Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f1952d0b-afdb-3b44-b5da-f0ade6f5c6b4.roa
File:                     f1952d0b-afdb-3b44-b5da-f0ade6f5c6b4.roa (raw, json)
Hash identifier:          BL7ffW7lRY7/98BeKPw2S7LVyzRYm22aVwPCUaHd9H0=
Subject key identifier:   E3:7B:69:AD:3E:2F:CF:DA:40:51:11:BA:1D:91:4A:4E:D5:8C:60:A8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672237E76E0B51D855CDE40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f1952d0b-afdb-3b44-b5da-f0ade6f5c6b4.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     395677
IP address blocks:        209.226.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:23:7e:76:e0:b5:1d:85:5c:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e4ebb998-0ab5-4293-b523-2802033d53ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:bd:ef:41:55:f0:b4:df:1f:c1:27:b8:21:
                    6d:73:29:25:fb:39:37:61:9d:94:8e:6d:0e:91:89:
                    9f:d7:8f:11:77:29:cb:91:7e:53:88:71:95:10:0a:
                    09:6d:b2:9d:9f:40:a5:2a:28:6f:13:d1:0c:57:65:
                    14:cb:b5:fd:25:31:ed:d7:0d:90:55:de:67:6d:cd:
                    18:49:02:1a:d8:a0:43:6a:8a:a1:2e:12:73:a3:0a:
                    22:3c:24:14:3d:aa:c7:36:c0:a6:a1:8c:6d:cb:8a:
                    a2:78:a7:f6:3e:38:3d:88:9e:a4:b8:e5:9b:76:23:
                    1f:e2:1b:fb:0f:53:77:40:c9:78:6e:d9:b9:ed:fb:
                    30:b6:bc:3c:d4:d8:57:d7:33:66:69:5d:e2:44:67:
                    8b:ef:0c:97:f1:03:77:67:b4:ec:4c:30:95:1f:a4:
                    3d:98:1c:71:18:6b:0a:15:91:c7:77:68:2a:f8:ce:
                    46:18:d5:29:25:fd:2a:9d:11:70:81:a4:4e:ef:f4:
                    fb:ba:50:9b:a5:4f:0e:ed:45:d2:82:fb:93:62:a4:
                    e3:6f:94:0b:45:8b:58:2c:6b:7e:4c:f0:1d:76:31:
                    e2:36:27:8a:29:29:1a:13:bf:1b:8f:d8:38:99:c3:
                    f4:07:f2:cf:79:4c:8c:05:9b:2d:ad:f1:fc:e6:e1:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7B:69:AD:3E:2F:CF:DA:40:51:11:BA:1D:91:4A:4E:D5:8C:60:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f1952d0b-afdb-3b44-b5da-f0ade6f5c6b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:c6:54:5f:e0:ea:78:ab:3c:a4:86:a3:7e:e4:69:02:c7:
         e5:1e:6e:d1:8a:b7:bb:db:26:85:25:1f:16:3f:77:33:ed:cf:
         ce:dc:30:7d:88:aa:0e:45:e7:0a:c9:a3:24:55:83:cf:ca:c0:
         eb:08:98:60:dc:d1:d4:96:94:d1:03:0e:d5:43:1d:25:b7:c1:
         a7:be:41:15:70:f5:e2:81:8c:3b:78:2a:fc:e5:c1:6f:fb:c0:
         12:22:26:70:42:33:13:e4:26:18:8f:ed:cd:50:4e:56:d8:ce:
         4e:f5:61:4a:c2:a7:70:a9:65:f7:cb:f4:95:ed:91:80:17:47:
         ab:df:ad:e0:eb:23:3c:b5:78:8b:0e:b0:f7:d2:df:72:65:a8:
         06:2f:73:f7:a2:74:28:13:bd:e0:1f:9d:f7:da:3a:7d:a2:93:
         2f:eb:ac:22:3a:63:9a:34:94:08:48:76:30:de:c9:8c:11:8c:
         f0:e9:83:9b:9c:98:e0:ba:87:75:ef:7f:6d:d2:3c:26:cd:80:
         e2:67:89:17:1f:b5:29:4e:33:78:c5:55:8a:80:42:6a:f5:e6:
         ff:6f:9e:45:21:85:b0:af:cc:d9:df:35:ef:72:ed:a6:ee:d3:
         fd:8e:8a:93:cd:9b:f2:22:e0:89:ed:fb:25:34:52:89:74:d8:
         5d:c2:df:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciN+duC1HYVc3kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTRlYmI5OTgtMGFiNS00MjkzLWI1MjMtMjgwMjAzM2Q1M2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraq970FV8LTfH8EnuCFtcykl+zk3YZ2Ujm0O
kYmf148RdynLkX5TiHGVEAoJbbKdn0ClKihvE9EMV2UUy7X9JTHt1w2QVd5nbc0Y
SQIa2KBDaoqhLhJzowoiPCQUParHNsCmoYxty4qieKf2Pjg9iJ6kuOWbdiMf4hv7
D1N3QMl4btm57fswtrw81NhX1zNmaV3iRGeL7wyX8QN3Z7TsTDCVH6Q9mBxxGGsK
FZHHd2gq+M5GGNUpJf0qnRFwgaRO7/T7ulCbpU8O7UXSgvuTYqTjb5QLRYtYLGt+
TPAddjHiNieKKSkaE78bj9g4mcP0B/LPeUyMBZstrfH85uFNPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFON7aa0+L8/aQFERuh2RSk7VjGCoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZjE5NTJkMGItYWZkYi0z
YjQ0LWI1ZGEtZjBhZGU2ZjVjNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eLJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9OxlRf4Op4qzykhqN+5GkCx+UebtGKt7vbJoUlHxY/dzPtz87cMH2I
qg5F5wrJoyRVg8/KwOsImGDc0dSWlNEDDtVDHSW3wae+QRVw9eKBjDt4KvzlwW/7
wBIiJnBCMxPkJhiP7c1QTlbYzk71YUrCp3CpZffL9JXtkYAXR6vfreDrIzy1eIsO
sPfS33JlqAYvc/eidCgTveAfnffaOn2iky/rrCI6Y5o0lAhIdjDeyYwRjPDpg5uc
mOC6h3Xvf23SPCbNgOJniRcftSlOM3jFVYqAQmr15v9vnkUhhbCvzNnfNe9y7abu
0/2OipPNm/Ii4Int+yU0Uol02F3C34g=
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:55:59 2026 by rpki-client