Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/372749b3-ba25-396b-be3e-d865d4373684.roa
File:                     372749b3-ba25-396b-be3e-d865d4373684.roa (raw, json)
Hash identifier:          gDLVebuuior48NeCRi+5fnX573LLth9A40uIGKZyo+8=
Subject key identifier:   C5:B6:84:1B:F1:62:39:FF:21:8D:2C:3A:CE:30:9D:5E:89:75:CC:C1
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F4328584EA7925F2D6E6CDCDC38B04500
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/372749b3-ba25-396b-be3e-d865d4373684.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7752
IP address blocks:        192.41.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:5f:2d:6e:6c:dc:dc:38:b0:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2716d312-38a6-466c-94d6-45a6fa637e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:a2:c5:90:a7:ac:91:7e:41:87:87:6d:8f:
                    ec:45:4e:d2:d8:d0:a6:15:7b:c2:ed:ca:9e:fe:dd:
                    b2:24:86:29:3a:2c:87:a0:31:4a:11:9a:d4:dc:8a:
                    de:a8:79:43:79:69:f5:f8:12:e4:72:9d:e7:10:61:
                    08:e2:65:9a:85:cd:37:a6:07:cf:0e:46:1d:43:68:
                    a1:64:43:c5:1d:4a:ad:cb:be:ac:b6:b9:c2:b8:4e:
                    40:ce:1a:b3:c1:24:18:24:8d:12:d9:7e:2e:42:b0:
                    c0:62:12:d2:68:64:d3:b8:40:14:c2:36:45:fc:b5:
                    c6:9b:d6:bd:25:19:e2:5c:42:f5:8d:f9:91:d6:cd:
                    e7:b5:bb:31:17:7b:02:43:4a:84:30:65:76:20:42:
                    62:41:4f:4d:91:4b:0e:f6:ee:37:d0:63:a4:9b:72:
                    3e:3b:e7:17:02:a7:6c:8a:39:07:e9:e5:70:b7:f5:
                    7d:3e:8e:e4:8c:cb:8a:72:c0:59:27:40:26:13:54:
                    5f:94:e6:e8:85:08:d0:c2:da:6e:df:b6:fe:9e:d7:
                    b9:75:c8:1f:d4:1a:b9:33:70:d1:c1:1a:f4:12:cd:
                    a4:f4:1a:11:e5:83:d9:29:9d:47:36:9b:ff:0d:c9:
                    75:3b:ef:3b:30:91:78:91:fe:b0:7d:2e:2a:62:66:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:84:1B:F1:62:39:FF:21:8D:2C:3A:CE:30:9D:5E:89:75:CC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/372749b3-ba25-396b-be3e-d865d4373684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:36:9f:91:b9:bd:74:84:cf:e4:7e:af:b0:44:f8:ad:85:
         a0:d0:80:67:26:70:30:5e:58:45:b3:f3:b8:b7:3f:94:c9:f2:
         e7:15:2d:52:10:9e:72:27:69:e7:94:b6:47:f3:5f:15:bf:d4:
         01:bf:b1:5c:0b:64:b1:e5:97:74:1e:90:28:d4:71:1d:9e:85:
         c3:ed:a2:59:9a:cc:f1:a8:f9:6e:44:b8:37:6a:52:43:cc:06:
         48:a6:cd:c2:55:9e:2d:2b:91:c5:84:4b:57:4f:a5:82:db:64:
         86:45:a0:b6:f2:1e:e0:cf:26:8a:7f:a5:a6:82:14:29:c3:a4:
         5e:76:61:31:7e:50:3b:91:c9:c1:48:11:7a:35:a2:aa:36:34:
         c7:1a:1d:92:51:fb:ac:07:da:1d:4d:23:d2:1c:56:fd:26:c2:
         8e:5f:c9:fb:3c:58:8a:cd:cc:7a:bd:45:30:a5:32:4c:8c:26:
         64:19:74:e0:6f:b4:22:8c:c7:e9:93:b3:f4:e7:93:ae:92:bf:
         4c:c7:81:98:5a:df:18:f1:0a:4a:b8:e7:d4:eb:f4:96:78:94:
         a2:57:cd:fc:d6:3d:79:a8:73:f1:ab:90:a9:8e:be:c3:07:71:
         da:24:75:b8:f9:2e:bd:a6:16:d7:93:07:95:5c:8c:8d:0c:80:
         45:12:7a:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkl8tbmzc3DiwRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWZiZDA5OGYtOWUwMS00YzI2LTkzOTUtZTViNjMzOTlh
Y2FmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjcxNmQzMTItMzhhNi00NjZjLTk0ZDYtNDVhNmZhNjM3ZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6ixZCnrJF+QYeHbY/sRU7S2NCmFXvC7cqe
/t2yJIYpOiyHoDFKEZrU3IreqHlDeWn1+BLkcp3nEGEI4mWahc03pgfPDkYdQ2ih
ZEPFHUqty76strnCuE5AzhqzwSQYJI0S2X4uQrDAYhLSaGTTuEAUwjZF/LXGm9a9
JRniXEL1jfmR1s3ntbsxF3sCQ0qEMGV2IEJiQU9NkUsO9u430GOkm3I+O+cXAqds
ijkH6eVwt/V9Po7kjMuKcsBZJ0AmE1RflObohQjQwtpu37b+nte5dcgf1Bq5M3DR
wRr0Es2k9BoR5YPZKZ1HNpv/Dcl1O+87MJF4kf6wfS4qYmabwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMW2hBvxYjn/IY0sOs4wnV6JdczBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJk
MDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2MzM5OWFjYWYvMzcyNzQ5YjMtYmEyNS0z
OTZiLWJlM2UtZDg2NWQ0MzczNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWZiZDA5OGYtOWUwMS00YzI2LTkz
OTUtZTViNjMzOTlhY2FmLzlmYmQwOThmLTllMDEtNGMyNi05Mzk1LWU1YjYzMzk5
YWNhZi5jcmwwHwYDVR0jBBgwFoAUOFJoHvmhwRVyZ6MF4Rpo/COLcxAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85ZmJkMDk4Zi05ZTAxLTRjMjYtOTM5NS1lNWI2
MzM5OWFjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCneMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpnNp+Rub10hM/kfq+wRPithaDQgGcmcDBeWEWz87i3P5TJ8ucVLVIQ
nnInaeeUtkfzXxW/1AG/sVwLZLHll3QekCjUcR2ehcPtolmazPGo+W5EuDdqUkPM
BkimzcJVni0rkcWES1dPpYLbZIZFoLbyHuDPJop/paaCFCnDpF52YTF+UDuRycFI
EXo1oqo2NMcaHZJR+6wH2h1NI9IcVv0mwo5fyfs8WIrNzHq9RTClMkyMJmQZdOBv
tCKMx+mTs/Tnk66Sv0zHgZha3xjxCkq459Tr9JZ4lKJXzfzWPXmoc/GrkKmOvsMH
cdokdbj5Lr2mFteTB5VcjI0MgEUSerc=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:54:17 2026 by rpki-client