Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/96a0386e-7a53-3181-9151-1b6ae10c3ed1.roa
File:                     96a0386e-7a53-3181-9151-1b6ae10c3ed1.roa (raw, json)
Hash identifier:          bY4KtHQAD91Awtppymzr4KKJ7pVjtEug1jTyYDlJjRs=
Subject key identifier:   4D:9C:6A:F0:9E:89:7F:05:D7:7B:39:F9:15:79:4F:80:84:3F:05:9E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584C794C500AE3AD796360EFB7C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/96a0386e-7a53-3181-9151-1b6ae10c3ed1.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     46952
IP address blocks:        208.185.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:50:0a:e3:ad:79:63:60:ef:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=696d7de3-8e56-455e-9ee8-757e1f464ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:9c:cc:79:c8:bf:1f:7f:0c:da:16:d8:fc:
                    81:de:00:e3:bc:e2:2f:08:52:77:9f:d3:a0:3a:69:
                    b3:fc:ab:28:42:44:38:20:34:bb:e4:ff:f8:29:5b:
                    de:22:29:32:18:19:2d:b3:8a:10:59:d7:a2:68:26:
                    ef:2a:db:bd:d9:ef:fa:36:2d:5c:03:7f:2c:bf:90:
                    83:83:05:5c:0d:3e:c1:4d:54:b1:65:d5:b4:5d:19:
                    18:c2:46:59:55:95:a8:8f:97:fb:bc:c0:62:61:1b:
                    37:10:ad:f4:2b:a1:08:d1:0c:8b:b5:bd:cf:fe:c1:
                    35:b1:7a:d2:30:c8:61:c5:d6:c7:d3:b5:26:d9:1f:
                    e9:41:c7:77:19:b6:f6:fe:cf:f4:09:f5:a0:62:b7:
                    d9:a0:51:e5:fa:7f:a5:0e:57:bd:61:b6:9a:39:e6:
                    bd:e8:f8:da:24:c7:19:f9:e9:21:45:e4:a2:60:2c:
                    38:0f:90:80:6c:66:00:d4:30:9d:24:2f:01:85:19:
                    3d:d9:e7:af:9f:5b:03:1d:2b:f1:0c:54:9a:6f:b8:
                    7e:64:df:4c:27:da:3b:08:af:55:e3:94:a1:06:97:
                    c7:33:90:7b:02:fe:3a:33:11:5a:60:cb:aa:0b:b6:
                    f3:c7:67:3c:87:7f:cd:3e:db:59:38:d4:75:15:c8:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9C:6A:F0:9E:89:7F:05:D7:7B:39:F9:15:79:4F:80:84:3F:05:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/96a0386e-7a53-3181-9151-1b6ae10c3ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:d4:a2:51:eb:ca:05:bf:f1:68:73:b9:78:14:7c:7a:c9:
         9d:da:aa:9b:ec:f8:97:a9:14:96:a3:af:c0:c9:5d:dd:e0:5a:
         57:03:57:68:b9:90:e5:83:73:81:ca:a1:76:f1:8a:67:30:db:
         ca:05:6c:72:66:df:ae:7c:57:83:7b:d4:f8:52:69:5d:3f:31:
         77:6b:7b:2d:2d:f4:11:cd:ff:95:f2:fc:ad:86:b8:64:8c:5e:
         2e:cc:7b:fb:4a:2a:9c:b3:2d:41:53:12:33:d8:48:f9:e6:60:
         44:69:d7:7d:d1:1b:7a:7a:7a:8d:52:81:8c:04:ab:93:b7:f1:
         8e:5b:61:49:97:1f:f2:5e:9e:10:97:97:61:1d:d5:d3:21:33:
         f1:8f:76:92:26:11:63:36:ed:8a:98:20:ec:cd:a4:aa:23:54:
         43:05:0f:b6:35:b2:86:fd:72:7d:71:8d:b1:11:ae:a3:67:cb:
         01:5f:33:86:ee:46:54:f7:10:10:a9:5f:99:b1:3b:4f:6a:11:
         5f:f4:37:6d:58:97:25:c0:4a:fa:a3:3f:b2:72:9b:7a:b1:9c:
         5d:cc:d8:61:6d:e9:ea:95:dc:6e:a3:02:8a:05:8c:66:8b:bb:
         ae:21:8e:42:87:af:fe:ca:a5:35:c5:2c:03:fe:b5:d7:34:78:
         dd:c4:0d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TFAK4615Y2Dvt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
Njk2ZDdkZTMtOGU1Ni00NTVlLTllZTgtNzU3ZTFmNDY0Y2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbuczHnIvx9/DNoW2PyB3gDjvOIvCFJ3n9Og
Ommz/KsoQkQ4IDS75P/4KVveIikyGBkts4oQWdeiaCbvKtu92e/6Ni1cA38sv5CD
gwVcDT7BTVSxZdW0XRkYwkZZVZWoj5f7vMBiYRs3EK30K6EI0QyLtb3P/sE1sXrS
MMhhxdbH07Um2R/pQcd3Gbb2/s/0CfWgYrfZoFHl+n+lDle9YbaaOea96PjaJMcZ
+ekhReSiYCw4D5CAbGYA1DCdJC8BhRk92eevn1sDHSvxDFSab7h+ZN9MJ9o7CK9V
45ShBpfHM5B7Av46MxFaYMuqC7bzx2c8h3/NPttZONR1FcghAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE2cavCeiX8F13s5+RV5T4CEPwWeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOTZhMDM4NmUtN2E1My0z
MTgxLTkxNTEtMWI2YWUxMGMzZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0LnLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDY1KJR68oFv/Foc7l4FHx6yZ3aqpvs+JepFJajr8DJXd3gWlcDV2i5
kOWDc4HKoXbximcw28oFbHJm3658V4N71PhSaV0/MXdrey0t9BHN/5Xy/K2GuGSM
Xi7Me/tKKpyzLUFTEjPYSPnmYERp133RG3p6eo1SgYwEq5O38Y5bYUmXH/JenhCX
l2Ed1dMhM/GPdpImEWM27YqYIOzNpKojVEMFD7Y1sob9cn1xjbERrqNnywFfM4bu
RlT3EBCpX5mxO09qEV/0N21YlyXASvqjP7Jym3qxnF3M2GFt6eqV3G6jAooFjGaL
u64hjkKHr/7KpTXFLAP+tdc0eN3EDQs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:37:42 2026 by rpki-client