Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa
File:                     2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa (raw, json)
Hash identifier:          APzA6KuScy9T9846jGCLC0qEE/K+1itJfJl3IYLroFg=
Subject key identifier:   EE:53:99:EC:99:4B:06:62:37:E8:D0:4C:4A:78:F7:8D:49:4D:04:8C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584EA798A531BD3467A6CA87DE80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30058
IP address blocks:        198.255.18.0/23 maxlen: 24
                          2001:49f0:d00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:a5:31:bd:34:67:a6:ca:87:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a30b5ff5-2661-4b88-b504-2d32ab007a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:a6:01:ed:97:3a:45:e2:50:82:51:8a:36:
                    30:f0:fc:8b:dc:35:1a:16:97:ae:1e:3e:09:72:f4:
                    7e:3e:42:2a:6b:67:8a:10:5f:a3:1f:d5:c1:98:ea:
                    88:b2:af:53:ad:5f:c3:82:79:bc:3f:c5:79:12:17:
                    fa:70:07:54:c9:cf:22:5e:ac:61:dd:3d:ae:dd:35:
                    d5:a8:0c:5c:7d:52:4b:d2:98:a5:e4:4b:76:4b:67:
                    90:5c:fe:a1:33:4b:d5:88:40:90:85:d0:2e:2e:87:
                    93:89:f1:7a:64:87:98:e0:1b:77:c7:42:3a:8d:b9:
                    49:41:cf:c6:07:dc:90:df:4d:a5:45:a2:28:b4:32:
                    1a:e7:f7:1b:0b:03:81:e4:e8:ec:e0:98:d6:28:a7:
                    8e:bb:6c:32:8a:d0:31:c0:0a:2c:30:ed:54:77:bd:
                    49:18:16:fd:bf:78:a1:e7:92:66:e9:22:a2:7c:79:
                    0e:8b:4d:f6:91:53:b3:b0:44:eb:91:b0:0f:d5:95:
                    d1:79:fd:f2:4e:f8:5c:d0:a9:0a:a1:46:44:1b:59:
                    22:2c:02:48:08:a2:55:ba:8f:ef:ec:6a:7f:4a:b4:
                    5e:6c:84:45:cc:fd:6c:76:55:a5:5a:6a:b7:57:4f:
                    50:b1:1e:07:de:64:2e:55:76:02:9c:f6:32:a2:f2:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:53:99:EC:99:4B:06:62:37:E8:D0:4C:4A:78:F7:8D:49:4D:04:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/2d8abf15-e5a0-38ae-a3f5-56c04dcf49b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.255.18.0/23
                IPv6:
                  2001:49f0:d00c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:ac:eb:77:35:75:3f:38:87:e9:55:1c:e6:8f:0c:66:a0:0b:
         6d:ea:b5:62:5e:c0:ce:65:d1:f5:ce:dc:26:4a:6f:d8:f1:47:
         eb:5d:c8:b8:60:75:ce:6c:03:9c:2e:7c:8b:19:76:0f:27:2f:
         e6:41:e3:9d:7f:f5:59:b7:af:76:0d:a0:87:cd:ac:bc:0f:56:
         01:4a:f7:d5:69:8d:04:76:ca:b9:a3:e3:77:cf:b1:f0:ad:51:
         1e:01:69:4c:ef:2b:23:77:b4:fb:67:85:fd:af:c3:2d:1d:92:
         26:3e:c7:b2:bd:4d:14:53:a4:5c:b4:ac:0e:c3:2e:d1:76:81:
         08:ef:d4:b7:f9:b7:06:2b:fd:fd:8a:6e:38:77:30:7f:40:45:
         28:b9:6f:d7:39:f5:c7:f0:7e:7d:91:f3:c0:e0:7d:6c:2c:fb:
         09:ef:54:bd:33:94:4d:ad:4f:2b:b7:1f:1d:02:9d:a2:c7:04:
         e6:48:ad:c0:f4:73:a9:21:3f:f8:46:7e:ef:1d:b0:80:25:61:
         00:a9:82:40:56:f4:0c:4c:a7:d0:2d:7d:3b:d9:a9:5d:5d:bb:
         ae:ca:84:ff:73:ba:5f:c1:a4:6f:4c:fa:c9:a2:3a:10:d7:9c:
         b4:a8:45:de:21:d6:6f:b2:0e:86:c3:7a:74:d8:31:c9:6e:5b:
         0f:26:bc:c7
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE6nmKUxvTRnpsqH3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTMwYjVmZjUtMjY2MS00Yjg4LWI1MDQtMmQzMmFiMDA3YTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XumAe2XOkXiUIJRijYw8PyL3DUaFpeuHj4J
cvR+PkIqa2eKEF+jH9XBmOqIsq9TrV/Dgnm8P8V5Ehf6cAdUyc8iXqxh3T2u3TXV
qAxcfVJL0pil5Et2S2eQXP6hM0vViECQhdAuLoeTifF6ZIeY4Bt3x0I6jblJQc/G
B9yQ302lRaIotDIa5/cbCwOB5Ojs4JjWKKeOu2wyitAxwAosMO1Ud71JGBb9v3ih
55Jm6SKifHkOi032kVOzsETrkbAP1ZXRef3yTvhc0KkKoUZEG1kiLAJICKJVuo/v
7Gp/SrRebIRFzP1sdlWlWmq3V09QsR4H3mQuVXYCnPYyovK40QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFO5TmeyZSwZiN+jQTEp4941JTQSMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMmQ4YWJmMTUtZTVhMC0z
OGFlLWEzZjUtNTZjMDRkY2Y0OWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBxv8SMA8E
AgACMAkDBwAgAUnw0AwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA16zrdzV1PziH6VUc5o8MZqALbeq1Yl7A
zmXR9c7cJkpv2PFH613IuGB1zmwDnC58ixl2Dycv5kHjnX/1Wbevdg2gh82svA9W
AUr31WmNBHbKuaPjd8+x8K1RHgFpTO8rI3e0+2eF/a/DLR2SJj7Hsr1NFFOkXLSs
DsMu0XaBCO/Ut/m3Biv9/YpuOHcwf0BFKLlv1zn1x/B+fZHzwOB9bCz7Ce9UvTOU
Ta1PK7cfHQKdoscE5kitwPRzqSE/+EZ+7x2wgCVhAKmCQFb0DEyn0C19O9mpXV27
rsqE/3O6X8Gkb0z6yaI6ENectKhF3iHWb7IOhsN6dNgxyW5bDya8xw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:54:59 2026 by rpki-client