Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa
File:                     8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa (raw, json)
Hash identifier:          DZOUhk2FYB++oU5c7gVz7msh0RJWzXC5QNbZovfyNN4=
Subject key identifier:   3B:29:B5:93:1C:47:45:18:25:A7:77:DB:E9:96:30:D7:6C:28:08:F8
Certificate issuer:       /CN=6de2cf1a-17f5-41d7-8356-6e88905671e0
Certificate serial:       010D0C9F4328584EA795D724A75046665F423EA0
Authority key identifier: CE:33:74:CA:DC:4D:AC:93:BA:3D:80:D3:75:C9:7F:11:FF:AD:B5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399955
IP address blocks:        199.30.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:d7:24:a7:50:46:66:5f:42:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2cf1a-17f5-41d7-8356-6e88905671e0
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fddb55d6-5a8b-4b4c-b14c-1bfd4f7ae51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d0:07:61:2d:36:92:3b:e3:9a:20:ca:e0:84:
                    ff:f2:fd:31:e6:21:c1:88:4c:52:31:7b:9c:cd:6f:
                    5f:15:d2:50:31:b0:84:8a:b8:78:a4:84:f2:90:0a:
                    d7:c0:18:a8:cc:07:3e:8d:46:20:4c:61:4e:4a:7e:
                    05:bb:0b:96:09:9a:88:93:37:fa:09:53:2d:0c:b2:
                    2f:00:36:56:ec:50:9c:db:e2:9e:3f:44:d1:6b:aa:
                    e3:65:7f:a6:da:c3:a4:4b:19:ba:3c:9f:bc:2e:fa:
                    d8:ac:65:fd:4e:dc:46:95:89:ba:94:af:4b:c7:3c:
                    f9:2d:03:82:c4:be:6c:70:a7:5f:c3:0f:8a:37:57:
                    cc:d2:35:af:bb:c3:29:2e:3e:ad:74:17:8f:41:23:
                    9e:92:8b:fb:9f:fd:91:42:66:82:55:b7:2e:6d:18:
                    46:cc:ba:96:fd:55:5f:c2:62:2e:93:1d:5c:4a:76:
                    af:1c:21:fc:73:77:67:30:00:0f:74:47:03:78:c0:
                    7c:6f:37:43:87:ad:f7:df:92:4d:21:e9:73:98:c2:
                    14:58:78:e1:34:ef:85:14:14:20:8d:7e:68:31:50:
                    b8:a1:4e:66:34:fe:13:c1:9b:07:12:00:11:90:96:
                    22:4d:ba:4e:4e:f6:e1:b9:9a:ad:58:8b:9c:a3:3d:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:B5:93:1C:47:45:18:25:A7:77:DB:E9:96:30:D7:6C:28:08:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/8e6918c4-1c91-315f-8d61-3e2b1841aa7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0/6de2cf1a-17f5-41d7-8356-6e88905671e0.crl

            X509v3 Authority Key Identifier:
                keyid:CE:33:74:CA:DC:4D:AC:93:BA:3D:80:D3:75:C9:7F:11:FF:AD:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6de2cf1a-17f5-41d7-8356-6e88905671e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:64:c3:97:5b:5f:87:e9:ab:c6:6f:18:a0:40:6d:0f:1f:
         2b:28:49:d1:d6:9a:9b:8f:9f:38:29:a4:a8:1f:05:9e:28:7e:
         00:64:fe:6c:c5:75:42:87:b1:8c:eb:40:d7:e4:5d:7f:81:ba:
         2d:47:1b:4f:eb:16:8e:64:11:a6:14:10:cb:bf:26:c5:eb:92:
         34:33:57:bf:5a:61:72:84:09:98:2d:ad:fa:0b:05:5d:0f:2b:
         44:c3:c5:a9:d6:fa:eb:86:bd:d1:1e:36:a9:20:43:1e:2c:31:
         6d:8d:61:44:cb:7e:a0:cf:02:c4:ec:a5:af:68:a6:da:f0:97:
         0c:e0:73:0d:12:62:37:40:7e:10:15:ed:b3:60:05:df:a3:63:
         f9:ec:1f:db:d5:bd:05:7e:50:e4:28:54:1c:df:5a:fd:a2:e1:
         8d:8d:d5:89:17:65:79:45:15:2f:cb:75:9c:a7:1d:4e:82:dd:
         56:0b:01:32:ae:1f:45:02:65:7e:aa:92:74:ca:75:a0:12:6a:
         7a:63:50:df:58:39:f8:d9:fc:15:3a:85:7c:5b:ba:c0:cf:45:
         31:6a:2d:80:46:9b:1b:56:3d:31:cb:c7:d5:56:b0:5a:28:39:
         b2:ee:fb:d5:92:c5:f3:c4:26:32:b3:a2:24:68:f5:d2:d3:83:
         a4:60:d7:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nldckp1BGZl9CPqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRlMmNmMWEtMTdmNS00MWQ3LTgzNTYtNmU4ODkwNTY3
MWUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmRkYjU1ZDYtNWE4Yi00YjRjLWIxNGMtMWJmZDRmN2FlNTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutAHYS02kjvjmiDK4IT/8v0x5iHBiExSMXuc
zW9fFdJQMbCEirh4pITykArXwBiozAc+jUYgTGFOSn4FuwuWCZqIkzf6CVMtDLIv
ADZW7FCc2+KeP0TRa6rjZX+m2sOkSxm6PJ+8LvrYrGX9TtxGlYm6lK9Lxzz5LQOC
xL5scKdfww+KN1fM0jWvu8MpLj6tdBePQSOekov7n/2RQmaCVbcubRhGzLqW/VVf
wmIukx1cSnavHCH8c3dnMAAPdEcDeMB8bzdDh63335JNIelzmMIUWHjhNO+FFBQg
jX5oMVC4oU5mNP4TwZsHEgARkJYiTbpOTvbhuZqtWIucoz1JhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsptZMcR0UYJad32+mWMNdsKAj4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZGUy
Y2YxYS0xN2Y1LTQxZDctODM1Ni02ZTg4OTA1NjcxZTAvOGU2OTE4YzQtMWM5MS0z
MTVmLThkNjEtM2UyYjE4NDFhYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmRlMmNmMWEtMTdmNS00MWQ3LTgz
NTYtNmU4ODkwNTY3MWUwLzZkZTJjZjFhLTE3ZjUtNDFkNy04MzU2LTZlODg5MDU2
NzFlMC5jcmwwHwYDVR0jBBgwFoAUzjN0ytxNrJO6PYDTdcl/Ef+ttbUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZGUyY2YxYS0xN2Y1LTQxZDctODM1Ni02ZTg4
OTA1NjcxZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxx5cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLlZMOXW1+H6avGbxigQG0PHysoSdHWmpuPnzgppKgfBZ4ofgBk/mzF
dUKHsYzrQNfkXX+Bui1HG0/rFo5kEaYUEMu/JsXrkjQzV79aYXKECZgtrfoLBV0P
K0TDxanW+uuGvdEeNqkgQx4sMW2NYUTLfqDPAsTspa9optrwlwzgcw0SYjdAfhAV
7bNgBd+jY/nsH9vVvQV+UOQoVBzfWv2i4Y2N1YkXZXlFFS/LdZynHU6C3VYLATKu
H0UCZX6qknTKdaASanpjUN9YOfjZ/BU6hXxbusDPRTFqLYBGmxtWPTHLx9VWsFoo
ObLu+9WSxfPEJjKzoiRo9dLTg6Rg19Y=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:21:04 2026 by rpki-client