Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
File:                     eaecfca3-d1da-334c-8303-a1be6d98218d.roa (raw, json)
Hash identifier:          aYKonXFbYXdmw7uDbxmlVjgy2bjE31mcr1WTifcDCHk=
Subject key identifier:   44:89:8A:D0:78:06:25:12:B3:52:F7:A6:7B:5D:FE:91:F3:05:40:B2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F11A00EC9819616F6A070A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        174.160.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a0:0e:c9:81:96:16:f6:a0:70:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=7536c034-d1f1-48df-a375-5aa9bbdb5607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:1b:08:9c:bb:33:2b:d5:12:29:db:1d:58:
                    23:04:f4:1c:07:8e:a4:49:83:1e:69:57:fd:75:78:
                    f7:fb:3f:69:d6:33:8e:36:ed:84:0f:21:c0:21:c5:
                    2b:52:67:63:93:92:1b:d9:b1:98:d9:06:00:a8:b8:
                    be:b8:e1:9c:66:a4:f1:54:cb:68:7f:d6:46:8f:ad:
                    ae:12:bd:fd:d6:4f:0f:f0:7b:36:81:5c:d1:6f:df:
                    fe:c3:e1:ec:c6:3a:bf:7a:f0:c2:fd:13:58:64:2e:
                    4a:75:64:ce:07:30:a1:84:1c:b9:2b:d0:45:6e:95:
                    1c:68:da:bd:70:84:d3:ba:7e:28:31:5e:08:a1:ff:
                    03:75:06:ee:32:04:e6:d8:7f:4f:df:22:98:33:ea:
                    b9:b2:a7:c6:94:af:5e:ff:4c:95:a8:45:b3:5b:10:
                    35:70:78:10:2d:9f:df:66:e8:26:ee:9f:7b:e3:0d:
                    c4:2d:9c:f2:47:99:23:69:e0:de:19:ce:1e:d5:ed:
                    d5:39:77:89:f3:37:56:2f:8a:54:35:2b:5d:be:cb:
                    e3:c1:b5:f9:32:89:23:72:84:df:16:bf:54:0f:b9:
                    fc:79:36:8f:2b:16:ef:b0:b5:1d:7f:1a:29:f1:94:
                    bd:87:89:cd:5a:e7:2b:41:43:68:1b:38:19:50:ee:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:8A:D0:78:06:25:12:B3:52:F7:A6:7B:5D:FE:91:F3:05:40:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.160.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:18:4f:25:56:af:6b:86:b4:cc:79:7a:ee:08:ec:b7:7b:4a:
         56:00:c5:72:15:10:f3:bc:69:3a:8d:c4:29:df:b3:67:9b:b5:
         5f:14:89:e1:22:e5:0f:2c:e4:d7:eb:3a:63:27:bd:82:f1:68:
         61:fc:fa:f2:64:6e:16:48:88:2b:56:81:0e:77:bd:88:99:2f:
         c3:c9:4e:e9:45:bf:98:9e:ac:21:42:37:05:7f:5e:9a:c5:b0:
         6d:4d:24:11:ab:2f:2f:2f:36:67:e9:81:e1:6b:82:f8:58:9c:
         c5:31:19:c8:9f:12:4d:7c:2e:b5:2d:13:fa:a5:0e:17:42:f0:
         ae:60:66:d1:f5:6e:64:34:bf:1d:39:4c:ca:b3:ad:5a:bd:22:
         3f:90:4b:ef:55:46:9d:9b:df:01:01:f9:be:9f:26:07:ac:ce:
         fa:5a:1b:49:1b:2d:1f:70:35:1f:51:32:1d:90:ec:02:92:1d:
         bb:75:9e:0c:43:ce:38:b9:14:fe:8f:6d:2e:37:38:42:11:aa:
         21:54:d6:c5:a7:a0:c3:19:58:7a:f4:27:3f:5c:21:74:dd:c3:
         6e:23:dc:ae:a2:d9:e8:85:6d:1b:c0:24:58:10:1d:cc:a1:5d:
         3d:7b:69:e8:35:da:d6:ca:f6:82:41:78:f5:36:8b:bc:f2:cc:
         0a:53:82:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoA7JgZYW9qBwogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzUzNmMwMzQtZDFmMS00OGRmLWEzNzUtNWFhOWJiZGI1NjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgukbCJy7MyvVEinbHVgjBPQcB46kSYMeaVf9
dXj3+z9p1jOONu2EDyHAIcUrUmdjk5Ib2bGY2QYAqLi+uOGcZqTxVMtof9ZGj62u
Er391k8P8Hs2gVzRb9/+w+Hsxjq/evDC/RNYZC5KdWTOBzChhBy5K9BFbpUcaNq9
cITTun4oMV4Iof8DdQbuMgTm2H9P3yKYM+q5sqfGlK9e/0yVqEWzWxA1cHgQLZ/f
Zugm7p974w3ELZzyR5kjaeDeGc4e1e3VOXeJ8zdWL4pUNStdvsvjwbX5MokjcoTf
Fr9UD7n8eTaPKxbvsLUdfxop8ZS9h4nNWucrQUNoGzgZUO6+iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESJitB4BiUSs1L3pntd/pHzBUCyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWFlY2ZjYTMtZDFkYS0z
MzRjLTgzMDMtYTFiZTZkOTgyMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIYTyVWr2uGtMx5eu4I7Ld7SlYAxXIVEPO8aTqNxCnfs2ebtV8UieEi
5Q8s5NfrOmMnvYLxaGH8+vJkbhZIiCtWgQ53vYiZL8PJTulFv5ierCFCNwV/XprF
sG1NJBGrLy8vNmfpgeFrgvhYnMUxGcifEk18LrUtE/qlDhdC8K5gZtH1bmQ0vx05
TMqzrVq9Ij+QS+9VRp2b3wEB+b6fJgeszvpaG0kbLR9wNR9RMh2Q7AKSHbt1ngxD
zji5FP6PbS43OEIRqiFU1sWnoMMZWHr0Jz9cIXTdw24j3K6i2eiFbRvAJFgQHcyh
XT17aeg12tbK9oJBePU2i7zyzApTgt8=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:49 2026 by rpki-client