Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/2c313ef3-6e2a-3006-95ac-a6159ce81833.roa
File:                     2c313ef3-6e2a-3006-95ac-a6159ce81833.roa (raw, json)
Hash identifier:          VXdWTz6O9mhrZiawgtI2UvUabSt6CbSgYAbKmXYPaqU=
Subject key identifier:   A7:B7:F4:43:73:A6:68:96:66:A0:07:B3:E4:AA:91:72:CB:85:32:11
Certificate issuer:       /CN=fb545837-dc13-4101-916f-b5207537624f
Certificate serial:       010D0C9F4328584EF5B2149DEB401BA654CFECC0
Authority key identifier: 1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/2c313ef3-6e2a-3006-95ac-a6159ce81833.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     53586
IP address blocks:        199.27.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:14:9d:eb:40:1b:a6:54:cf:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb545837-dc13-4101-916f-b5207537624f
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=6c829a68-5835-4fcd-98b9-f233603c2e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:a1:5a:2f:b5:ff:f8:90:95:46:ea:2d:2e:
                    72:65:43:88:39:9f:6f:fd:3c:39:ee:cf:ca:9f:17:
                    84:ae:81:b4:e9:07:7c:4b:dd:5f:cc:83:63:78:f5:
                    5d:a9:c5:3c:39:b2:9c:37:2f:3c:c5:3b:6f:91:d2:
                    86:c6:ee:ca:51:97:ca:0a:8f:34:5f:10:68:a9:34:
                    57:8a:e4:18:0f:05:3b:a8:fd:93:4e:ff:47:a1:f9:
                    8c:41:be:fd:eb:e1:97:5e:9b:11:db:06:ff:45:5a:
                    8e:87:2f:29:84:cc:cb:65:ee:fa:cb:6d:15:4a:a4:
                    76:77:dd:ac:0c:cf:3f:bb:66:21:8d:63:4c:d0:c4:
                    5b:81:19:61:b1:55:09:be:9f:d0:a0:40:33:2f:c0:
                    66:72:4c:c7:93:68:d7:fd:8a:3e:7b:56:79:49:f6:
                    7f:7d:4c:c0:c3:2f:c8:41:a5:4c:5b:9e:31:9e:5e:
                    e1:ea:33:dc:bc:e9:ca:fe:f8:18:f6:51:a3:cb:c3:
                    93:ef:d6:f4:f1:0b:1b:8f:a3:72:58:da:1a:98:4c:
                    0e:45:b4:f8:89:80:46:8e:a7:15:78:75:42:43:81:
                    c2:15:e9:cf:b5:42:69:cb:7a:3c:ed:65:88:2c:a2:
                    92:23:aa:db:a3:c3:4c:c9:d9:08:fc:4b:7b:9c:1e:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B7:F4:43:73:A6:68:96:66:A0:07:B3:E4:AA:91:72:CB:85:32:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/2c313ef3-6e2a-3006-95ac-a6159ce81833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f/fb545837-dc13-4101-916f-b5207537624f.crl

            X509v3 Authority Key Identifier:
                keyid:1A:E2:36:89:1C:B7:F1:C7:A1:B6:DF:13:19:62:84:E3:C8:86:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb545837-dc13-4101-916f-b5207537624f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:12:76:e4:61:d8:ca:70:38:b2:d9:be:24:8e:c4:57:bc:
         82:b3:25:c0:33:73:d6:8d:f5:66:00:5f:e5:ee:a2:c5:32:c0:
         0c:4c:48:07:ce:93:af:d7:f1:3f:f3:32:b9:f2:85:32:39:f5:
         ee:0e:3d:f2:91:7b:68:f0:5c:f8:1f:01:85:54:54:68:a6:94:
         56:a9:5a:93:c6:b8:be:65:34:4e:1f:8c:28:72:8c:f0:9e:d4:
         f9:9f:38:48:18:38:3e:c0:0d:c3:c1:8d:96:54:23:04:18:b6:
         be:b2:dd:28:34:ee:a8:eb:90:57:b2:99:3c:f1:39:25:64:96:
         83:09:c0:2f:93:c0:5f:0d:b0:dd:6e:d0:1e:d3:11:ee:be:fa:
         56:5d:de:95:06:9d:80:b9:0b:00:d7:7a:b3:a6:e2:2f:b0:61:
         66:50:c9:5a:d6:5f:19:0f:ab:de:11:e4:1a:01:fb:d2:ef:f5:
         32:c5:ff:6e:98:2c:eb:6d:58:6c:39:8c:9a:e0:bc:90:e6:3b:
         73:ef:76:0d:ff:6b:e1:fe:27:9d:22:2f:de:d7:7e:96:b1:af:
         0c:12:65:8f:79:8d:22:e7:64:db:eb:af:d9:56:34:4b:c4:e4:
         f4:cd:c2:2d:6d:a2:b1:3c:96:07:d9:63:c8:c1:63:3e:9a:27:
         2f:de:64:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71shSd60AbplTP7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmI1NDU4MzctZGMxMy00MTAxLTkxNmYtYjUyMDc1Mzc2
MjRmMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmM4MjlhNjgtNTgzNS00ZmNkLTk4YjktZjIzMzYwM2MyZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJWhWi+1//iQlUbqLS5yZUOIOZ9v/Tw57s/K
nxeEroG06Qd8S91fzINjePVdqcU8ObKcNy88xTtvkdKGxu7KUZfKCo80XxBoqTRX
iuQYDwU7qP2TTv9HofmMQb796+GXXpsR2wb/RVqOhy8phMzLZe76y20VSqR2d92s
DM8/u2YhjWNM0MRbgRlhsVUJvp/QoEAzL8BmckzHk2jX/Yo+e1Z5SfZ/fUzAwy/I
QaVMW54xnl7h6jPcvOnK/vgY9lGjy8OT79b08Qsbj6NyWNoamEwORbT4iYBGjqcV
eHVCQ4HCFenPtUJpy3o87WWILKKSI6rbo8NMydkI/Et7nB7fIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe39ENzpmiWZqAHs+SqkXLLhTIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mYjU0
NTgzNy1kYzEzLTQxMDEtOTE2Zi1iNTIwNzUzNzYyNGYvMmMzMTNlZjMtNmUyYS0z
MDA2LTk1YWMtYTYxNTljZTgxODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZmI1NDU4MzctZGMxMy00MTAxLTkx
NmYtYjUyMDc1Mzc2MjRmL2ZiNTQ1ODM3LWRjMTMtNDEwMS05MTZmLWI1MjA3NTM3
NjI0Zi5jcmwwHwYDVR0jBBgwFoAUGuI2iRy38cehtt8TGWKE48iGsVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mYjU0NTgzNy1kYzEzLTQxMDEtOTE2Zi1iNTIw
NzUzNzYyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxvHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpfEnbkYdjKcDiy2b4kjsRXvIKzJcAzc9aN9WYAX+XuosUywAxMSAfO
k6/X8T/zMrnyhTI59e4OPfKRe2jwXPgfAYVUVGimlFapWpPGuL5lNE4fjChyjPCe
1PmfOEgYOD7ADcPBjZZUIwQYtr6y3Sg07qjrkFeymTzxOSVkloMJwC+TwF8NsN1u
0B7TEe6++lZd3pUGnYC5CwDXerOm4i+wYWZQyVrWXxkPq94R5BoB+9Lv9TLF/26Y
LOttWGw5jJrgvJDmO3Pvdg3/a+H+J50iL97XfpaxrwwSZY95jSLnZNvrr9lWNEvE
5PTNwi1torE8lgfZY8jBYz6aJy/eZJ8=
-----END CERTIFICATE-----
Generated at Sat Sep 12 08:59:29 2026 by rpki-client