Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
File:                     ce0197c4-50e0-3806-a103-08cbe1f623a0.roa (raw, json)
Hash identifier:          KuHEMcAFyUMErOHEmBvtqEy5EnOSAAdc3RoDGTKNzFQ=
Subject key identifier:   62:3C:83:14:1C:0D:AF:FF:2E:7E:6C:C8:17:1D:E3:33:8D:CB:93:7A
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F4328584D571FB038206A61AB68329A80
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     7029
IP address blocks:        81.199.64.0/20 maxlen: 24
                          121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b0:38:20:6a:61:ab:68:32:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=fd72f5d0-88ac-4a37-989b-625c328b3a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5c:d3:fc:51:3f:d6:bc:36:a8:2d:eb:a7:8b:
                    9a:ab:f2:3b:6f:6d:6a:04:13:95:8e:7c:5d:e8:c3:
                    63:ba:5f:e6:a7:ee:3d:8a:b7:ad:13:34:c9:4b:5e:
                    a7:df:64:42:46:1a:0d:cc:d4:e7:f7:be:83:fa:2e:
                    df:ba:89:1b:d6:66:42:b1:be:0e:85:5b:cc:76:54:
                    03:91:88:ea:21:e0:ac:5a:09:cc:f0:02:4a:47:b9:
                    11:f9:c5:0b:dd:d3:6b:12:c0:e1:bd:3c:ad:98:60:
                    2b:d1:3a:3a:07:90:d6:a7:00:f5:e8:55:12:e5:59:
                    68:77:f6:7f:c9:0a:77:3c:4d:79:af:91:5b:a2:32:
                    b4:bd:90:3c:c5:df:9c:e8:bf:d8:0b:63:6a:08:c3:
                    8e:8c:d8:e4:e5:1d:b2:8f:be:29:2d:c9:8b:bd:ac:
                    e2:32:82:ce:f3:e0:0c:5a:c5:b9:8c:6e:2e:af:68:
                    df:f9:56:ef:38:2e:62:6a:00:15:f9:bc:0e:91:9d:
                    a4:50:ee:d2:fb:d6:a8:f2:ef:dd:9c:b6:ca:dc:56:
                    66:eb:81:d8:4e:55:60:b0:d7:76:a6:ae:77:7a:9d:
                    f4:b4:68:11:8d:9d:a3:ef:74:1a:03:c8:21:bf:ea:
                    c7:1b:39:98:2c:8a:59:1b:46:b9:d8:ae:43:fd:99:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3C:83:14:1C:0D:AF:FF:2E:7E:6C:C8:17:1D:E3:33:8D:CB:93:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.64.0/20
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:68:45:2a:49:b1:5e:2d:0f:e7:e9:fe:e8:64:64:c5:d9:
         65:36:0f:e1:90:7f:0d:89:3f:5f:a1:66:3a:93:11:c7:1b:f8:
         d9:f6:3a:b6:15:f5:00:40:69:17:07:b8:0a:be:4c:42:cf:04:
         8c:20:4b:49:e3:f3:ac:db:2e:a5:70:82:49:21:78:42:d8:96:
         e7:a8:3c:02:5e:1e:f0:25:d0:a8:d9:c7:d9:f2:86:bf:82:ed:
         eb:fa:3f:af:ba:b6:bc:fb:41:2e:40:75:bf:83:df:36:41:50:
         d6:e5:d6:dd:24:a9:40:7a:29:95:73:4a:79:30:c1:c2:53:ff:
         ba:dd:dc:d4:cf:c0:b0:bb:9a:b3:5e:f8:62:5b:41:39:28:69:
         d7:f7:ac:fa:ae:02:72:d0:f9:bc:e5:bb:58:68:27:aa:62:48:
         4c:52:70:a1:0e:5d:3e:bc:02:be:54:bd:6e:c7:20:5b:f7:ad:
         ac:ac:e8:1e:33:b7:ea:02:6a:bb:67:b6:8d:30:7a:a6:a2:ea:
         ae:55:bb:2c:d7:d4:8e:9a:23:bd:bf:ca:18:1e:b6:85:57:ef:
         77:c0:37:4e:a1:4f:9b:e8:18:69:99:39:12:5e:7f:88:26:17:
         cc:84:46:e9:8c:83:2b:ad:43:c8:81:2b:9a:a9:9a:92:dc:e4:
         57:b6:41:37
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1XH7A4IGphq2gymoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy
NjA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
ZmQ3MmY1ZDAtODhhYy00YTM3LTk4OWItNjI1YzMyOGIzYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilzT/FE/1rw2qC3rp4uaq/I7b21qBBOVjnxd
6MNjul/mp+49iretEzTJS16n32RCRhoNzNTn976D+i7fuokb1mZCsb4OhVvMdlQD
kYjqIeCsWgnM8AJKR7kR+cUL3dNrEsDhvTytmGAr0To6B5DWpwD16FUS5Vlod/Z/
yQp3PE15r5FbojK0vZA8xd+c6L/YC2NqCMOOjNjk5R2yj74pLcmLvaziMoLO8+AM
WsW5jG4ur2jf+VbvOC5iagAV+bwOkZ2kUO7S+9ao8u/dnLbK3FZm64HYTlVgsNd2
pq53ep30tGgRjZ2j73QaA8ghv+rHGzmYLIpZG0a52K5D/Zl2dwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGI8gxQcDa//Ln5syBcd4zONy5N6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi
MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvY2UwMTk3YzQtNTBlMC0z
ODA2LWExMDMtMDhjYmUxZjYyM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm
MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw
MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl
Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD
BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAfDWhFKkmxXi0P5+n+6GRkxdllNg/hkH8NiT9f
oWY6kxHHG/jZ9jq2FfUAQGkXB7gKvkxCzwSMIEtJ4/Os2y6lcIJJIXhC2JbnqDwC
Xh7wJdCo2cfZ8oa/gu3r+j+vura8+0EuQHW/g982QVDW5dbdJKlAeimVc0p5MMHC
U/+63dzUz8Cwu5qzXvhiW0E5KGnX96z6rgJy0Pm85btYaCeqYkhMUnChDl0+vAK+
VL1uxyBb962srOgeM7fqAmq7Z7aNMHqmouquVbss19SOmiO9v8oYHraFV+93wDdO
oU+b6BhpmTkSXn+IJhfMhEbpjIMrrUPIgSuaqZqS3ORXtkE3
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:14 2026 by rpki-client