Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa
File:                     5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa (raw, json)
Hash identifier:          elu9qnTBZWXE3t8PInLYL0cN2K8fwx94NBPBbBO5GSE=
Subject key identifier:   A2:47:B3:56:99:C3:45:79:35:04:A0:9E:87:94:58:DD:01:A0:BD:F3
Certificate issuer:       /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
Certificate serial:       010D0C9F4328584C7D7C5DA456035E053207DE00
Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     20394
IP address blocks:        216.177.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:5d:a4:56:03:5e:05:32:07:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=f05de78a-994d-4b08-930a-e2e1b72b05df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e4:53:2d:22:70:de:15:cb:34:b6:f3:17:4b:
                    07:17:10:f9:5f:b9:d8:53:c8:b2:0f:1f:79:91:41:
                    b4:e0:87:93:7c:d1:76:60:19:3d:c1:d9:d5:0b:f1:
                    d5:3c:fa:4f:fa:dc:13:23:3b:bd:dc:6c:1f:ce:8e:
                    d4:85:9b:8b:90:58:7b:09:00:78:37:6f:a3:13:10:
                    3f:87:88:a9:7a:fe:60:f7:29:c7:1b:62:a3:0f:e9:
                    df:08:1a:b8:18:71:7e:a5:e3:10:d0:a5:0f:37:0f:
                    69:87:c7:5a:7b:5d:9c:69:d3:b5:cb:21:b3:c3:7c:
                    d7:4a:ed:e7:4b:9f:45:65:3f:1f:de:12:34:ae:16:
                    14:5b:ea:74:e7:54:7b:7d:30:4e:25:35:68:8b:02:
                    23:28:a0:8f:7c:39:0d:23:73:22:74:78:6d:ee:10:
                    8e:57:5d:14:1b:b1:25:cd:de:5a:16:c6:98:64:68:
                    ea:bc:84:f9:ef:53:0f:26:89:63:1f:4c:c8:f9:18:
                    7c:c0:11:83:62:69:61:d9:18:d7:0b:5f:18:38:3f:
                    ee:09:27:32:11:36:54:06:57:37:ce:8a:ed:9e:8c:
                    a9:8f:22:18:fc:7a:ea:ed:7d:22:e1:18:1b:e4:db:
                    46:f0:be:29:2d:3c:34:e6:63:32:64:c7:5d:31:a0:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:B3:56:99:C3:45:79:35:04:A0:9E:87:94:58:DD:01:A0:BD:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f6:43:c2:7b:fa:01:f0:19:a1:d8:03:23:49:a1:b3:7f:ad:
         b0:cc:e3:ed:7a:a6:52:7a:0c:91:03:bf:f0:ce:82:82:d1:6d:
         98:28:39:aa:eb:11:38:71:11:58:89:7c:1f:ad:b3:d3:af:cc:
         8a:89:4b:56:74:44:fc:6e:e7:61:83:2d:47:d5:9d:51:1f:99:
         a3:f6:b6:bc:ea:47:82:74:4f:3f:13:bf:a2:83:8b:0f:65:cc:
         0b:73:c7:5f:b5:27:98:9b:6d:c2:a5:6f:e7:86:17:72:57:19:
         cb:4f:6f:d3:b2:06:1d:84:c1:8d:26:f4:92:d9:72:97:dc:47:
         56:42:be:8b:c1:8e:ec:8c:5c:33:f4:76:cd:de:79:16:ea:af:
         e4:31:d3:4a:85:76:ff:0a:34:5d:77:60:57:7d:4f:56:74:90:
         72:e6:e4:11:c5:1a:b6:f9:19:c1:fa:cb:db:5b:c3:f0:0c:86:
         c0:59:33:08:5a:16:c8:8c:41:81:06:fc:58:55:93:59:51:a4:
         2c:a6:f2:84:fe:92:74:8c:38:32:34:10:d7:23:2f:b8:2e:62:
         6a:a3:f9:bf:ee:96:af:9c:d6:7b:d5:d7:10:ee:81:d9:25:35:
         e9:f3:57:bc:13:da:99:b6:f2:3a:31:34:74:5a:09:63:42:53:
         f7:f2:09:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fF2kVgNeBTIH3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDc5NWI3YjktZjJkYS00NGZhLWIxODEtZDc0YTU3ZjY0
ZTFiMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk
ZjA1ZGU3OGEtOTk0ZC00YjA4LTkzMGEtZTJlMWI3MmIwNWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+RTLSJw3hXLNLbzF0sHFxD5X7nYU8iyDx95
kUG04IeTfNF2YBk9wdnVC/HVPPpP+twTIzu93Gwfzo7UhZuLkFh7CQB4N2+jExA/
h4ipev5g9ynHG2KjD+nfCBq4GHF+peMQ0KUPNw9ph8dae12cadO1yyGzw3zXSu3n
S59FZT8f3hI0rhYUW+p051R7fTBOJTVoiwIjKKCPfDkNI3MidHht7hCOV10UG7El
zd5aFsaYZGjqvIT571MPJoljH0zI+Rh8wBGDYmlh2RjXC18YOD/uCScyETZUBlc3
zortnoypjyIY/Hrq7X0i4Rgb5NtG8L4pLTw05mMyZMddMaBLfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJHs1aZw0V5NQSgnoeUWN0BoL3zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNzk1
YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRhNTdmNjRlMWIvNWVkYzk2YTItZDdlNC0z
NGYxLTk1MmMtZmQxY2ExZTcwNmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDc5NWI3YjktZjJkYS00NGZhLWIx
ODEtZDc0YTU3ZjY0ZTFiLzA3OTViN2I5LWYyZGEtNDRmYS1iMTgxLWQ3NGE1N2Y2
NGUxYi5jcmwwHwYDVR0jBBgwFoAUo/sdWc0v2+ROWIpYu25Nbyd2SgMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNzk1YjdiOS1mMmRhLTQ0ZmEtYjE4MS1kNzRh
NTdmNjRlMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2LHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJz2Q8J7+gHwGaHYAyNJobN/rbDM4+16plJ6DJEDv/DOgoLRbZgoOarr
EThxEViJfB+ts9OvzIqJS1Z0RPxu52GDLUfVnVEfmaP2trzqR4J0Tz8Tv6KDiw9l
zAtzx1+1J5ibbcKlb+eGF3JXGctPb9OyBh2EwY0m9JLZcpfcR1ZCvovBjuyMXDP0
ds3eeRbqr+Qx00qFdv8KNF13YFd9T1Z0kHLm5BHFGrb5GcH6y9tbw/AMhsBZMwha
FsiMQYEG/FhVk1lRpCym8oT+knSMODI0ENcjL7guYmqj+b/ulq+c1nvV1xDugdkl
NenzV7wT2pm28joxNHRaCWNCU/fyCUo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:53:43 2026 by rpki-client