Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/20154855-3f56-3707-b01b-ab8e6f474c03.roa
File:                     20154855-3f56-3707-b01b-ab8e6f474c03.roa (raw, json)
Hash identifier:          bUuKXvXOFrIYAkENRs46t9XGfZsQ8F+ylsQqXyMMcpA=
Subject key identifier:   80:48:B1:FA:91:C9:89:EC:F0:86:65:A6:47:D1:06:65:CF:E1:94:78
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584FB3A6841878A5E8915409CF40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/20154855-3f56-3707-b01b-ab8e6f474c03.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     2734
IP address blocks:        206.223.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:a6:84:18:78:a5:e8:91:54:09:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=99f4d62d-5cf8-4db6-a5b3-5326080cfd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:88:f7:98:d1:c1:f2:af:33:90:02:86:22:
                    86:7b:37:28:86:d8:8c:4d:cd:a4:ec:4a:03:3b:e0:
                    74:5f:8d:64:7b:a5:5a:3e:90:52:54:98:9b:89:04:
                    7b:d5:44:e0:4f:e3:bf:f2:11:aa:28:4b:80:5c:4f:
                    65:48:86:88:27:70:e8:df:2a:c4:af:ae:4a:97:c4:
                    d6:d3:5c:3e:35:34:e3:64:fe:2f:b7:e6:c6:08:52:
                    fd:db:d2:98:85:6c:34:61:63:2a:8d:17:fb:92:15:
                    42:0d:5e:77:20:da:69:99:7b:5b:c7:d4:15:6e:ea:
                    bf:7e:79:32:f7:93:16:b2:87:0a:86:22:fb:ef:cd:
                    13:08:3d:84:d6:3e:47:59:9c:0c:4a:47:a2:bc:3f:
                    7c:19:19:24:10:88:52:f4:84:df:2e:ee:e8:24:db:
                    6f:e5:03:1a:d9:7d:76:19:f3:ab:bb:71:50:42:0a:
                    a1:d5:77:c9:6b:fd:51:86:a2:7f:3b:30:b6:72:60:
                    5b:11:2d:31:6c:5f:86:84:87:c3:c5:51:b8:10:0d:
                    72:9a:68:e2:d5:68:56:78:93:b8:91:41:df:a9:34:
                    46:0e:0f:89:2a:a5:30:64:69:ee:c8:a6:95:0d:ab:
                    9a:49:cc:cf:0b:0b:fc:37:63:54:0d:d4:ef:74:f0:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:B1:FA:91:C9:89:EC:F0:86:65:A6:47:D1:06:65:CF:E1:94:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/20154855-3f56-3707-b01b-ab8e6f474c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:9f:5a:58:4d:80:1b:6a:39:49:7e:20:3d:d4:74:5c:57:
         8d:5d:6e:13:3f:7e:40:fc:2f:29:7f:3b:24:67:cb:75:a1:d7:
         f0:a5:ce:51:eb:6b:8c:5e:19:65:ef:a6:bb:f9:ba:02:19:88:
         31:3e:01:0f:f6:db:24:8e:db:63:46:d8:f2:28:9f:d3:ee:0c:
         bc:20:5b:00:47:fc:0e:91:48:1d:71:51:55:d8:db:92:c8:d3:
         c5:56:f5:94:94:64:2f:d2:c8:06:3c:bc:65:d1:ab:c2:38:bb:
         6e:39:4b:b4:d6:df:73:1d:fb:eb:d1:b8:7d:ba:53:51:79:bf:
         71:39:b8:98:4b:77:7c:ab:e4:99:a6:03:99:d6:ef:2d:4d:65:
         a9:6d:56:28:fb:6a:cf:52:69:c3:9c:60:e5:07:15:9d:9c:4b:
         86:90:49:bc:e7:1d:44:c7:be:ac:90:32:b9:9c:37:79:50:4d:
         dc:f2:d8:38:83:ed:85:60:4b:e9:e9:b3:89:51:b1:f5:31:eb:
         83:1e:72:a7:fa:99:6f:81:61:5c:f8:00:d0:b7:93:1e:4c:f0:
         aa:b1:15:6b:cd:1c:d1:e7:9f:58:81:0f:0a:0b:f6:d2:76:2e:
         66:e1:59:97:a7:70:3a:fe:62:e3:a9:b3:7c:ba:64:3f:d0:36:
         76:a9:f8:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpoQYeKXokVQJz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk
OTlmNGQ2MmQtNWNmOC00ZGI2LWE1YjMtNTMyNjA4MGNmZDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSCI95jRwfKvM5AChiKGezcohtiMTc2k7EoD
O+B0X41ke6VaPpBSVJibiQR71UTgT+O/8hGqKEuAXE9lSIaIJ3Do3yrEr65Kl8TW
01w+NTTjZP4vt+bGCFL929KYhWw0YWMqjRf7khVCDV53INppmXtbx9QVbuq/fnky
95MWsocKhiL7780TCD2E1j5HWZwMSkeivD98GRkkEIhS9ITfLu7oJNtv5QMa2X12
GfOru3FQQgqh1XfJa/1RhqJ/OzC2cmBbES0xbF+GhIfDxVG4EA1ymmji1WhWeJO4
kUHfqTRGDg+JKqUwZGnuyKaVDauaSczPCwv8N2NUDdTvdPCbHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBIsfqRyYns8IZlpkfRBmXP4ZR4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvMjAxNTQ4NTUtM2Y1Ni0z
NzA3LWIwMWItYWI4ZTZmNDc0YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzt+PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI2Wn1pYTYAbajlJfiA91HRcV41dbhM/fkD8Lyl/OyRny3Wh1/ClzlHr
a4xeGWXvprv5ugIZiDE+AQ/22ySO22NG2PIon9PuDLwgWwBH/A6RSB1xUVXY25LI
08VW9ZSUZC/SyAY8vGXRq8I4u245S7TW33Md++vRuH26U1F5v3E5uJhLd3yr5Jmm
A5nW7y1NZaltVij7as9SacOcYOUHFZ2cS4aQSbznHUTHvqyQMrmcN3lQTdzy2DiD
7YVgS+nps4lRsfUx64Mecqf6mW+BYVz4ANC3kx5M8KqxFWvNHNHnn1iBDwoL9tJ2
LmbhWZencDr+YuOps3y6ZD/QNnap+FQ=
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:23:08 2026 by rpki-client