Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa
File:                     4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa (raw, json)
Hash identifier:          tQfNL4x+7qGbLshkSXGv5hUZyOs5m1dgWa/svxF+P9I=
Subject key identifier:   E2:41:63:AB:F6:57:F7:A8:7E:44:5E:5C:5D:CC:3E:00:9D:55:95:28
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DF4DB8CD182583B0590A1F500
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     5650
IP address blocks:        209.101.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:8c:d1:82:58:3b:05:90:a1:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=879903d6-721a-423d-a16c-c8cc34a78415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:29:06:41:17:85:97:77:80:d2:cf:7b:a2:
                    b2:b5:f2:56:54:ac:25:06:c5:c8:12:a7:70:ca:55:
                    fc:05:93:81:41:18:d2:33:30:ca:97:28:f0:c8:bb:
                    90:9a:2f:43:00:11:95:66:1c:fc:58:e8:4f:3e:52:
                    ce:62:95:55:1e:fc:fc:40:31:a2:ac:07:c7:c0:1e:
                    dd:5a:27:0d:7b:e3:f3:cb:d0:79:16:29:87:1c:06:
                    a0:4a:7a:10:2d:42:6e:b4:e2:73:52:ab:7f:d5:7c:
                    c0:bb:79:0b:d0:c5:30:e8:fd:8c:cf:36:72:25:0f:
                    89:eb:56:1f:7d:d8:53:e8:47:d0:07:6a:d6:77:48:
                    7c:79:d9:ec:ab:3f:5a:77:d2:4f:38:57:4d:a7:92:
                    52:0a:6a:5f:ad:88:21:e0:5e:ab:f1:a6:03:73:34:
                    22:94:81:7f:61:21:8a:d8:3d:a9:6f:cf:8a:a1:2c:
                    48:9e:a0:12:d4:99:e5:ea:25:f7:07:4b:47:49:c7:
                    26:dc:3c:c3:35:dc:59:c3:d8:c9:e2:a9:23:fb:56:
                    fa:c1:c9:97:4e:91:bd:5f:f9:5c:24:97:0f:f5:21:
                    08:0f:7e:cb:b9:00:3b:12:b9:ec:74:f7:cf:62:3c:
                    a4:65:16:76:87:a2:46:1e:10:5f:9c:88:76:7f:f1:
                    d8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:41:63:AB:F6:57:F7:A8:7E:44:5E:5C:5D:CC:3E:00:9D:55:95:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4e9e8a7a-bcbd-3b77-9848-807cc29fe228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:3e:45:88:b7:6e:75:f1:fd:83:f3:40:29:43:65:77:ea:
         3c:8c:26:1f:6f:fe:e9:8f:ec:bd:5a:c3:06:1c:a7:f2:0e:5a:
         fd:59:31:be:6b:98:0c:3d:51:6b:6f:9a:af:c3:72:81:ba:50:
         98:64:bc:4c:16:d4:47:2e:23:54:88:9c:44:f1:fb:cb:51:2e:
         ea:8f:cc:32:87:bf:37:ae:9c:34:9d:e4:ff:50:72:ec:1b:56:
         25:d6:cb:0f:a7:a2:e7:78:2b:91:c2:f5:f2:63:b0:ee:79:e9:
         9f:3f:69:0d:77:38:27:7f:df:73:e1:ae:7f:23:e8:33:c6:c3:
         4e:c3:95:75:47:02:c2:91:44:80:fb:44:ca:0c:2c:68:8d:66:
         36:0b:f8:36:9c:fe:32:a2:aa:5a:85:74:69:af:21:71:64:0b:
         1c:d8:23:a9:15:34:6e:51:74:fc:6d:49:e5:48:5c:a0:1f:29:
         dd:eb:06:77:99:c3:41:94:ed:ca:69:d5:7f:20:7f:f8:db:22:
         f5:78:27:9b:44:1c:fe:63:80:96:c7:14:a9:b6:0f:17:8a:68:
         39:0d:b4:6c:c6:d5:83:c2:d1:80:04:1a:fa:a2:36:fc:a6:af:
         aa:51:8f:36:be:d4:07:7c:56:aa:c5:68:5e:d7:4e:e6:c6:ba:
         e0:59:ee:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024zRglg7BZCh9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ODc5OTAzZDYtNzIxYS00MjNkLWExNmMtYzhjYzM0YTc4NDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5MpBkEXhZd3gNLPe6KytfJWVKwlBsXIEqdw
ylX8BZOBQRjSMzDKlyjwyLuQmi9DABGVZhz8WOhPPlLOYpVVHvz8QDGirAfHwB7d
WicNe+Pzy9B5FimHHAagSnoQLUJutOJzUqt/1XzAu3kL0MUw6P2MzzZyJQ+J61Yf
fdhT6EfQB2rWd0h8ednsqz9ad9JPOFdNp5JSCmpfrYgh4F6r8aYDczQilIF/YSGK
2D2pb8+KoSxInqAS1Jnl6iX3B0tHSccm3DzDNdxZw9jJ4qkj+1b6wcmXTpG9X/lc
JJcP9SEID37LuQA7ErnsdPfPYjykZRZ2h6JGHhBfnIh2f/HYcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJBY6v2V/eofkReXF3MPgCdVZUoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGU5ZThhN2EtYmNiZC0z
Yjc3LTk4NDgtODA3Y2MyOWZlMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuWPkWIt2518f2D80ApQ2V36jyMJh9v/umP7L1awwYcp/IOWv1ZMb5r
mAw9UWtvmq/DcoG6UJhkvEwW1EcuI1SInETx+8tRLuqPzDKHvzeunDSd5P9Qcuwb
ViXWyw+noud4K5HC9fJjsO556Z8/aQ13OCd/33Phrn8j6DPGw07DlXVHAsKRRID7
RMoMLGiNZjYL+Dac/jKiqlqFdGmvIXFkCxzYI6kVNG5RdPxtSeVIXKAfKd3rBneZ
w0GU7cpp1X8gf/jbIvV4J5tEHP5jgJbHFKm2DxeKaDkNtGzG1YPC0YAEGvqiNvym
r6pRjza+1Ad8VqrFaF7XTubGuuBZ7sU=
-----END CERTIFICATE-----
Generated at Wed Jun 3 08:19:12 2026 by rpki-client