Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f1dc560-0e65-3bed-bf76-a022358d677c.roa
File:                     0f1dc560-0e65-3bed-bf76-a022358d677c.roa (raw, json)
Hash identifier:          urS2br5/it2nyZMahGHZAEB4Jbm22/giQ+Ml7R1Cz74=
Subject key identifier:   01:E1:E5:55:13:7D:3F:01:DD:A6:DF:17:03:86:A5:E4:EB:8C:88:91
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584DB7704073CE3BAB48D5388280
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f1dc560-0e65-3bed-bf76-a022358d677c.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     63293
IP address blocks:        157.240.169.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:40:73:ce:3b:ab:48:d5:38:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=09bce183-3bd1-4627-b74c-cf003d834562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:72:1d:ed:dc:bb:d1:bf:68:68:71:c8:38:
                    2d:f9:99:07:0e:9a:0a:ec:d7:75:ba:38:cf:e2:55:
                    dc:28:e5:77:72:a3:8d:2b:33:25:c4:2a:ff:35:08:
                    c7:d9:0c:c4:32:bf:4e:5a:83:f1:0b:11:7b:ba:c6:
                    b6:9a:ff:36:e2:7e:53:89:3a:48:86:1b:92:e6:21:
                    8d:b1:7a:df:0d:a2:9e:0d:29:b4:a3:a8:31:4c:98:
                    a9:c5:59:5d:6c:2f:49:ce:ab:1a:33:09:a0:43:bc:
                    32:8b:2b:32:76:ea:98:05:ff:7d:d4:e9:4d:5b:bc:
                    b2:c1:de:94:bd:d9:2e:15:f7:3c:0c:57:57:1b:b9:
                    fe:20:f2:e1:da:b7:a0:b1:81:67:72:3f:c3:55:6a:
                    dc:fb:40:fe:39:dc:01:75:6a:1a:66:e9:aa:e4:96:
                    96:53:97:a0:de:cb:3f:55:b5:39:49:32:86:91:91:
                    4d:43:17:4c:a0:ff:3a:32:c7:05:19:65:e8:2f:88:
                    08:3a:73:18:47:90:8b:73:30:3c:ae:c2:8b:74:49:
                    15:e9:d9:6c:d9:08:3f:b0:8e:df:7a:ac:10:c1:a2:
                    ac:79:a2:09:9f:cc:5f:8e:0c:af:5d:e1:c0:2d:6c:
                    b6:1c:79:48:6f:d6:72:75:a8:be:34:fc:47:d0:e2:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:E5:55:13:7D:3F:01:DD:A6:DF:17:03:86:A5:E4:EB:8C:88:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f1dc560-0e65-3bed-bf76-a022358d677c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.240.169.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:78:71:ea:95:cc:7c:6d:5d:3a:7b:b1:39:b4:cf:2a:d8:
         65:6e:96:6f:24:ff:a9:63:0a:d4:ad:a8:59:fa:bc:a6:08:ed:
         56:9a:7a:eb:18:1f:68:78:54:95:e7:e1:cd:f5:35:bd:9d:10:
         9c:bf:ba:17:38:5e:77:4d:82:3e:b2:b2:35:cc:68:79:f0:59:
         8b:f4:1d:61:45:ee:6a:83:14:a7:97:e6:44:95:1d:77:0b:14:
         25:de:ad:59:3a:fd:bf:78:7a:1e:cd:c3:7f:f0:bd:a1:c7:08:
         2a:09:1d:cc:fd:8b:6c:13:74:9a:46:76:81:de:55:ad:50:b3:
         17:3c:3e:e5:ae:d9:05:6f:1a:cd:64:f0:35:a0:6e:9d:1e:c6:
         03:0d:68:6e:22:43:e9:62:59:d2:f0:f0:39:e2:d6:12:de:fd:
         b8:b1:a5:98:60:29:6e:27:b8:1e:b0:a7:33:73:9e:9d:62:83:
         96:88:e6:7c:5f:05:37:1c:bc:38:ef:ff:51:e1:1f:4c:15:6b:
         46:f8:2e:fd:3d:ca:d2:19:ef:5d:31:22:30:40:04:4c:99:81:
         65:60:4e:9a:92:74:d8:67:72:81:fa:89:64:12:d1:1e:4e:57:
         51:72:3d:d9:e2:3b:86:eb:ba:61:7a:29:87:9a:77:52:39:c5:
         ba:c1:08:33
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE23cEBzzjurSNU4goAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4
MjIyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk
MDliY2UxODMtM2JkMS00NjI3LWI3NGMtY2YwMDNkODM0NTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS9yHe3cu9G/aGhxyDgt+ZkHDpoK7Nd1ujjP
4lXcKOV3cqONKzMlxCr/NQjH2QzEMr9OWoPxCxF7usa2mv824n5TiTpIhhuS5iGN
sXrfDaKeDSm0o6gxTJipxVldbC9JzqsaMwmgQ7wyiysyduqYBf991OlNW7yywd6U
vdkuFfc8DFdXG7n+IPLh2regsYFncj/DVWrc+0D+OdwBdWoaZumq5JaWU5eg3ss/
VbU5STKGkZFNQxdMoP86MscFGWXoL4gIOnMYR5CLczA8rsKLdEkV6dls2Qg/sI7f
eqwQwaKseaIJn8xfjgyvXeHALWy2HHlIb9Zydai+NPxH0OLi0QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAHh5VUTfT8B3abfFwOGpeTrjIiRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0
MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMGYxZGM1NjAtMGU2NS0z
YmVkLWJmNzYtYTAyMjM1OGQ2NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0
NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh
ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0
MjQ5YTgyMjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGnfCpADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBFb3hx6pXMfG1dOnuxObTPKthlbpZvJP+pYwrUrahZ+rymCO1Wmnrr
GB9oeFSV5+HN9TW9nRCcv7oXOF53TYI+srI1zGh58FmL9B1hRe5qgxSnl+ZElR13
CxQl3q1ZOv2/eHoezcN/8L2hxwgqCR3M/YtsE3SaRnaB3lWtULMXPD7lrtkFbxrN
ZPA1oG6dHsYDDWhuIkPpYlnS8PA54tYS3v24saWYYCluJ7gesKczc56dYoOWiOZ8
XwU3HLw47/9R4R9MFWtG+C79PcrSGe9dMSIwQARMmYFlYE6aknTYZ3KB+olkEtEe
TldRcj3Z4juG67pheimHmndSOcW6wQgz
-----END CERTIFICATE-----
Generated at Wed May 6 01:16:14 2026 by rpki-client