Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa
File:                     0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa (raw, json)
Hash identifier:          XuNJpuNvaaMImFYXpBV8UZj+kddjxeC0uxAJ5a7biQM=
Subject key identifier:   52:D5:C6:DB:1E:3C:BD:C6:64:01:8C:D2:17:62:81:E6:08:6C:E6:DF
Certificate issuer:       /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial:       010D0C9F4328584EA798E40F149FBC5F8ADCB980
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     55230
IP address blocks:        192.230.192.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e4:0f:14:9f:bc:5f:8a:dc:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2450bef3-f9d1-46cd-a721-a7b28a3e804d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:1e:ee:f4:52:93:04:ed:55:7d:74:0b:6b:
                    96:0a:33:9d:09:fd:97:12:a1:aa:3c:e0:83:b8:27:
                    b4:d7:3b:82:54:75:ae:4d:02:3d:30:da:72:c3:6c:
                    22:55:e4:c8:34:7d:05:2c:4e:0a:17:7c:74:f8:7d:
                    be:da:da:a4:c5:9f:ef:b1:5d:5f:23:ce:17:ec:48:
                    93:3a:e1:86:64:d7:de:40:51:69:32:af:78:4e:00:
                    05:4e:bf:bc:22:62:b4:21:bb:b6:68:b4:df:a2:b5:
                    b8:5f:e1:6e:15:3e:ed:c2:f5:61:18:a5:34:87:20:
                    b1:50:6b:46:07:7c:ee:7f:b8:04:f7:36:e9:d5:e2:
                    dc:9a:57:41:bb:ca:e8:54:88:39:a4:b5:97:ee:8f:
                    89:0c:80:86:c5:77:a4:6a:66:94:9d:e5:b9:12:f0:
                    b5:e5:f6:0a:68:5c:31:72:b9:dd:f0:b5:27:f2:0d:
                    90:07:71:dc:9f:01:ed:55:34:fc:bc:32:5c:3b:54:
                    95:09:b0:a8:48:ea:ff:55:ac:30:e5:8f:88:c7:58:
                    8e:96:2b:64:aa:c7:63:93:d5:30:e7:c5:55:1c:ba:
                    d6:2a:b5:76:5a:a9:0e:c4:a5:72:a7:5b:bb:83:9a:
                    ea:1d:d5:c2:b6:29:43:b3:c1:4b:9c:11:77:45:90:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D5:C6:DB:1E:3C:BD:C6:64:01:8C:D2:17:62:81:E6:08:6C:E6:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/0f3566a8-3961-35ab-8bf3-4f7bd985ffe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:42:16:91:ca:ed:b0:fc:fd:53:d0:43:87:68:80:5b:33:1a:
         8f:bc:70:4a:c4:21:1d:42:a1:cf:ad:4b:fc:c2:92:c6:86:8e:
         3a:fc:0a:59:2d:ec:b0:3e:0b:58:7b:68:e4:d1:d5:58:57:75:
         34:31:01:79:65:ec:aa:15:06:57:bd:9e:42:4c:fd:b1:2b:80:
         99:fa:f9:21:63:50:16:10:4f:a9:76:bb:80:ff:a1:4d:9e:47:
         ed:9b:e7:11:e6:e1:c0:cb:ad:11:38:44:e9:f4:c5:fb:7b:0f:
         f5:e4:fc:b3:1d:cd:6c:1b:72:42:26:68:7d:db:db:85:84:60:
         e5:37:44:1b:f5:1c:b5:cb:0b:e6:d4:8c:22:ab:c4:f2:77:4f:
         64:a5:bf:10:ad:80:87:92:1c:27:1e:7a:b6:8c:77:99:2a:dc:
         1f:ce:de:bc:2b:32:6a:99:71:43:5b:06:46:43:ee:02:c3:59:
         94:0a:da:13:4c:f9:60:a4:a3:50:af:e8:a8:f3:cd:9a:7d:92:
         17:0c:a9:4b:a5:7c:ee:aa:9c:d7:3d:54:df:f2:27:19:3c:d0:
         76:3d:fb:e6:8b:d3:ed:57:48:ee:8c:27:c9:61:35:05:c7:b7:
         d4:47:f2:35:b5:bc:3e:dc:dd:56:94:6d:45:5d:e2:9a:b0:75:
         f3:e1:cb:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmOQPFJ+8X4rcuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMyNjRlZDAtNTIxYi00NTNiLWI4ZjYtODVhYjRkNDdj
OTY3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjQ1MGJlZjMtZjlkMS00NmNkLWE3MjEtYTdiMjhhM2U4MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJoe7vRSkwTtVX10C2uWCjOdCf2XEqGqPOCD
uCe01zuCVHWuTQI9MNpyw2wiVeTINH0FLE4KF3x0+H2+2tqkxZ/vsV1fI84X7EiT
OuGGZNfeQFFpMq94TgAFTr+8ImK0Ibu2aLTforW4X+FuFT7twvVhGKU0hyCxUGtG
B3zuf7gE9zbp1eLcmldBu8roVIg5pLWX7o+JDICGxXekamaUneW5EvC15fYKaFwx
crnd8LUn8g2QB3HcnwHtVTT8vDJcO1SVCbCoSOr/Vaww5Y+Ix1iOlitkqsdjk9Uw
58VVHLrWKrV2WqkOxKVyp1u7g5rqHdXCtilDs8FLnBF3RZCaZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLVxtsePL3GZAGM0hdigeYIbObfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YzI2
NGVkMC01MjFiLTQ1M2ItYjhmNi04NWFiNGQ0N2M5NjcvMGYzNTY2YTgtMzk2MS0z
NWFiLThiZjMtNGY3YmQ5ODVmZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWMyNjRlZDAtNTIxYi00NTNiLWI4
ZjYtODVhYjRkNDdjOTY3LzVjMjY0ZWQwLTUyMWItNDUzYi1iOGY2LTg1YWI0ZDQ3
Yzk2Ny5jcmwwHwYDVR0jBBgwFoAUnyjNCBzMRCkWsHxtGJsuueYCT98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81YzI2NGVkMC01MjFiLTQ1M2ItYjhmNi04NWFi
NGQ0N2M5NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwObAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJCFpHK7bD8/VPQQ4dogFszGo+8cErEIR1Coc+tS/zCksaGjjr8Clkt
7LA+C1h7aOTR1VhXdTQxAXll7KoVBle9nkJM/bErgJn6+SFjUBYQT6l2u4D/oU2e
R+2b5xHm4cDLrRE4ROn0xft7D/Xk/LMdzWwbckImaH3b24WEYOU3RBv1HLXLC+bU
jCKrxPJ3T2SlvxCtgIeSHCceeraMd5kq3B/O3rwrMmqZcUNbBkZD7gLDWZQK2hNM
+WCko1Cv6KjzzZp9khcMqUulfO6qnNc9VN/yJxk80HY9++aL0+1XSO6MJ8lhNQXH
t9RH8jW1vD7c3VaUbUVd4pqwdfPhyxo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:11:12 2026 by rpki-client