Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d8652a-161f-3007-a4f7-ba0503665e45.roa
File:                     d5d8652a-161f-3007-a4f7-ba0503665e45.roa (raw, json)
Hash identifier:          OH/Xo+b2nDpgrH4Y1NGCe3BDqHdBj0wqKCsxAQVVmUM=
Subject key identifier:   4C:D6:F5:7D:FF:7C:61:60:91:1C:A1:61:62:74:BB:5A:C9:F4:8C:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DFC360F55C7FA48443C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d8652a-161f-3007-a4f7-ba0503665e45.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     36833
IP address blocks:        184.104.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:fc:36:0f:55:c7:fa:48:44:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=25bf77d7-fe96-4558-bca8-a30c8876ddf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:12:8d:3b:81:da:db:ad:a0:47:62:e7:fa:
                    f1:c5:bc:26:43:33:30:bc:d7:b7:6c:8b:fa:6f:99:
                    43:39:48:0b:c2:c4:bb:e8:bd:7f:09:5a:85:a4:ce:
                    fe:24:5a:c5:02:a7:23:8a:84:7d:28:cf:70:f3:5b:
                    ef:81:ca:48:3b:98:74:cb:0d:6b:81:8f:5c:29:7b:
                    3e:38:e1:8b:93:a3:e7:b0:05:15:a8:44:60:e7:db:
                    b5:6b:d2:5e:7d:df:18:e0:2f:cb:a1:c6:7e:a4:ab:
                    28:97:d0:d7:64:b9:65:9b:f5:24:05:3c:91:1a:e8:
                    f2:d4:d9:a5:ae:e0:e4:bb:ce:87:9f:f4:0d:64:97:
                    7f:fc:aa:64:b6:4d:29:38:68:8e:11:3e:73:96:e9:
                    74:56:f8:06:75:22:ae:f3:aa:bf:fa:4b:fc:e6:c3:
                    79:86:f4:ef:1b:8f:e4:b0:8b:03:d9:d0:65:8f:00:
                    47:bf:f6:ab:40:d2:7f:65:50:e7:af:6d:81:bf:8f:
                    62:03:10:a4:f7:ce:55:7d:31:b0:6d:e2:16:3c:90:
                    40:4f:5d:1d:82:73:60:61:aa:69:64:9d:00:08:71:
                    b6:62:fb:13:cd:c4:0b:3a:68:a8:ce:13:64:f5:d1:
                    59:fe:da:7f:18:ee:5f:78:4a:05:02:ed:fb:ed:93:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D6:F5:7D:FF:7C:61:60:91:1C:A1:61:62:74:BB:5A:C9:F4:8C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5d8652a-161f-3007-a4f7-ba0503665e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f5:62:4d:a6:c8:5b:e5:34:ee:2d:74:2b:7d:72:46:93:bb:
         c2:78:af:4a:d6:fb:b5:89:70:54:10:d7:5d:b4:53:d5:8b:ff:
         92:0f:0e:25:57:c4:3d:33:fa:5d:27:a4:dc:79:01:06:80:f2:
         bd:67:61:63:0b:30:2c:0f:ee:0b:87:d4:5a:93:2b:33:ea:e6:
         40:ac:87:a9:53:7a:29:d7:40:c3:1a:b9:bb:72:bf:8c:0a:3d:
         9d:69:e2:26:59:1d:4c:e6:ef:ca:60:67:2c:b7:20:a4:74:aa:
         68:8d:76:9d:7b:7a:f8:18:8d:06:65:09:32:ef:dd:30:bd:fd:
         4c:15:4b:47:10:e8:7c:16:36:fc:05:0b:03:41:99:01:c9:bb:
         4e:70:d7:ec:7d:42:fd:7b:ad:84:0d:90:8a:7a:c3:b5:33:5b:
         6e:1e:82:18:d7:b5:96:6a:b2:6e:60:d1:48:16:76:f4:63:b7:
         d1:66:b9:8b:91:3d:95:3c:b4:9e:77:87:03:6d:cf:03:79:c1:
         66:39:d7:05:1c:95:a1:0f:f4:f2:ae:aa:7b:56:0a:4b:1a:65:
         65:36:5a:73:75:9b:aa:a9:56:e9:7d:72:23:da:b5:f7:ad:59:
         8a:b2:f2:91:6a:fb:ae:22:32:74:bc:04:2c:b7:9c:ba:ba:5c:
         b5:88:e4:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+ffw2D1XH+khEPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MjViZjc3ZDctZmU5Ni00NTU4LWJjYTgtYTMwYzg4NzZkZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnASjTuB2tutoEdi5/rxxbwmQzMwvNe3bIv6
b5lDOUgLwsS76L1/CVqFpM7+JFrFAqcjioR9KM9w81vvgcpIO5h0yw1rgY9cKXs+
OOGLk6PnsAUVqERg59u1a9Jefd8Y4C/LocZ+pKsol9DXZLllm/UkBTyRGujy1Nml
ruDku86Hn/QNZJd//Kpktk0pOGiOET5zlul0VvgGdSKu86q/+kv85sN5hvTvG4/k
sIsD2dBljwBHv/arQNJ/ZVDnr22Bv49iAxCk985VfTGwbeIWPJBAT10dgnNgYapp
ZJ0ACHG2YvsTzcQLOmiozhNk9dFZ/tp/GO5feEoFAu377ZPy7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEzW9X3/fGFgkRyhYWJ0u1rJ9IwTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDVkODY1MmEtMTYxZi0z
MDA3LWE0ZjctYmEwNTAzNjY1ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGi2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACb1Yk2myFvlNO4tdCt9ckaTu8J4r0rW+7WJcFQQ1120U9WL/5IPDiVX
xD0z+l0npNx5AQaA8r1nYWMLMCwP7guH1FqTKzPq5kCsh6lTeinXQMMaubtyv4wK
PZ1p4iZZHUzm78pgZyy3IKR0qmiNdp17evgYjQZlCTLv3TC9/UwVS0cQ6HwWNvwF
CwNBmQHJu05w1+x9Qv17rYQNkIp6w7UzW24eghjXtZZqsm5g0UgWdvRjt9FmuYuR
PZU8tJ53hwNtzwN5wWY51wUclaEP9PKuqntWCksaZWU2WnN1m6qpVul9ciPatfet
WYqy8pFq+64iMnS8BCy3nLq6XLWI5NY=
-----END CERTIFICATE-----
Generated at Sun Nov 1 14:49:33 2026 by rpki-client