Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa
File:                     ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa (raw, json)
Hash identifier:          pO2NJojn2PnseH9rS9sGc4s2CAsQ5i+MxtYXMlc5wzc=
Subject key identifier:   1D:16:B5:2A:21:8C:B6:6C:72:56:06:E3:B5:01:08:02:F9:FF:4B:C7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A290E6EC9D658C761100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     40439
IP address blocks:        142.176.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a2:90:e6:ec:9d:65:8c:76:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=6803b8aa-d909-477d-80a0-8fe4d1e93a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e6:3f:8b:b6:45:bf:10:e8:f7:3d:a7:ac:5a:
                    ee:d5:f5:ce:9d:4f:56:42:f8:1a:c5:12:31:b6:c1:
                    7b:e1:eb:52:5d:0b:94:f8:b6:c7:c6:1c:b9:2d:0e:
                    5e:ab:32:0e:60:4b:c5:c1:e6:32:6a:69:43:4b:95:
                    32:9e:bf:1a:9f:d5:9d:93:77:1f:67:4e:ea:a3:27:
                    7a:ae:da:62:15:bf:ff:5a:0f:7e:7d:db:c3:e7:e1:
                    0d:2c:ef:34:a7:3d:17:73:13:53:2a:a1:a5:7a:1c:
                    4a:b3:42:da:a0:a2:c1:50:01:5f:6e:bd:fe:61:6d:
                    19:c4:0c:b6:d6:de:d5:81:a6:6e:a0:8f:60:64:94:
                    97:03:94:2b:db:72:3a:47:f3:41:a4:6b:f0:46:70:
                    b7:ee:6f:e9:0a:4b:0d:62:34:ce:83:f2:35:fc:b3:
                    f8:ab:df:33:a1:5b:39:d6:d7:c5:09:c5:0b:c7:e3:
                    5a:45:c7:e9:4c:c3:fc:a6:83:2d:74:28:8d:64:19:
                    cd:1a:2c:a3:92:95:61:6d:90:bb:11:0b:a7:00:28:
                    dc:5e:e9:82:7a:d7:d3:56:c8:38:f3:45:22:1d:47:
                    45:3a:18:32:f1:9c:00:1b:24:3a:8d:24:57:18:71:
                    49:88:64:b4:6b:41:70:84:6c:5c:0e:f1:53:e2:69:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:16:B5:2A:21:8C:B6:6C:72:56:06:E3:B5:01:08:02:F9:FF:4B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca54ebdf-2178-33e1-8f18-10c1abac0c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.176.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:35:41:4d:ec:a7:d0:7e:23:d9:14:29:03:63:49:95:ee:eb:
         eb:04:31:f3:1b:76:e8:48:1d:b0:e1:94:94:0f:ab:4b:b6:fa:
         ee:13:4b:6c:49:6d:9b:7d:ee:76:c4:64:31:fa:d2:c3:0c:10:
         c5:7d:b5:92:17:89:40:37:b9:e7:9d:18:da:bc:04:cf:0a:dc:
         1c:a2:a7:65:3e:53:cc:1a:cc:b5:d8:50:81:d3:85:4c:4f:8c:
         f1:8e:ea:53:b2:6e:e1:41:c9:e7:2e:6a:42:2c:89:a5:26:be:
         37:2b:ef:e4:0e:f6:08:3d:1a:da:96:a3:18:78:04:03:12:25:
         39:ea:d2:21:e3:e9:7b:3e:af:30:a8:45:c7:05:e0:ce:d6:a2:
         e1:40:44:a0:a1:a9:d4:84:54:bb:8f:dd:d7:3b:f0:20:ad:d9:
         00:15:32:fc:fc:3a:ac:6a:3e:f4:43:07:d5:e1:84:fe:9e:03:
         ff:6c:97:29:a3:d2:a8:f8:95:f2:0d:be:75:50:3c:1f:0c:a8:
         73:9b:d5:80:ce:86:d9:e1:25:94:70:e2:b1:dd:a9:4e:ab:2b:
         a1:01:5e:bf:7a:73:12:48:8b:53:9e:af:d9:7f:24:04:13:33:
         f1:4d:5e:af:00:d6:42:b0:5c:fc:f5:4f:62:ca:70:43:f0:38:
         79:38:5c:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqKQ5uydZYx2EQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NjgwM2I4YWEtZDkwOS00NzdkLTgwYTAtOGZlNGQxZTkzYTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguY/i7ZFvxDo9z2nrFru1fXOnU9WQvgaxRIx
tsF74etSXQuU+LbHxhy5LQ5eqzIOYEvFweYyamlDS5Uynr8an9Wdk3cfZ07qoyd6
rtpiFb//Wg9+fdvD5+ENLO80pz0XcxNTKqGlehxKs0LaoKLBUAFfbr3+YW0ZxAy2
1t7VgaZuoI9gZJSXA5Qr23I6R/NBpGvwRnC37m/pCksNYjTOg/I1/LP4q98zoVs5
1tfFCcULx+NaRcfpTMP8poMtdCiNZBnNGiyjkpVhbZC7EQunACjcXumCetfTVsg4
80UiHUdFOhgy8ZwAGyQ6jSRXGHFJiGS0a0FwhGxcDvFT4mnTtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0WtSohjLZsclYG47UBCAL5/0vHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2E1NGViZGYtMjE3OC0z
M2UxLThmMTgtMTBjMWFiYWMwYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjrBCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFA1QU3sp9B+I9kUKQNjSZXu6+sEMfMbduhIHbDhlJQPq0u2+u4TS2xJ
bZt97nbEZDH60sMMEMV9tZIXiUA3ueedGNq8BM8K3Byip2U+U8wazLXYUIHThUxP
jPGO6lOybuFByecuakIsiaUmvjcr7+QO9gg9GtqWoxh4BAMSJTnq0iHj6Xs+rzCo
RccF4M7WouFARKChqdSEVLuP3dc78CCt2QAVMvz8OqxqPvRDB9XhhP6eA/9slymj
0qj4lfINvnVQPB8MqHOb1YDOhtnhJZRw4rHdqU6rK6EBXr96cxJIi1Oer9l/JAQT
M/FNXq8A1kKwXPz1T2LKcEPwOHk4XBI=
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:01:30 2026 by rpki-client