Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa
File:                     29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa (raw, json)
Hash identifier:          V0J4CYrvpocyAwt6sRYYwCDcmIkLj3d6q7glg0fMF0Y=
Subject key identifier:   CC:11:78:61:F6:F1:79:73:F9:1F:D7:F4:85:21:F6:43:97:D8:5D:85
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584F2EED0F938AB06B22656F15C0
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     9
IP address blocks:        147.72.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:0f:93:8a:b0:6b:22:65:6f:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=9441818b-ca08-4f08-8f78-26a483c67b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:66:90:66:ca:0a:34:e5:ed:a7:85:0d:2a:
                    ce:fb:6a:23:c6:e6:de:36:5f:5a:8f:fd:87:b7:16:
                    a9:de:34:8a:d0:72:53:ce:a4:58:35:c1:83:16:f7:
                    5f:6f:ad:d3:e5:a8:9c:85:59:1f:db:06:de:5b:29:
                    86:b7:4c:b0:d9:f3:46:7f:f3:dc:a5:26:c0:96:32:
                    05:fd:26:03:65:d8:81:f9:a1:6e:5d:e3:36:e2:05:
                    b5:94:04:1c:ef:75:e4:24:85:92:7e:5b:93:54:d4:
                    a4:00:dc:b1:5d:ae:09:78:c9:a7:d2:73:32:d2:ea:
                    59:bb:1f:09:64:90:98:5f:b5:e2:51:85:73:cf:e1:
                    63:1b:e1:55:9e:0a:09:0c:cf:4b:91:5b:97:4d:e8:
                    51:65:52:13:a2:8d:d3:b0:61:ac:ff:03:0f:ed:46:
                    b7:5c:4c:17:78:60:c2:9c:d8:18:19:0a:7c:28:36:
                    d4:7f:4a:7b:44:bd:06:3f:80:6e:13:d4:53:9d:8c:
                    64:25:6a:8c:b0:c3:da:a9:4b:6f:f4:8a:9d:40:5c:
                    ab:7c:73:45:c7:05:12:03:af:6b:4b:d7:a2:0c:2e:
                    b9:91:9e:63:e6:4b:9c:71:62:3c:bc:c0:8a:1d:dd:
                    26:a9:d5:0e:b3:07:52:e6:63:05:0c:00:39:00:17:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:11:78:61:F6:F1:79:73:F9:1F:D7:F4:85:21:F6:43:97:D8:5D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.72.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:bd:6c:a6:bd:13:38:41:b3:ea:ce:d5:4e:f0:39:4c:e2:
         ab:0f:6c:30:81:9e:07:9c:ad:d7:25:1c:0d:86:00:b5:5c:94:
         7a:80:8a:06:b7:fa:28:1f:bc:bc:37:24:93:73:7b:f3:a8:1e:
         6f:83:48:16:01:d8:37:97:ee:70:f6:49:42:4a:d1:27:e5:91:
         cc:38:7d:5f:f2:af:df:db:33:e9:34:cb:e4:5c:3b:4d:0c:1a:
         70:a9:86:ae:2a:af:e7:70:9d:fe:fc:b5:a3:4d:27:5f:db:fd:
         88:f0:dd:9b:a2:6c:ec:c4:3e:76:10:f0:82:bf:6c:c2:99:b3:
         cc:fe:cd:7b:c3:06:92:fa:ea:ac:98:81:7c:5f:72:e6:3d:e1:
         e3:1e:16:8b:b6:e4:1f:db:2a:64:dd:84:1d:a3:37:2c:43:5f:
         93:73:f7:91:96:6c:bb:c4:e3:f1:d6:b7:87:6a:6f:f3:50:12:
         32:3a:33:ad:d8:24:82:fb:d9:ac:c2:52:1d:c0:25:7b:40:88:
         28:84:22:0a:21:a5:d7:35:47:06:57:db:ce:12:ed:e3:32:94:
         43:15:d2:06:0c:a4:83:ef:2c:66:11:0a:f1:f7:e8:80:06:df:
         f6:ad:c5:5f:03:1e:f8:b5:40:17:1a:08:ef:31:9c:02:0d:d4:
         57:85:96:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Q+TirBrImVvFcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz
MGQyMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
OTQ0MTgxOGItY2EwOC00ZjA4LThmNzgtMjZhNDgzYzY3YjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YBmkGbKCjTl7aeFDSrO+2ojxubeNl9aj/2H
txap3jSK0HJTzqRYNcGDFvdfb63T5aichVkf2wbeWymGt0yw2fNGf/PcpSbAljIF
/SYDZdiB+aFuXeM24gW1lAQc73XkJIWSfluTVNSkANyxXa4JeMmn0nMy0upZux8J
ZJCYX7XiUYVzz+FjG+FVngoJDM9LkVuXTehRZVIToo3TsGGs/wMP7Ua3XEwXeGDC
nNgYGQp8KDbUf0p7RL0GP4BuE9RTnYxkJWqMsMPaqUtv9IqdQFyrfHNFxwUSA69r
S9eiDC65kZ5j5kuccWI8vMCKHd0mqdUOswdS5mMFDAA5ABd6SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwReGH28Xlz+R/X9IUh9kOX2F2FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4
YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMjllYTk2ZWYtNWZjMC0z
OWZhLWIxNGEtODEwYmRlZWU5YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0
OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz
MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw
MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWtvWymvRM4QbPqztVO8DlM4qsPbDCBngecrdclHA2GALVclHqAiga3
+igfvLw3JJNze/OoHm+DSBYB2DeX7nD2SUJK0Sflkcw4fV/yr9/bM+k0y+RcO00M
GnCphq4qr+dwnf78taNNJ1/b/Yjw3ZuibOzEPnYQ8IK/bMKZs8z+zXvDBpL66qyY
gXxfcuY94eMeFou25B/bKmTdhB2jNyxDX5Nz95GWbLvE4/HWt4dqb/NQEjI6M63Y
JIL72azCUh3AJXtAiCiEIgohpdc1RwZX284S7eMylEMV0gYMpIPvLGYRCvH36IAG
3/atxV8DHvi1QBcaCO8xnAIN1FeFlqs=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:53:33 2026 by rpki-client