Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
File:                     439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json)
Hash identifier:          ViXDxwdQ/eMyhAAilMk4uaYdyw0mvSt9QpUSZRnbl9A=
Subject key identifier:   8C:6E:AE:19:FD:A6:9C:6A:15:84:85:44:01:1C:DE:9E:BB:E4:BB:10
Certificate issuer:       /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
Certificate serial:       010D0C9F4328584EED521964C0FC65B2C7336680
Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     40583
IP address blocks:        198.236.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:19:64:c0:fc:65:b2:c7:33:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=5a4b00ac-3132-4834-bd9c-34b29f75aef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:de:29:6d:0f:73:b9:20:ed:fb:45:34:b3:
                    21:64:10:2f:3d:69:8a:2c:b9:67:a0:4d:47:33:06:
                    0c:04:58:a1:f6:f3:68:27:c9:3e:84:bb:05:9f:d3:
                    b9:0d:a8:a4:5b:62:a2:d9:b5:8c:38:98:d5:08:49:
                    50:c1:77:10:85:8c:bd:01:53:90:d8:e4:87:cc:e5:
                    47:d1:a5:40:de:2f:fa:6f:5a:c6:75:84:29:38:95:
                    3d:71:7a:a1:1e:c5:4c:eb:80:b2:73:df:62:21:4f:
                    cd:b8:e4:c4:40:c4:8e:df:5f:fe:69:17:f0:a8:77:
                    f8:9f:35:6a:85:22:e9:c7:8c:d2:3e:0b:a8:61:81:
                    b1:79:5b:ff:ce:f8:92:e7:ba:1f:31:8c:50:91:a8:
                    9f:a8:d1:20:26:ad:45:be:f4:d2:a7:12:4c:c5:be:
                    83:c0:8b:8d:44:c3:b3:15:d2:21:67:51:8b:84:27:
                    ba:6c:4e:c6:6d:6f:b8:5a:3b:38:de:e0:98:c0:1c:
                    34:31:6b:e8:a5:21:32:86:cd:5f:64:1a:84:cf:da:
                    55:af:3c:7e:f5:f4:84:48:74:2c:7f:8e:3a:05:f5:
                    eb:2e:d8:82:b4:bd:c2:33:51:70:f2:54:13:17:1e:
                    3f:59:4c:35:40:4b:9c:7f:2d:29:9e:10:74:37:95:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6E:AE:19:FD:A6:9C:6A:15:84:85:44:01:1C:DE:9E:BB:E4:BB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl

            X509v3 Authority Key Identifier:
                keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.236.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:3c:84:2b:81:aa:0e:79:cc:22:bd:05:96:06:ab:38:7f:07:
         54:ca:73:97:2d:f4:39:da:78:2b:28:3f:00:e5:bf:d4:e8:50:
         f4:48:fb:6c:52:c9:ce:39:f2:af:ff:8f:4c:1c:93:fe:9e:4d:
         2c:b2:df:22:c5:01:ad:91:3f:8c:58:59:37:f0:19:06:d5:be:
         cc:61:d4:8b:03:9b:6a:9f:14:6d:e3:25:92:5b:4d:58:d2:74:
         cd:d1:ae:fb:e4:81:82:7b:f1:a6:3c:f2:bb:17:5b:23:85:09:
         37:d9:af:5a:ea:a7:7e:5a:16:39:11:7e:be:49:a1:46:ee:a4:
         c9:6a:fe:19:31:5b:2d:ad:cb:7f:bb:76:2e:67:4d:d7:e3:c5:
         a5:ee:d9:ef:a7:48:e3:ef:b8:7a:56:d3:1e:3f:19:75:40:9d:
         7f:a0:8b:c5:f4:3d:78:82:cb:74:4d:8a:f6:5e:e7:ef:5f:e4:
         1f:64:1b:ff:b3:46:3f:e1:51:0a:53:57:e2:f2:05:ba:f6:99:
         c2:e9:bd:8a:98:47:95:1e:e6:32:c9:e6:1b:56:a3:55:23:00:
         de:30:cb:1f:c9:14:68:69:09:a5:50:4c:4e:cd:72:45:ed:14:
         c2:41:04:5a:33:43:4d:21:c7:fa:b3:79:a2:59:d1:0e:f8:21:
         36:b1:8b:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhlkwPxlssczZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh
ZjVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NWE0YjAwYWMtMzEzMi00ODM0LWJkOWMtMzRiMjlmNzVhZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCLeKW0Pc7kg7ftFNLMhZBAvPWmKLLlnoE1H
MwYMBFih9vNoJ8k+hLsFn9O5DaikW2Ki2bWMOJjVCElQwXcQhYy9AVOQ2OSHzOVH
0aVA3i/6b1rGdYQpOJU9cXqhHsVM64Cyc99iIU/NuOTEQMSO31/+aRfwqHf4nzVq
hSLpx4zSPguoYYGxeVv/zviS57ofMYxQkaifqNEgJq1FvvTSpxJMxb6DwIuNRMOz
FdIhZ1GLhCe6bE7GbW+4Wjs43uCYwBw0MWvopSEyhs1fZBqEz9pVrzx+9fSESHQs
f446BfXrLtiCtL3CM1Fw8lQTFx4/WUw1QEucfy0pnhB0N5UI2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIxurhn9ppxqFYSFRAEc3p675LsQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0
MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNDM5ZWU0NGQtMmY2My0z
YzBlLTgwZGUtN2FkN2Y3Y2I2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy
NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3
YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw
OGVhN2FmNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuy4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJg8hCuBqg55zCK9BZYGqzh/B1TKc5ct9DnaeCsoPwDlv9ToUPRI+2xS
yc458q//j0wck/6eTSyy3yLFAa2RP4xYWTfwGQbVvsxh1IsDm2qfFG3jJZJbTVjS
dM3RrvvkgYJ78aY88rsXWyOFCTfZr1rqp35aFjkRfr5JoUbupMlq/hkxWy2ty3+7
di5nTdfjxaXu2e+nSOPvuHpW0x4/GXVAnX+gi8X0PXiCy3RNivZe5+9f5B9kG/+z
Rj/hUQpTV+LyBbr2mcLpvYqYR5Ue5jLJ5htWo1UjAN4wyx/JFGhpCaVQTE7NckXt
FMJBBFozQ00hx/qzeaJZ0Q74ITaxi7o=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:04:54 2026 by rpki-client