Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
File:                     f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa (raw, json)
Hash identifier:          uT2s3jxgVcgKi5ryuMB6xPjpNsKGEJcRGYqFIKAxUSQ=
Subject key identifier:   8D:AF:4C:D5:D8:DF:BD:3E:D7:74:C1:92:FA:99:88:30:93:FE:FE:75
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D7B6A8C5E56DF428A9C2B9080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     3949
IP address blocks:        165.254.191.232/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:8c:5e:56:df:42:8a:9c:2b:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=abf9e9f6-55b0-4998-9e82-3f3cd3040300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:6c:9c:59:7b:3d:94:7b:ef:57:92:6c:67:
                    f4:b9:f9:18:0e:67:28:58:96:37:78:fd:4c:77:07:
                    22:03:cd:7b:54:54:0a:a7:44:cc:c3:90:64:9d:20:
                    09:e9:eb:68:33:ab:5b:66:06:b8:0b:ab:fc:30:29:
                    1a:ce:ce:0e:24:d8:3c:e0:f8:9d:69:89:2d:ad:1a:
                    0f:78:e4:53:3c:f3:ef:10:62:6c:53:86:08:4c:32:
                    41:79:84:e8:fe:4a:6d:9c:50:1f:de:11:87:3a:92:
                    f2:b6:a1:b7:76:3e:fb:56:ec:27:bc:86:4c:e5:e1:
                    7b:0f:90:77:4d:23:a9:8b:8b:87:3e:46:9a:fa:88:
                    f6:83:82:65:02:f4:d8:1a:e3:87:d0:5e:d7:7c:e4:
                    d3:39:70:f6:8b:4a:a1:b1:aa:06:24:5c:39:11:5f:
                    22:d4:02:af:7f:7c:38:0d:9d:42:ef:8b:9d:e5:30:
                    c9:81:33:23:16:33:d6:37:49:3f:55:69:e3:8d:7b:
                    5c:94:bc:0c:b0:59:78:04:11:da:86:ac:eb:f0:22:
                    db:7d:0f:f1:01:e7:ad:48:5e:cb:de:82:b1:3c:da:
                    89:b0:4d:b5:a1:dc:10:cb:31:92:ef:ef:ee:a6:83:
                    8a:78:38:ee:22:71:cb:3d:d1:c2:51:09:5f:db:e9:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:4C:D5:D8:DF:BD:3E:D7:74:C1:92:FA:99:88:30:93:FE:FE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f4cd94b3-ef3e-3af0-af98-bc4d402a7952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.191.232/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1f:60:79:1e:29:7f:c9:44:81:90:22:86:22:39:8b:6c:2c:
         ad:6b:34:20:6e:29:64:85:c0:31:da:5c:12:5c:a1:53:10:cb:
         8c:9f:68:74:21:ca:05:5d:59:9a:8d:c6:f2:c9:0e:09:7b:f2:
         28:e7:70:ed:5f:83:9b:7e:11:09:0a:90:a6:b1:ee:c6:bf:07:
         f1:64:db:a8:35:6b:7e:3e:d7:e1:c8:2d:46:01:8e:44:de:5d:
         a0:65:e6:c5:45:59:25:42:f9:7c:16:f8:cb:1b:86:f4:9c:a7:
         e4:32:de:71:7a:1f:2f:62:c9:61:ac:31:96:32:94:28:90:70:
         66:0b:cf:c6:4c:c6:7e:b2:e3:24:90:0d:2b:58:c8:50:12:35:
         d0:f3:18:a2:fd:01:2f:59:f2:da:14:a8:5a:d6:f8:98:2c:77:
         68:25:55:ae:66:b6:f1:c4:cf:2c:62:63:e5:4d:5c:40:1e:a3:
         bf:c5:6a:10:5d:4c:e0:c1:33:c2:8f:d7:c0:59:02:7d:35:ad:
         80:8b:b4:4e:ac:6e:fe:95:db:cd:8d:a2:a2:21:69:90:f5:c5:
         a6:58:af:4a:fc:fd:54:67:1d:c4:15:14:7a:5b:a8:ed:20:97:
         48:fd:10:9f:80:e5:98:1f:65:ee:a5:b3:73:9f:ce:86:d3:f8:
         1f:3f:b3:2a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE17aoxeVt9CipwrkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
YWJmOWU5ZjYtNTViMC00OTk4LTllODItM2YzY2QzMDQwMzAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/dsnFl7PZR771eSbGf0ufkYDmcoWJY3eP1M
dwciA817VFQKp0TMw5BknSAJ6etoM6tbZga4C6v8MCkazs4OJNg84PidaYktrRoP
eORTPPPvEGJsU4YITDJBeYTo/kptnFAf3hGHOpLytqG3dj77VuwnvIZM5eF7D5B3
TSOpi4uHPkaa+oj2g4JlAvTYGuOH0F7XfOTTOXD2i0qhsaoGJFw5EV8i1AKvf3w4
DZ1C74ud5TDJgTMjFjPWN0k/VWnjjXtclLwMsFl4BBHahqzr8CLbfQ/xAeetSF7L
3oKxPNqJsE21odwQyzGS7+/upoOKeDjuInHLPdHCUQlf2+kXawIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI2vTNXY370+13TBkvqZiDCT/v51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjRjZDk0YjMtZWYzZS0z
YWYwLWFmOTgtYmM0ZDQwMmE3OTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCpf6/6DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCNH2B5Hil/yUSBkCKGIjmLbCytazQgbilkhcAx2lwSXKFTEMuMn2h0
IcoFXVmajcbyyQ4Je/Io53DtX4ObfhEJCpCmse7GvwfxZNuoNWt+PtfhyC1GAY5E
3l2gZebFRVklQvl8FvjLG4b0nKfkMt5xeh8vYslhrDGWMpQokHBmC8/GTMZ+suMk
kA0rWMhQEjXQ8xii/QEvWfLaFKha1viYLHdoJVWuZrbxxM8sYmPlTVxAHqO/xWoQ
XUzgwTPCj9fAWQJ9Na2Ai7ROrG7+ldvNjaKiIWmQ9cWmWK9K/P1UZx3EFRR6W6jt
IJdI/RCfgOWYH2XupbNzn86G0/gfP7Mq
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:10 2026 by rpki-client