Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/c06df79a-a931-345c-b2e6-e4cb32309979.roa
File:                     c06df79a-a931-345c-b2e6-e4cb32309979.roa (raw, json)
Hash identifier:          CEnEJq8fp5IkwoVYhSk6W6czDEcTqtwoQhk9jkERdnI=
Subject key identifier:   13:7A:C2:9C:FB:AD:63:D8:35:36:3A:AA:B2:2B:26:DD:8E:B3:F4:5C
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584F11A147697F862FF6679DB0C0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/c06df79a-a931-345c-b2e6-e4cb32309979.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     25645
IP address blocks:        204.16.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:47:69:7f:86:2f:f6:67:9d:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=a282ceba-634a-417d-8140-6e6188c59213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:f0:9c:07:30:bd:38:ae:a0:33:12:72:e5:
                    31:95:92:16:9a:c9:70:03:4a:e6:63:72:1b:28:98:
                    0d:e9:02:4b:9c:0f:4c:c3:9a:64:29:cf:a0:ac:e8:
                    bb:5d:bc:81:b7:58:7f:13:8e:06:ea:e8:9d:6c:78:
                    b7:ea:83:d5:eb:bb:1a:a3:1d:84:bb:23:7e:1d:00:
                    3f:86:50:01:cd:96:36:54:d0:09:d7:a2:5a:2d:73:
                    e8:13:93:2d:9d:3f:69:e1:58:cc:7c:ee:ea:d2:ec:
                    0b:b8:c9:ab:f5:74:ec:4b:50:17:d4:fd:66:02:a0:
                    49:f7:1e:d7:24:6f:5f:dd:29:b0:04:2e:53:c9:e8:
                    48:c2:94:12:d9:5c:a9:99:ef:93:e8:12:ae:39:85:
                    16:ee:0c:ba:a0:90:17:4f:68:87:b2:1d:84:8b:44:
                    cd:6d:eb:cf:6b:81:fc:40:41:c8:dd:d3:3a:d6:45:
                    ac:ca:39:4a:3a:1f:ab:98:c7:09:e6:16:25:43:fc:
                    7f:14:0d:11:25:79:87:de:8d:26:15:97:cf:80:6e:
                    d9:03:8e:55:7b:46:e8:c2:c2:38:f6:17:a2:b9:2d:
                    8a:ad:d0:2e:d3:da:b9:93:db:1f:af:d0:d6:33:da:
                    b3:ca:d6:73:93:2e:87:3c:c2:ce:3e:8f:fb:8f:ec:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:C2:9C:FB:AD:63:D8:35:36:3A:AA:B2:2B:26:DD:8E:B3:F4:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/c06df79a-a931-345c-b2e6-e4cb32309979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:54:07:cf:d1:64:5e:a2:35:79:e6:72:0f:13:af:29:2a:c1:
         29:eb:81:13:5f:cf:97:9a:38:37:87:c6:2b:a8:45:ee:65:6c:
         53:6f:cd:74:36:fa:89:76:59:d3:d6:12:e3:92:9f:41:ab:f8:
         0d:3e:cb:88:1d:a7:b2:75:b8:07:64:d5:61:7f:ba:37:f8:08:
         cc:7b:89:a3:7b:a6:86:32:3a:b2:37:95:c4:b2:5a:ea:48:10:
         f3:e8:74:31:47:98:f7:cd:51:d0:b7:83:0c:08:a8:53:a0:d1:
         10:55:fc:9b:7b:02:f8:d9:d4:d0:5e:12:fb:9d:39:60:7e:05:
         c1:34:3a:d2:4f:5c:6d:e0:09:34:9c:0c:cf:1a:1b:6f:a8:72:
         9d:96:ce:97:42:64:ce:f8:31:34:95:ec:0d:1a:c3:7b:5d:cc:
         dd:a0:48:8a:d9:b5:b2:dc:fc:f6:8e:a8:36:18:0e:01:fd:2d:
         97:f8:63:0c:df:4e:a1:0f:33:b5:23:cf:ae:e6:99:a5:5c:a3:
         cb:9a:96:a5:1c:82:12:4e:74:29:8b:6d:7a:79:6b:c2:ca:f2:
         c5:3e:4a:d3:13:9e:96:a4:e9:bf:ef:13:e5:2e:b8:08:4d:f3:
         64:b4:26:ed:e1:6b:6d:8c:58:ce:3b:9c:1f:a2:3a:2a:05:5d:
         cb:60:69:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUdpf4Yv9medsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTI4MmNlYmEtNjM0YS00MTdkLTgxNDAtNmU2MTg4YzU5MjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkbwnAcwvTiuoDMScuUxlZIWmslwA0rmY3Ib
KJgN6QJLnA9Mw5pkKc+grOi7XbyBt1h/E44G6uidbHi36oPV67saox2EuyN+HQA/
hlABzZY2VNAJ16JaLXPoE5MtnT9p4VjMfO7q0uwLuMmr9XTsS1AX1P1mAqBJ9x7X
JG9f3SmwBC5TyehIwpQS2Vypme+T6BKuOYUW7gy6oJAXT2iHsh2Ei0TNbevPa4H8
QEHI3dM61kWsyjlKOh+rmMcJ5hYlQ/x/FA0RJXmH3o0mFZfPgG7ZA45Ve0bowsI4
9heiuS2KrdAu09q5k9sfr9DWM9qzytZzky6HPMLOPo/7j+ydxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN6wpz7rWPYNTY6qrIrJt2Os/RcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYzA2ZGY3OWEtYTkzMS0z
NDVjLWIyZTYtZTRjYjMyMzA5OTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBA2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBUB8/RZF6iNXnmcg8TrykqwSnrgRNfz5eaODeHxiuoRe5lbFNvzXQ2
+ol2WdPWEuOSn0Gr+A0+y4gdp7J1uAdk1WF/ujf4CMx7iaN7poYyOrI3lcSyWupI
EPPodDFHmPfNUdC3gwwIqFOg0RBV/Jt7AvjZ1NBeEvudOWB+BcE0OtJPXG3gCTSc
DM8aG2+ocp2WzpdCZM74MTSV7A0aw3tdzN2gSIrZtbLc/PaOqDYYDgH9LZf4Ywzf
TqEPM7Ujz67mmaVco8ualqUcghJOdCmLbXp5a8LK8sU+StMTnpak6b/vE+UuuAhN
82S0Ju3ha22MWM47nB+iOioFXctgaaM=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:39:12 2026 by rpki-client