Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa
File:                     43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa (raw, json)
Hash identifier:          QZ7Tc/aR00VYBE/fQk6ZsqxpQg1uWpHFD2XwxzMOsJw=
Subject key identifier:   17:5C:F6:62:89:B8:C0:F4:8B:46:A3:D7:48:1A:37:A2:A2:AC:D6:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CACFE72D980ADD6C92AC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     7342
IP address blocks:        199.7.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:cf:e7:2d:98:0a:dd:6c:92:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=ba6a83be-1c6b-4c6a-99af-7168991eab7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:aa:01:5f:c7:2b:e4:eb:3f:bc:35:b2:3f:
                    09:3a:00:e0:cd:28:e0:6d:29:a4:0f:04:c6:21:8f:
                    55:ae:46:c4:92:cc:32:52:1b:38:a6:71:76:52:79:
                    71:f8:cf:25:7d:5a:be:41:0d:30:dd:50:f1:f6:1d:
                    6c:bc:8c:2a:f8:ba:56:6a:2b:ca:f5:91:38:00:aa:
                    af:d2:f3:2b:b8:17:f6:b4:e5:cf:52:94:01:23:2d:
                    05:81:1e:72:46:9a:04:15:de:55:e0:42:77:f6:97:
                    ad:d7:a5:86:0a:0a:af:d9:81:00:43:58:d1:89:ad:
                    6a:00:a2:18:c7:d1:a7:fc:ea:95:4f:fb:79:64:77:
                    ac:55:e1:fd:4c:88:cd:38:c0:63:6a:43:cd:af:0a:
                    de:c4:9d:b0:03:de:04:39:77:99:91:df:29:42:c2:
                    26:85:af:e7:0c:98:2c:75:69:12:51:ea:f4:22:b3:
                    d4:3a:3c:91:df:30:b3:ee:ed:01:9d:77:4b:5e:dd:
                    26:a1:65:63:7b:dd:15:04:9e:0b:6b:4e:06:97:53:
                    61:01:d0:b2:3a:d5:ad:88:e0:a4:1f:41:dd:46:fe:
                    26:de:dd:e1:64:8b:58:29:e0:b5:57:1a:62:8d:89:
                    ce:eb:2a:31:07:4e:5e:c2:5d:8c:f0:53:eb:f6:68:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5C:F6:62:89:B8:C0:F4:8B:46:A3:D7:48:1A:37:A2:A2:AC:D6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43dbfa21-b7ec-3c97-8ec3-55a18cd900f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:35:00:64:31:bd:54:70:b5:16:1a:e4:d3:a1:a2:1d:c8:5f:
         07:f3:bb:47:4d:1d:12:90:61:2a:3b:2b:11:89:3b:57:cb:2a:
         ce:19:62:49:79:2d:58:f6:d4:91:35:2b:83:1f:ad:30:dd:17:
         87:74:55:ce:1c:d9:74:51:89:10:9e:60:f6:19:68:3e:db:0d:
         07:cb:15:03:e8:48:6c:5b:f4:c0:d4:c3:b0:b4:ea:56:86:3c:
         e0:fd:1f:0a:76:d1:9d:dd:33:97:56:81:42:e7:c0:7c:f7:61:
         c5:cd:b6:1f:cb:84:45:c6:35:09:cf:14:fe:cf:5c:40:f3:5e:
         0f:57:8e:08:d9:76:49:7c:db:99:ca:30:df:7b:64:26:b4:aa:
         33:34:8b:bc:77:d9:f7:83:23:00:7e:86:ec:8f:82:ab:a6:1e:
         14:3f:52:f8:a9:7b:f2:51:08:d5:24:ac:5a:88:4b:20:61:5d:
         fa:6b:0c:a3:e7:1b:a4:c7:05:00:1e:0a:45:0a:05:64:42:1a:
         31:d5:94:d3:f6:00:e3:a2:00:a3:55:1b:a1:3a:ee:74:03:a3:
         7a:e7:41:e7:de:fc:3c:9f:31:d3:ba:3f:ee:6f:d9:49:48:c7:
         5b:b3:9c:62:d7:db:5a:a5:23:cd:7a:15:12:93:e0:1d:9b:15:
         c9:fe:c8:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dys/nLZgK3WySrGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YmE2YTgzYmUtMWM2Yi00YzZhLTk5YWYtNzE2ODk5MWVhYjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKKqAV/HK+TrP7w1sj8JOgDgzSjgbSmkDwTG
IY9VrkbEkswyUhs4pnF2Unlx+M8lfVq+QQ0w3VDx9h1svIwq+LpWaivK9ZE4AKqv
0vMruBf2tOXPUpQBIy0FgR5yRpoEFd5V4EJ39pet16WGCgqv2YEAQ1jRia1qAKIY
x9Gn/OqVT/t5ZHesVeH9TIjNOMBjakPNrwrexJ2wA94EOXeZkd8pQsImha/nDJgs
dWkSUer0IrPUOjyR3zCz7u0BnXdLXt0moWVje90VBJ4La04Gl1NhAdCyOtWtiOCk
H0HdRv4m3t3hZItYKeC1VxpijYnO6yoxB05ewl2M8FPr9mg/ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdc9mKJuMD0i0aj10gaN6KirNYQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNkYmZhMjEtYjdlYy0z
Yzk3LThlYzMtNTVhMThjZDkwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwczMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFc1AGQxvVRwtRYa5NOhoh3IXwfzu0dNHRKQYSo7KxGJO1fLKs4ZYkl5
LVj21JE1K4MfrTDdF4d0Vc4c2XRRiRCeYPYZaD7bDQfLFQPoSGxb9MDUw7C06laG
POD9Hwp20Z3dM5dWgULnwHz3YcXNth/LhEXGNQnPFP7PXEDzXg9XjgjZdkl825nK
MN97ZCa0qjM0i7x32feDIwB+huyPgqumHhQ/Uvipe/JRCNUkrFqISyBhXfprDKPn
G6THBQAeCkUKBWRCGjHVlNP2AOOiAKNVG6E67nQDo3rnQefe/DyfMdO6P+5v2UlI
x1uznGLX21qlI816FRKT4B2bFcn+yK8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:00 2026 by rpki-client