Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bd89aab-79df-39c3-a674-dd2eaf31d42f.roa
File:                     9bd89aab-79df-39c3-a674-dd2eaf31d42f.roa (raw, json)
Hash identifier:          M4//q7Er/tzRujU2ihbASabNOgRJRk3uZnJPdZyH49U=
Subject key identifier:   9F:70:C0:C2:2B:E9:50:31:6E:B1:47:A3:0C:60:28:F7:A8:94:70:A1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584DA11AEA0D0A6E6E6B1F9B7100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bd89aab-79df-39c3-a674-dd2eaf31d42f.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     15169
IP address blocks:        192.178.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:ea:0d:0a:6e:6e:6b:1f:9b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=70bab9c0-af51-4517-b70e-d67d29be1f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:69:f0:0c:f6:e0:7d:2b:dd:ae:9d:b8:1f:
                    b4:47:1e:42:6f:7e:dd:37:7c:fc:76:2f:c7:89:ab:
                    86:8f:51:b4:84:22:ba:94:27:14:b7:06:d7:b4:52:
                    04:6a:a3:d2:91:e5:b2:b8:a9:af:5c:6c:7c:0e:dd:
                    00:93:36:01:25:d7:45:d2:44:da:e3:7c:99:a5:32:
                    c0:11:f9:04:27:51:32:e7:df:83:e0:cb:20:48:9d:
                    5c:2a:27:cd:b8:3b:66:5c:41:6e:27:0d:30:df:f4:
                    fe:ad:d6:52:0f:cc:a6:60:15:bb:88:8e:2c:79:97:
                    63:06:1f:4f:53:b9:13:8a:33:3f:b4:e0:05:cc:8c:
                    14:2e:5c:8e:23:0d:21:40:c2:22:0a:88:bc:ce:32:
                    b6:ad:5a:a7:cb:be:63:0e:13:08:28:9c:2d:6e:50:
                    58:0c:2a:d6:73:13:37:65:45:8c:4d:d6:bf:82:e8:
                    3e:3f:7f:ee:49:62:f1:d1:d7:73:75:03:dd:9a:14:
                    fa:e7:22:3c:27:ee:fe:1e:86:5d:43:b4:85:12:56:
                    d6:7f:c0:fa:db:61:3f:3d:c6:9d:49:f4:7a:d7:ed:
                    24:22:03:78:eb:01:cc:40:fe:c1:0d:da:95:3d:8b:
                    a5:8e:f4:d1:19:6c:f5:a3:f8:07:82:cd:92:4f:81:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:70:C0:C2:2B:E9:50:31:6E:B1:47:A3:0C:60:28:F7:A8:94:70:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9bd89aab-79df-39c3-a674-dd2eaf31d42f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:dc:87:d8:48:ef:1e:d5:26:0e:45:a5:68:4b:78:46:73:
         cc:35:5b:39:72:96:6d:24:ae:01:cb:e3:7a:ad:e7:c7:8d:0f:
         a7:df:5c:a9:c5:7c:83:a4:b2:2a:e1:23:91:9a:d1:2e:55:69:
         16:73:77:9c:49:6e:c3:50:7b:2a:7f:24:88:f7:59:bd:f2:7a:
         ff:d5:3e:b1:4b:51:72:b9:7d:e0:1f:a8:b8:3c:00:f8:6d:17:
         63:b5:79:d2:03:e2:ee:0b:6c:66:ec:9c:85:95:38:14:10:49:
         bf:79:13:a7:e0:02:a8:bc:b5:ab:01:d6:b2:4c:f0:b0:27:10:
         f2:33:07:70:52:b3:7e:1e:be:b5:48:1d:62:45:4d:0b:1f:9a:
         ec:5b:6a:12:12:67:a2:9e:55:9f:6b:69:a7:a9:cc:10:97:f9:
         ee:1a:da:80:61:0c:55:c4:34:e6:71:6e:3f:d6:07:a3:a8:ec:
         d3:98:b1:d7:84:44:27:4c:5c:09:6a:2b:47:4f:2b:2a:20:2a:
         fd:81:da:b9:7e:be:72:71:d0:71:46:d3:8d:16:1f:c7:d4:74:
         03:ed:73:55:fe:1b:11:b0:4f:78:c3:fc:43:e2:9d:d6:00:70:
         75:46:34:49:f5:6c:47:bd:2e:15:05:e6:dc:d9:4a:d8:90:22:
         9b:2c:f3:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGuoNCm5uax+bcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
NzBiYWI5YzAtYWY1MS00NTE3LWI3MGUtZDY3ZDI5YmUxZjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT9p8Az24H0r3a6duB+0Rx5Cb37dN3z8di/H
iauGj1G0hCK6lCcUtwbXtFIEaqPSkeWyuKmvXGx8Dt0AkzYBJddF0kTa43yZpTLA
EfkEJ1Ey59+D4MsgSJ1cKifNuDtmXEFuJw0w3/T+rdZSD8ymYBW7iI4seZdjBh9P
U7kTijM/tOAFzIwULlyOIw0hQMIiCoi8zjK2rVqny75jDhMIKJwtblBYDCrWcxM3
ZUWMTda/gug+P3/uSWLx0ddzdQPdmhT65yI8J+7+HoZdQ7SFElbWf8D622E/Pcad
SfR61+0kIgN46wHMQP7BDdqVPYuljvTRGWz1o/gHgs2ST4HO8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9wwMIr6VAxbrFHowxgKPeolHChMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWJkODlhYWItNzlkZi0z
OWMzLWE2NzQtZGQyZWFmMzFkNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbh3IfYSO8e1SYORaVoS3hGc8w1Wzlylm0krgHL43qt58eND6ffXKnF
fIOksirhI5Ga0S5VaRZzd5xJbsNQeyp/JIj3Wb3yev/VPrFLUXK5feAfqLg8APht
F2O1edID4u4LbGbsnIWVOBQQSb95E6fgAqi8tasB1rJM8LAnEPIzB3BSs34evrVI
HWJFTQsfmuxbahISZ6KeVZ9raaepzBCX+e4a2oBhDFXENOZxbj/WB6Oo7NOYsdeE
RCdMXAlqK0dPKyogKv2B2rl+vnJx0HFG040WH8fUdAPtc1X+GxGwT3jD/EPindYA
cHVGNEn1bEe9LhUF5tzZStiQIpss89Q=
-----END CERTIFICATE-----
Generated at Sun May 3 19:20:41 2026 by rpki-client