Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4987e444-2b44-37ad-892b-a88f292f2a7d.roa
File:                     4987e444-2b44-37ad-892b-a88f292f2a7d.roa (raw, json)
Hash identifier:          PhInpdqdBES2mJU3VAaLOOhtppEticB2fiPNM5iP41s=
Subject key identifier:   3D:67:CF:DB:C5:33:E2:4D:FD:34:59:15:E2:CA:5E:48:E5:9A:7B:BC
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAA271588517B299C77CBFCC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4987e444-2b44-37ad-892b-a88f292f2a7d.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        193.123.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:15:88:51:7b:29:9c:77:cb:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=24260c8d-1f0b-4adc-bb01-50fd9386425e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:53:59:ef:da:27:76:0d:06:05:9b:5c:97:
                    95:fc:ab:d1:ea:ec:d0:74:b9:38:1f:a6:55:fb:39:
                    5b:1f:ed:c6:41:00:49:99:3c:aa:6c:4e:70:63:b0:
                    f4:f7:2f:3b:a6:aa:41:cb:01:e8:05:81:fe:b4:fb:
                    b9:a1:9a:fb:c0:c8:f6:ed:ca:45:50:4d:bd:6d:00:
                    fd:1e:cf:56:4a:33:2f:4a:60:99:c1:c3:7e:1b:e6:
                    46:25:55:d6:7d:06:2c:e4:10:89:68:17:0e:24:98:
                    78:03:e0:7c:62:49:45:ce:aa:8b:5f:6e:1a:37:6e:
                    32:d6:ed:ea:5e:87:e2:e7:f9:16:f0:a5:b8:a6:cc:
                    b6:4e:f5:ae:34:e5:0b:51:41:79:09:93:1e:8c:83:
                    16:7a:b9:c6:48:51:b3:25:79:a9:ac:7f:29:29:3c:
                    61:eb:4a:dd:cc:64:43:58:7d:5a:80:e5:1d:c7:40:
                    fb:eb:f8:95:85:7f:7d:d9:91:f1:4f:f6:f0:10:36:
                    ff:6b:38:68:11:db:63:1e:4f:90:3e:76:9d:45:b7:
                    a9:0b:a6:56:61:ab:27:0a:72:24:17:c1:2f:bd:93:
                    1d:ce:4f:a1:f5:c6:09:c2:9b:15:1e:c7:23:e6:a7:
                    3f:50:bf:4b:80:6b:3a:c4:e9:b3:f8:af:7b:39:bd:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:67:CF:DB:C5:33:E2:4D:FD:34:59:15:E2:CA:5E:48:E5:9A:7B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4987e444-2b44-37ad-892b-a88f292f2a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.123.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:91:1f:49:c4:7b:84:a4:df:5b:49:71:e5:25:00:b0:0d:11:
         c6:4e:dd:72:3c:d0:ed:b8:bb:4c:92:0c:8a:27:56:04:62:91:
         e3:83:bd:54:5f:0d:0f:35:0f:41:10:81:ee:1d:dd:4e:ee:75:
         70:9d:76:1e:29:1a:e5:a2:8b:91:13:6d:64:15:e0:82:93:65:
         58:94:65:4d:a7:e4:b0:0c:68:33:93:cf:04:03:c9:4c:54:bc:
         ee:35:10:00:3c:a9:e1:4e:af:69:89:18:00:24:c1:a1:55:33:
         70:f1:0d:38:d5:81:7f:4e:9f:ac:c4:71:a7:bf:54:53:3b:4b:
         72:36:4d:02:75:73:3c:de:e2:31:90:82:27:dc:d4:72:f6:71:
         dc:5e:44:43:ad:48:39:ca:14:93:f6:bc:4d:b3:67:c6:37:ca:
         c9:1e:49:0c:06:3a:96:42:52:ae:fb:b4:f5:d1:5f:67:cf:d4:
         23:c3:1c:aa:1f:43:da:4f:11:66:6c:ef:ea:04:30:18:eb:51:
         01:2a:37:be:8d:b2:d8:a5:d6:b3:01:0d:df:44:2e:03:7e:e7:
         46:31:b6:a4:c1:69:ee:a3:65:11:2a:c3:56:7d:7c:60:dc:dc:
         6f:ab:49:15:04:0d:8a:ea:c0:f7:20:6e:41:0e:45:37:da:fe:
         42:09:f1:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxWIUXspnHfL/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
MjQyNjBjOGQtMWYwYi00YWRjLWJiMDEtNTBmZDkzODY0MjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvdTWe/aJ3YNBgWbXJeV/KvR6uzQdLk4H6ZV
+zlbH+3GQQBJmTyqbE5wY7D09y87pqpBywHoBYH+tPu5oZr7wMj27cpFUE29bQD9
Hs9WSjMvSmCZwcN+G+ZGJVXWfQYs5BCJaBcOJJh4A+B8YklFzqqLX24aN24y1u3q
Xofi5/kW8KW4psy2TvWuNOULUUF5CZMejIMWernGSFGzJXmprH8pKTxh60rdzGRD
WH1agOUdx0D76/iVhX992ZHxT/bwEDb/azhoEdtjHk+QPnadRbepC6ZWYasnCnIk
F8EvvZMdzk+h9cYJwpsVHscj5qc/UL9LgGs6xOmz+K97Ob1fDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1nz9vFM+JN/TRZFeLKXkjlmnu8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDk4N2U0NDQtMmI0NC0z
N2FkLTg5MmItYTg4ZjI5MmYyYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwXvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWRH0nEe4Sk31tJceUlALANEcZO3XI80O24u0ySDIonVgRikeODvVRf
DQ81D0EQge4d3U7udXCddh4pGuWii5ETbWQV4IKTZViUZU2n5LAMaDOTzwQDyUxU
vO41EAA8qeFOr2mJGAAkwaFVM3DxDTjVgX9On6zEcae/VFM7S3I2TQJ1czze4jGQ
gifc1HL2cdxeREOtSDnKFJP2vE2zZ8Y3yskeSQwGOpZCUq77tPXRX2fP1CPDHKof
Q9pPEWZs7+oEMBjrUQEqN76Nstil1rMBDd9ELgN+50YxtqTBae6jZREqw1Z9fGDc
3G+rSRUEDYrqwPcgbkEORTfa/kIJ8Uo=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:28:04 2026 by rpki-client