Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9967f6a3-45e0-31a2-9604-454acc5ef4bc.roa
File:                     9967f6a3-45e0-31a2-9604-454acc5ef4bc.roa (raw, json)
Hash identifier:          jg5WM2MaTw2pJj3PjGNkgdF1CE4clZTpzXqEe3Zm9D8=
Subject key identifier:   73:95:3F:9C:0B:B1:AA:4B:08:FE:41:73:D1:70:41:4A:83:4F:ED:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF2BD04B6F8DFE905D205A380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9967f6a3-45e0-31a2-9604-454acc5ef4bc.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     397209
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:04:b6:f8:df:e9:05:d2:05:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=35290ccb-d75e-41fb-bad4-a89545aa04ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:e4:b2:06:e8:f0:81:6d:69:1f:d9:eb:4c:
                    19:32:2b:14:75:c2:14:18:68:97:72:6d:74:bc:a9:
                    26:21:c7:23:94:53:6c:94:03:6d:8d:cd:32:7d:2d:
                    68:2c:e1:3f:eb:5c:91:a2:cb:47:89:f2:dd:67:52:
                    8e:e7:15:8f:63:12:81:00:07:04:4b:8c:5a:1b:7c:
                    47:19:27:25:46:37:c9:b3:64:05:7e:5a:61:6f:18:
                    89:f1:fb:46:63:57:1f:4b:63:bd:64:1c:a3:e5:6a:
                    44:1e:d7:6a:a6:66:6a:8c:09:51:9c:bd:2e:44:42:
                    de:07:c5:79:0c:6d:a3:42:f9:ec:84:04:2f:32:1a:
                    f3:4a:80:05:6f:aa:40:e9:1b:0a:31:ac:2d:78:cc:
                    99:11:78:06:6c:34:f5:33:6d:57:80:f0:e8:72:59:
                    5d:14:b4:e3:b4:de:b8:e9:f0:83:09:85:e3:45:7c:
                    67:92:55:58:f4:06:38:b6:a2:2a:17:08:f6:b8:c4:
                    08:b3:10:9b:d3:ea:8b:95:25:d3:8b:28:9c:62:cb:
                    15:8b:59:3a:1f:ae:cc:04:77:61:01:af:97:dc:98:
                    3c:12:91:f1:60:7e:3f:6d:d3:9a:53:b9:1e:57:12:
                    e2:58:45:ac:9f:22:a8:44:02:47:f1:2e:59:1a:65:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:3F:9C:0B:B1:AA:4B:08:FE:41:73:D1:70:41:4A:83:4F:ED:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9967f6a3-45e0-31a2-9604-454acc5ef4bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:e2:3a:94:5d:d5:f5:a9:9a:8a:e6:6c:fd:7b:74:8d:5c:
         2e:aa:0e:8b:58:2a:2b:5f:5c:7c:b5:50:a1:8b:4f:d6:f8:52:
         89:de:c4:0f:1e:b0:7c:54:af:43:db:7b:81:b7:d0:12:2c:22:
         c1:fa:b9:e8:f7:bb:48:88:20:02:2c:c0:1f:24:92:24:2b:8e:
         c1:ad:bb:5b:06:e4:62:0b:5a:77:15:0b:24:77:b0:c1:81:a9:
         a8:02:14:a1:58:0a:6c:eb:d6:be:b5:40:17:57:07:a2:b4:90:
         7d:5e:68:c1:76:24:73:3d:b3:1e:af:ab:59:0e:64:fb:8c:cd:
         ee:ed:f6:a5:22:54:65:51:5a:b9:a3:f6:e9:51:49:26:59:e9:
         d5:50:61:67:e2:af:2e:3e:2b:09:1d:55:93:45:ba:44:dd:50:
         9f:2d:35:1a:e9:62:7e:91:ff:38:2f:56:ab:ef:60:a6:ae:18:
         ea:f1:f7:1e:17:14:df:5a:a0:55:af:85:9f:19:e1:8b:11:cf:
         74:7d:1c:fa:d5:c3:bf:75:8c:1f:d0:3e:ab:67:84:ce:0a:26:
         69:32:67:fc:da:3b:5b:3c:78:4a:35:20:17:3c:e8:1c:0e:e1:
         3a:ae:77:74:d6:6b:00:be:a1:69:78:d9:67:78:5a:d3:30:94:
         8a:ec:a2:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQS2+N/pBdIFo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk
MzUyOTBjY2ItZDc1ZS00MWZiLWJhZDQtYTg5NTQ1YWEwNGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyXksgbo8IFtaR/Z60wZMisUdcIUGGiXcm10
vKkmIccjlFNslANtjc0yfS1oLOE/61yRostHifLdZ1KO5xWPYxKBAAcES4xaG3xH
GSclRjfJs2QFflphbxiJ8ftGY1cfS2O9ZByj5WpEHtdqpmZqjAlRnL0uRELeB8V5
DG2jQvnshAQvMhrzSoAFb6pA6RsKMawteMyZEXgGbDT1M21XgPDoclldFLTjtN64
6fCDCYXjRXxnklVY9AY4tqIqFwj2uMQIsxCb0+qLlSXTiyicYssVi1k6H67MBHdh
Aa+X3Jg8EpHxYH4/bdOaU7keVxLiWEWsnyKoRAJH8S5ZGmWuRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOVP5wLsapLCP5Bc9FwQUqDT+3IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk2N2Y2YTMtNDVlMC0z
MWEyLTk2MDQtNDU0YWNjNWVmNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDdTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxG4jqUXdX1qZqK5mz9e3SNXC6qDotYKitfXHy1UKGLT9b4UonexA8e
sHxUr0Pbe4G30BIsIsH6uej3u0iIIAIswB8kkiQrjsGtu1sG5GILWncVCyR3sMGB
qagCFKFYCmzr1r61QBdXB6K0kH1eaMF2JHM9sx6vq1kOZPuMze7t9qUiVGVRWrmj
9ulRSSZZ6dVQYWfiry4+KwkdVZNFukTdUJ8tNRrpYn6R/zgvVqvvYKauGOrx9x4X
FN9aoFWvhZ8Z4YsRz3R9HPrVw791jB/QPqtnhM4KJmkyZ/zaO1s8eEo1IBc86BwO
4Tqud3TWawC+oWl42Wd4WtMwlIrsov4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:23 2026 by rpki-client