Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f622dbc-fee7-3433-a3af-61ce80d0ec45.roa
File:                     4f622dbc-fee7-3433-a3af-61ce80d0ec45.roa (raw, json)
Hash identifier:          vUhOIzexDZgeNTzvf2bTIK3MJkSW1FhZHdxG687Vmcs=
Subject key identifier:   78:17:49:8C:07:64:A4:7B:A2:05:89:8B:06:6B:F3:BC:0C:7F:73:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497312FC96D799E0B7A1EAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f622dbc-fee7-3433-a3af-61ce80d0ec45.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:12:fc:96:d7:99:e0:b7:a1:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=23396f63-608e-40db-bf6b-fe462c3abadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:5f:97:5e:70:8b:71:be:a4:20:f7:8f:7c:
                    93:d4:6a:61:e0:40:5c:5a:52:eb:5f:74:c6:43:10:
                    35:80:fe:25:13:55:1f:8d:23:7e:fe:ed:e4:51:71:
                    f5:88:bb:4b:fa:02:d8:f2:24:7a:bc:cd:56:da:ae:
                    2c:33:97:84:63:d9:2b:2f:b9:7f:a5:08:3f:8f:ab:
                    36:05:6e:ce:5d:46:48:76:dd:fb:8a:c7:57:b5:ef:
                    a9:8e:c4:b4:e0:49:a1:73:be:25:cf:a2:6d:af:e5:
                    68:81:73:f6:42:d1:b0:db:c9:51:f4:fb:91:fa:e6:
                    08:d7:15:fa:9f:41:91:60:d8:9b:21:18:a8:86:0c:
                    4b:88:ad:1f:50:a0:99:7e:9f:13:d5:a7:8f:4a:8d:
                    26:2b:49:5b:47:7d:aa:76:a6:78:87:6b:1e:78:39:
                    5b:4a:18:dc:db:cf:1e:d4:1b:ae:51:bf:c6:fe:25:
                    e6:ce:3f:72:c5:ce:0b:60:2d:9f:64:8a:fc:84:9b:
                    67:8c:ee:1f:e2:7e:a9:19:e0:35:2d:92:c4:c7:1b:
                    a2:e3:0f:e3:4b:1c:90:09:c4:42:8e:78:f5:07:0b:
                    5f:1d:3a:eb:11:c3:d1:ca:29:00:b6:e7:df:ba:ba:
                    86:ce:c0:88:ef:76:5e:99:bd:e2:f2:69:48:ae:92:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:49:8C:07:64:A4:7B:A2:05:89:8B:06:6B:F3:BC:0C:7F:73:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f622dbc-fee7-3433-a3af-61ce80d0ec45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c1:a4:3b:6c:6d:f4:1a:df:c4:9c:9f:a7:3f:9f:29:3a:8c:
         f2:91:65:27:02:81:09:46:8b:43:68:d5:42:0f:ad:cf:62:45:
         04:58:aa:a9:15:75:0b:7d:d8:74:9a:f0:53:4c:c0:bf:ee:33:
         31:1b:47:61:15:cb:cb:45:94:13:1c:e9:69:82:51:4f:ef:80:
         65:a5:a4:4c:b5:75:5b:99:6c:59:9b:f1:52:3f:d4:9e:7c:a1:
         52:d4:f9:19:f7:80:ea:95:b0:cc:49:c2:f7:77:9a:77:fb:ca:
         8c:f7:1d:ae:e6:d5:de:6f:06:46:d9:82:90:8a:12:cf:da:5c:
         8d:e1:39:8f:e1:86:ff:52:56:9c:6a:45:c5:25:15:cc:11:f5:
         4d:56:8d:22:d8:d4:65:0b:e4:23:1c:ff:8f:39:73:5e:bc:56:
         b9:da:4b:38:e6:85:b5:ee:9c:9f:1e:85:ee:c3:38:3d:65:f5:
         6e:79:7b:aa:fa:cb:ed:1d:49:08:f3:02:5d:f5:a7:fb:b6:9f:
         a9:55:d4:dc:86:ec:6f:f2:b2:6c:69:c6:84:dc:3c:18:e1:9f:
         97:5e:16:9d:3e:45:3f:2e:3d:07:6f:f8:37:0c:46:ff:08:1b:
         09:2b:68:27:ce:c2:25:dc:1e:e4:88:4f:88:bf:0f:32:d0:9e:
         4a:e6:b4:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxL8lteZ4Leh6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjMzOTZmNjMtNjA4ZS00MGRiLWJmNmItZmU0NjJjM2FiYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMFfl15wi3G+pCD3j3yT1Gph4EBcWlLrX3TG
QxA1gP4lE1UfjSN+/u3kUXH1iLtL+gLY8iR6vM1W2q4sM5eEY9krL7l/pQg/j6s2
BW7OXUZIdt37isdXte+pjsS04Emhc74lz6Jtr+VogXP2QtGw28lR9PuR+uYI1xX6
n0GRYNibIRiohgxLiK0fUKCZfp8T1aePSo0mK0lbR32qdqZ4h2seeDlbShjc288e
1BuuUb/G/iXmzj9yxc4LYC2fZIr8hJtnjO4f4n6pGeA1LZLExxui4w/jSxyQCcRC
jnj1BwtfHTrrEcPRyikAtuffurqGzsCI73Zemb3i8mlIrpKw5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgXSYwHZKR7ogWJiwZr87wMf3OQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY2MjJkYmMtZmVlNy0z
NDMzLWEzYWYtNjFjZTgwZDBlYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnBpDtsbfQa38Scn6c/nyk6jPKRZScCgQlGi0No1UIPrc9iRQRYqqkV
dQt92HSa8FNMwL/uMzEbR2EVy8tFlBMc6WmCUU/vgGWlpEy1dVuZbFmb8VI/1J58
oVLU+Rn3gOqVsMxJwvd3mnf7yoz3Ha7m1d5vBkbZgpCKEs/aXI3hOY/hhv9SVpxq
RcUlFcwR9U1WjSLY1GUL5CMc/485c168VrnaSzjmhbXunJ8ehe7DOD1l9W55e6r6
y+0dSQjzAl31p/u2n6lV1NyG7G/ysmxpxoTcPBjhn5deFp0+RT8uPQdv+DcMRv8I
GwkraCfOwiXcHuSIT4i/DzLQnkrmtCo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:21 2026 by rpki-client