:60:e5:1d:a4:f8:1e:eb:dd:0a:
         80:65:98:4f
-----BEGIN CERTIFICATE-----
MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWE2O9Xx4fZlaTf8DhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4
NDM2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZTZkZTI3OGUtNGYzNy00ZTE2LTg2MDYtOWZiNTQ2OTAxOTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4IzrEJtnVjoM1dum9c0+eNGKAVSNzInQ1ZK
mgexRyL+QwVYTV/qnHWioA6xcrbEv7wPRmscrL1P64UXt0ykU3wPNh3aOfbTxmPC
ZD1xB4lO6ezCWPlQBgpMJX6SM6K/IR3LbEuR2yeedo0UtTniu7nOSsjxH7a3Te7P
8XUkN+rrUAYz6myC0i4zd5aiOd/4LrMm9nMc06+LyW9m2ZB3eevS6xeX3/a80TcJ
nf87TMq74cf4W4Rx/jULkEHpezKUAgSswMz48B0mLnrflAMXhz1VK6R2afeXiJZY
/8xk+PAQBsfhnep5fGXK5bjO1nZ30YINectJ91r5tEKWOgehnwIDAQABo4IDlzCC
A5MwHQYDVR0OBBYEFETM0nRuKQz4eFphF7tSXsB8JTv0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3
ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvZDE0ZDBkM2UtMTcwMS0z
YTViLTljYTctMzRhYTMzNmM2NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkyN2RjMTUtOTMxNi00NjdhLWI1
MGQtZDZiMzYxNDc4NDM2L2I5MjdkYzE1LTkzMTYtNDY3YS1iNTBkLWQ2YjM2MTQ3
ODQzNi5jcmwwHwYDVR0jBBgwFoAUmluCqADf1iMqRZ56S1UX9Bjlg+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIz
NjE0Nzg0MzYuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAwIVjAwQA
wJb9AwQAxjGgAwQAxjtgMAwDBAHGO2IDBAHGO2gwDAMEAMY7bQMEAMY7cjAMAwQC
xjt0AwQHxjsAAwQAxrv7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEwI2QfM51rdGFcifGxEHf1xcGatPOY/
62KsqAUqRpKlkWYqPVcxq0WWi+3/TMb5rZQsp7Nr4KfaSeNK+aMZxHYysiZz0bVz
blOA/q2A397ag2evEtEpyBci5s7w1oc6bm4lKqfGtstEgUC+pB5tsJD9tvdeMoHv
E62w2yz5JtPPdazzCjj6Ebhjw0lIk81tvfvmXAUboSm7UNCiNdT0J+Ioa3SU3XmG
UwTK9x9wgI/9JR7e7A+PF4fSkbyDhh6y25bdQpcd6z3/5RX8rUFVz2lhBYdPow/C
xVn7Rbpd5dJPABYTNlSTZbOCQ/LT0LnbQC7o7GDlHaT4HuvdCoBlmE8=
-----END CERTIFICATE-----
Generated at Thu May 7 01:17:56 2026 by rpki-client