Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa
File:                     99e556d5-93d1-3e21-bd16-71af71731fec.roa (raw, json)
Hash identifier:          5iQJB3wPoNiwhDLYWo0TJP11SBbvAbkjXfwxLj5FQxM=
Subject key identifier:   93:E6:F4:E1:97:2E:B5:08:18:C2:8A:10:A2:9F:5F:C3:F0:E4:97:75
Certificate issuer:       /CN=5d42a494-a697-43ad-93a4-e9456779ed9a
Certificate serial:       010D0C9F4328584CAE5E5A6BF93FDECEDDAF8EA0
Authority key identifier: D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     32086
IP address blocks:        204.115.254.0/23 maxlen: 24
                          2620:44:8000::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:5a:6b:f9:3f:de:ce:dd:af:8e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d42a494-a697-43ad-93a4-e9456779ed9a
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=dd309a6b-c23e-4a0c-b1e7-c64f070697b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:d0:b4:a4:9e:eb:5f:9f:6f:ef:db:e0:7e:
                    72:aa:f1:bc:80:bc:1c:1a:ba:0f:e5:51:12:09:e0:
                    bc:4b:8f:eb:b9:46:4a:3b:51:94:70:63:dd:ca:42:
                    ca:e9:e8:25:cc:ff:8f:74:ef:9d:51:2e:1a:d3:7a:
                    7f:48:e6:b6:bd:9a:b7:b0:2d:d3:d3:ad:bc:33:59:
                    ab:54:87:95:51:f2:0d:12:f0:24:35:50:0e:bf:1f:
                    84:80:d3:f7:37:cf:c1:80:66:1b:fb:46:0a:6c:59:
                    1b:06:c1:ba:e7:32:7e:5c:77:f3:fa:ba:25:79:87:
                    1c:e6:be:5c:de:a2:7e:66:6a:58:7f:81:6e:0f:06:
                    72:cf:11:2d:71:65:5f:36:1a:48:79:81:22:ff:a4:
                    97:1a:35:2c:81:1a:0b:6d:27:1e:af:4f:b9:24:b7:
                    19:08:69:c5:0c:db:a8:79:23:c3:70:44:d3:36:ed:
                    ea:15:32:8e:83:31:53:35:55:0e:22:04:35:19:b8:
                    39:10:44:e4:d8:53:94:8e:e1:46:6d:c4:43:fc:42:
                    80:3b:ff:b9:1d:2b:3d:8d:d9:db:95:d4:00:29:80:
                    38:4a:d2:5a:7d:62:8d:0b:b8:21:3e:b8:50:4d:e3:
                    6d:35:6e:17:fe:25:80:43:1a:03:85:ab:24:52:9c:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:F4:E1:97:2E:B5:08:18:C2:8A:10:A2:9F:5F:C3:F0:E4:97:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/99e556d5-93d1-3e21-bd16-71af71731fec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a/5d42a494-a697-43ad-93a4-e9456779ed9a.crl

            X509v3 Authority Key Identifier:
                keyid:D8:20:80:25:0E:59:5F:0E:FC:52:D3:76:D6:77:CB:AA:0F:2D:09:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5d42a494-a697-43ad-93a4-e9456779ed9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.115.254.0/23
                IPv6:
                  2620:44:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:0b:3b:aa:8b:95:4f:c1:0a:e0:a9:27:bd:b9:21:63:a8:
         8a:70:5f:32:b9:1b:b6:ad:ca:16:4c:e3:d4:11:86:97:69:fb:
         05:f7:04:7c:1c:a2:24:f9:7a:85:9c:11:4c:48:29:c7:72:38:
         42:fe:71:93:da:70:9c:5b:03:23:f3:23:13:90:ec:e8:6e:7d:
         ca:2c:e1:b3:b2:4f:9a:46:8a:71:75:cb:c6:2a:d7:c4:b2:4f:
         6e:07:27:34:13:29:36:d6:ac:a3:d2:47:02:96:e3:98:0d:b2:
         62:1e:b8:80:3e:48:76:4e:d5:73:ad:ad:4f:de:3f:99:2e:b2:
         99:51:19:64:8a:e5:3c:29:f2:e3:4f:b9:ec:55:17:f9:6b:3b:
         37:73:dc:98:ed:64:af:9a:4d:6b:64:1c:c2:6d:c2:92:92:3c:
         11:a6:eb:b7:48:46:87:c6:f3:12:ec:6f:29:88:e3:db:16:37:
         a4:ef:8c:f5:1e:5d:67:73:d7:ed:08:07:1d:9d:d2:dc:e2:1e:
         61:19:a1:3e:eb:d3:4e:d2:d1:70:d6:c9:11:ad:16:d8:0d:86:
         82:f7:06:50:23:ed:fa:cd:5f:21:55:52:38:bc:34:ed:5a:32:
         4e:22:7b:b1:b0:10:5b:69:6e:49:45:13:34:11:1d:b8:35:aa:
         aa:7e:47:7b
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEyuXlpr+T/ezt2vjqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ0MmE0OTQtYTY5Ny00M2FkLTkzYTQtZTk0NTY3Nzll
ZDlhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZGQzMDlhNmItYzIzZS00YTBjLWIxZTctYzY0ZjA3MDY5N2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNbQtKSe61+fb+/b4H5yqvG8gLwcGroP5VES
CeC8S4/ruUZKO1GUcGPdykLK6eglzP+PdO+dUS4a03p/SOa2vZq3sC3T0628M1mr
VIeVUfINEvAkNVAOvx+EgNP3N8/BgGYb+0YKbFkbBsG65zJ+XHfz+roleYcc5r5c
3qJ+ZmpYf4FuDwZyzxEtcWVfNhpIeYEi/6SXGjUsgRoLbScer0+5JLcZCGnFDNuo
eSPDcETTNu3qFTKOgzFTNVUOIgQ1Gbg5EETk2FOUjuFGbcRD/EKAO/+5HSs9jdnb
ldQAKYA4StJafWKNC7ghPrhQTeNtNW4X/iWAQxoDhaskUpxtlwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJPm9OGXLrUIGMKKEKKfX8Pw5Jd1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ZDQy
YTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1Njc3OWVkOWEvOTllNTU2ZDUtOTNkMS0z
ZTIxLWJkMTYtNzFhZjcxNzMxZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWQ0MmE0OTQtYTY5Ny00M2FkLTkz
YTQtZTk0NTY3NzllZDlhLzVkNDJhNDk0LWE2OTctNDNhZC05M2E0LWU5NDU2Nzc5
ZWQ5YS5jcmwwHwYDVR0jBBgwFoAU2CCAJQ5ZXw78UtN21nfLqg8tCeIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81ZDQyYTQ5NC1hNjk3LTQzYWQtOTNhNC1lOTQ1
Njc3OWVkOWEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBzHP+MA8E
AgACMAkDBwAmIABEgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgB0LO6qLlU/BCuCpJ725IWOoinBfMrkb
tq3KFkzj1BGGl2n7BfcEfByiJPl6hZwRTEgpx3I4Qv5xk9pwnFsDI/MjE5Ds6G59
yizhs7JPmkaKcXXLxirXxLJPbgcnNBMpNtaso9JHApbjmA2yYh64gD5Idk7Vc62t
T94/mS6ymVEZZIrlPCny40+57FUX+Ws7N3PcmO1kr5pNa2Qcwm3CkpI8Eabrt0hG
h8bzEuxvKYjj2xY3pO+M9R5dZ3PX7QgHHZ3S3OIeYRmhPuvTTtLRcNbJEa0W2A2G
gvcGUCPt+s1fIVVSOLw07VoyTiJ7sbAQW2luSUUTNBEduDWqqn5Hew==
-----END CERTIFICATE-----
Generated at Fri Feb 27 12:41:58 2026 by rpki-client