Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9863aa4-c995-39bb-a350-741e80fbfecc.roa
File:                     a9863aa4-c995-39bb-a350-741e80fbfecc.roa (raw, json)
Hash identifier:          hiojQgMtqYUF5ASnjYA4AHy2TLz9DQ86lEPjMZqOAKo=
Subject key identifier:   CE:43:07:8B:ED:04:63:18:5D:B6:B1:68:AC:10:41:13:09:88:BB:9D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CA908E3A1F9DC6B2C23C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9863aa4-c995-39bb-a350-741e80fbfecc.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     855
IP address blocks:        207.231.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:90:8e:3a:1f:9d:c6:b2:c2:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=caf22ff2-fabb-4706-a8b3-685fc74872fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c9:66:c5:9d:97:e0:e5:eb:63:91:d8:94:eb:
                    09:9b:d1:a4:7f:ba:08:67:d8:6c:37:1c:e7:f0:91:
                    84:99:e3:75:6c:d6:33:5f:61:65:92:eb:4e:e6:e6:
                    10:6f:13:20:bb:02:dd:db:7d:90:7b:1f:33:4b:32:
                    69:e5:10:9d:4b:c4:a1:dd:1b:11:ec:7f:0d:87:32:
                    e5:e0:59:a2:0d:30:0d:58:6d:d6:68:20:d4:26:5d:
                    5a:b7:84:9f:3c:57:ab:ed:83:c4:cd:42:56:02:81:
                    75:b6:79:6e:45:da:c1:93:eb:33:fc:0a:93:b5:61:
                    bd:b2:6a:3c:ed:18:f3:64:fb:ba:c4:4e:c7:81:51:
                    a1:f9:66:b7:0e:87:da:2a:69:5c:c3:18:09:6c:2c:
                    25:a3:a0:c8:0c:8c:dd:80:a6:e5:2c:82:b1:87:06:
                    ef:e6:1d:51:79:d7:68:9f:01:39:4f:b9:87:e8:1a:
                    9d:a9:53:35:f9:ec:b4:75:d4:af:73:d6:c0:2e:4b:
                    3c:a7:63:36:29:23:9d:19:89:57:de:6a:36:6d:f1:
                    4d:63:10:cf:2d:92:bc:54:b1:a1:be:a8:8c:5f:65:
                    38:ae:c2:75:09:aa:39:1e:a3:37:6d:32:b5:7e:8d:
                    3e:b0:f1:ba:d6:7a:9f:c2:75:bb:61:83:71:e9:da:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:43:07:8B:ED:04:63:18:5D:B6:B1:68:AC:10:41:13:09:88:BB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9863aa4-c995-39bb-a350-741e80fbfecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:09:71:27:5a:76:50:6e:ca:16:cd:af:34:72:d4:9b:28:0f:
         02:03:90:6b:91:ea:b7:07:7f:8e:f3:e5:6e:d2:e6:78:23:ca:
         c2:bd:6f:fe:8c:c3:73:bd:22:70:89:d3:46:e2:db:2a:a7:a2:
         89:e2:00:08:0c:2f:45:30:58:19:fa:5a:00:ea:e4:ca:a4:fd:
         0c:88:c1:57:36:a7:65:60:24:37:37:b1:6c:6c:46:1c:63:40:
         5f:25:74:c5:61:c2:c2:60:ee:31:63:cc:3d:d0:0d:0b:5e:1e:
         ff:4c:4a:88:0c:bb:34:cc:8b:7a:d0:7a:aa:8f:d5:b4:0d:c5:
         93:ef:ef:d5:e3:00:c8:42:7e:74:21:a9:52:85:1d:84:9f:b6:
         f2:3d:33:b4:01:e4:57:ac:40:22:d9:ca:20:39:9c:22:7b:ae:
         81:5e:89:15:7e:fb:57:97:b7:1f:22:46:9a:91:42:05:17:86:
         5a:44:fe:00:70:1b:7c:ee:f6:d0:54:c8:85:26:51:3b:ba:87:
         61:15:ff:d5:3b:9b:ca:cc:bf:3c:41:bc:c0:3e:2c:53:03:28:
         1f:50:7a:99:e0:a9:79:9f:bd:c9:dc:e9:f9:b2:06:4a:98:a1:
         3c:17:35:e2:dd:5e:22:84:3e:2f:a0:04:f4:c7:75:86:f5:a7:
         de:be:3e:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DypCOOh+dxrLCPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
Y2FmMjJmZjItZmFiYi00NzA2LWE4YjMtNjg1ZmM3NDg3MmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9slmxZ2X4OXrY5HYlOsJm9Gkf7oIZ9hsNxzn
8JGEmeN1bNYzX2FlkutO5uYQbxMguwLd232Qex8zSzJp5RCdS8Sh3RsR7H8NhzLl
4FmiDTANWG3WaCDUJl1at4SfPFer7YPEzUJWAoF1tnluRdrBk+sz/AqTtWG9smo8
7RjzZPu6xE7HgVGh+Wa3DofaKmlcwxgJbCwlo6DIDIzdgKblLIKxhwbv5h1Reddo
nwE5T7mH6BqdqVM1+ey0ddSvc9bALks8p2M2KSOdGYlX3mo2bfFNYxDPLZK8VLGh
vqiMX2U4rsJ1Cao5HqM3bTK1fo0+sPG61nqfwnW7YYNx6drAoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5DB4vtBGMYXbaxaKwQQRMJiLudMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTk4NjNhYTQtYzk5NS0z
OWJiLWEzNTAtNzQxZTgwZmJmZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz+fgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAJcSdadlBuyhbNrzRy1JsoDwIDkGuR6rcHf47z5W7S5ngjysK9b/6M
w3O9InCJ00bi2yqnooniAAgML0UwWBn6WgDq5Mqk/QyIwVc2p2VgJDc3sWxsRhxj
QF8ldMVhwsJg7jFjzD3QDQteHv9MSogMuzTMi3rQeqqP1bQNxZPv79XjAMhCfnQh
qVKFHYSftvI9M7QB5FesQCLZyiA5nCJ7roFeiRV++1eXtx8iRpqRQgUXhlpE/gBw
G3zu9tBUyIUmUTu6h2EV/9U7m8rMvzxBvMA+LFMDKB9QepngqXmfvcnc6fmyBkqY
oTwXNeLdXiKEPi+gBPTHdYb1p96+Psk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:29:44 2026 by rpki-client