Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/713f08bd-087a-38d7-8fcd-6dd6f01a76a2.roa
File:                     713f08bd-087a-38d7-8fcd-6dd6f01a76a2.roa (raw, json)
Hash identifier:          u88mz3J4/sD/OIJSWPb53BIzkTOvybca3ndJZ99A5H8=
Subject key identifier:   CC:C7:EF:96:65:A6:C7:DB:82:C9:22:3B:46:AA:2E:A7:B9:1B:73:E3
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584F4973944BF7C08E47DFFF7C20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/713f08bd-087a-38d7-8fcd-6dd6f01a76a2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19905
IP address blocks:        216.108.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:94:4b:f7:c0:8e:47:df:ff:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=10b9ed0d-99f2-4206-b4a0-02b3a67622f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:45:fc:a1:ec:c8:05:f3:5b:e7:80:7c:5c:
                    ff:74:6e:ea:ae:16:66:f5:79:a1:19:4f:64:56:60:
                    50:df:bb:ef:22:5c:3c:19:d9:71:00:63:42:34:68:
                    3d:24:08:21:84:cd:20:aa:f5:ce:7f:c5:bd:23:4c:
                    4d:76:7e:95:1b:84:32:92:50:1e:9b:d1:f4:c7:1d:
                    4c:1b:0a:0c:47:1f:8b:91:c5:a2:61:78:1d:cb:94:
                    e8:60:ee:8b:6c:de:bf:00:c7:ed:c9:06:20:25:63:
                    87:0e:70:d5:9e:c0:c4:0e:9b:ad:43:39:cb:11:51:
                    e6:f9:94:38:36:c2:2f:f3:8c:be:87:73:42:3f:57:
                    38:ee:a7:d8:da:fa:be:16:f9:0d:ed:cf:af:1d:7b:
                    a4:35:da:f8:bf:b8:f0:1f:bc:4d:df:2a:ab:23:be:
                    ae:36:5c:9f:bf:e3:ed:0c:29:de:1a:c6:49:6d:dc:
                    9a:7a:f7:26:f5:30:8a:c3:f0:a2:bd:1d:e5:ca:d2:
                    62:c4:e0:3f:08:64:d3:13:22:02:f2:e6:a8:fd:6f:
                    55:f7:66:6b:32:a5:4c:72:98:58:e1:08:33:ff:67:
                    2b:a1:36:f2:94:a6:f6:24:5f:28:77:cf:db:d7:39:
                    76:82:ca:9c:46:6a:6f:0f:f4:9a:9e:30:af:c0:20:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:EF:96:65:A6:C7:DB:82:C9:22:3B:46:AA:2E:A7:B9:1B:73:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/713f08bd-087a-38d7-8fcd-6dd6f01a76a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.108.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:f1:7f:8b:a9:06:1c:81:06:bd:a7:be:c8:42:1b:21:35:
         5c:47:15:c4:36:71:e4:d9:41:df:1f:02:a9:88:91:b7:26:b9:
         19:4b:7a:1c:a4:8a:d4:b7:41:f4:f4:c9:2b:c1:88:a9:51:89:
         93:b4:0f:a2:c1:a0:0d:ff:04:fd:2d:68:e1:38:01:f7:cf:08:
         a9:69:c7:bb:6c:bb:15:d2:84:a5:1c:f8:6c:89:27:e5:04:49:
         0d:87:e3:8a:6b:5e:3d:46:b3:df:3c:8b:54:e0:3f:62:3d:ba:
         59:94:ad:1d:36:c8:52:49:d3:9e:9b:3e:88:3c:5f:d5:4e:01:
         36:00:9d:98:f4:da:63:9c:cb:f4:50:1a:04:98:b3:f0:86:b3:
         48:bc:86:9c:2c:0e:02:40:d6:3b:c8:d7:d9:bb:34:86:d8:3e:
         5a:c3:45:ec:3a:46:3a:db:99:5f:db:5a:67:d4:db:58:7b:17:
         9d:77:73:40:56:21:bb:d3:1e:62:b3:75:80:9e:47:ee:46:11:
         74:75:fd:0e:11:b8:01:d8:7e:ea:f4:d0:b9:db:71:6b:6e:cc:
         64:f3:91:47:88:f5:a0:7f:0d:5a:37:bf:8f:c6:8e:2d:e9:e3:
         39:e8:8a:8f:34:79:24:73:d5:2f:6c:d5:4a:d1:cd:67:c4:bf:
         6a:80:82:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5RL98COR9//fCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTBiOWVkMGQtOTlmMi00MjA2LWI0YTAtMDJiM2E2NzYyMmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhedF/KHsyAXzW+eAfFz/dG7qrhZm9XmhGU9k
VmBQ37vvIlw8GdlxAGNCNGg9JAghhM0gqvXOf8W9I0xNdn6VG4QyklAem9H0xx1M
GwoMRx+LkcWiYXgdy5ToYO6LbN6/AMftyQYgJWOHDnDVnsDEDputQznLEVHm+ZQ4
NsIv84y+h3NCP1c47qfY2vq+FvkN7c+vHXukNdr4v7jwH7xN3yqrI76uNlyfv+Pt
DCneGsZJbdyaevcm9TCKw/CivR3lytJixOA/CGTTEyIC8uao/W9V92ZrMqVMcphY
4Qgz/2croTbylKb2JF8od8/b1zl2gsqcRmpvD/SanjCvwCAP+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMzH75ZlpsfbgskiO0aqLqe5G3PjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzEzZjA4YmQtMDg3YS0z
OGQ3LThmY2QtNmRkNmYwMWE3NmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GzeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFT18X+LqQYcgQa9p77IQhshNVxHFcQ2ceTZQd8fAqmIkbcmuRlLehyk
itS3QfT0ySvBiKlRiZO0D6LBoA3/BP0taOE4AffPCKlpx7tsuxXShKUc+GyJJ+UE
SQ2H44prXj1Gs988i1TgP2I9ulmUrR02yFJJ056bPog8X9VOATYAnZj02mOcy/RQ
GgSYs/CGs0i8hpwsDgJA1jvI19m7NIbYPlrDRew6RjrbmV/bWmfU21h7F513c0BW
IbvTHmKzdYCeR+5GEXR1/Q4RuAHYfur00LnbcWtuzGTzkUeI9aB/DVo3v4/Gji3p
4znoio80eSRz1S9s1UrRzWfEv2qAglY=
-----END CERTIFICATE-----
Generated at Sat Oct 3 03:33:31 2026 by rpki-client