Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa
File:                     cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa (raw, json)
Hash identifier:          efC7AQVpSz9K7uf0JoPqr2au0cQR8GUdSQe/efH/iKk=
Subject key identifier:   48:3D:37:8B:72:B2:88:F6:4B:1B:92:04:27:49:64:62:5F:2B:A4:1D
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584EA7873B73D6E81234C8A43FC0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     109
IP address blocks:        198.133.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3b:73:d6:e8:12:34:c8:a4:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=38f769c7-39ca-4eb5-b8bb-ec3bca1ca624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:bb:f9:cf:6e:c1:14:56:7f:70:83:6b:d3:
                    06:7a:e7:70:a5:f2:1d:70:95:c2:bf:8d:b8:57:9d:
                    aa:c2:de:55:4c:49:0c:d1:6b:2c:8d:b7:b8:1b:1a:
                    e1:56:11:fe:5e:db:82:31:a2:12:4e:3e:1c:d8:e7:
                    8f:7a:95:fe:8c:8c:4d:09:76:b1:2b:de:14:67:6c:
                    71:03:8e:07:f4:f4:c5:d2:7e:5e:28:e4:b4:8a:25:
                    78:02:eb:ac:9b:29:9e:4f:dc:a5:64:9d:eb:98:c2:
                    49:87:1a:53:6a:15:b4:50:73:bf:7a:c3:0f:24:02:
                    5f:ad:2f:99:0d:d1:4b:99:95:66:36:51:b6:b2:a6:
                    34:8c:d5:0d:a2:05:31:b5:9c:d0:63:d6:a0:6c:87:
                    82:4f:45:e9:de:13:32:0f:97:bf:15:f3:c6:b8:53:
                    6b:82:cc:08:bc:ee:48:7a:e7:57:2f:b2:d3:a7:a5:
                    c5:7f:a5:87:19:27:9e:b8:dc:78:82:f2:80:48:bd:
                    7b:be:64:a1:e0:c8:87:a7:10:e3:84:20:c8:55:bb:
                    04:3b:d8:d5:45:5e:35:01:60:20:4e:db:23:87:d2:
                    8f:32:9e:b5:e7:4d:9d:6c:41:74:b6:bf:2c:cb:0e:
                    85:f5:25:fc:1c:dd:20:ff:b6:9b:9b:26:2e:71:8a:
                    42:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3D:37:8B:72:B2:88:F6:4B:1B:92:04:27:49:64:62:5F:2B:A4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cc6c4896-ee3e-3786-ab05-14a6b8a7c810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:d7:27:3c:14:c3:08:aa:b7:0c:51:d3:2d:1e:6a:7c:47:
         c4:0b:e6:0f:76:b0:ed:bc:7a:19:72:cf:89:4b:ca:e7:1c:ae:
         8f:05:6d:a5:f7:04:5e:f1:65:61:92:3e:be:f5:24:ed:22:75:
         99:0b:3e:76:b9:de:00:39:5f:d4:c5:e4:a4:70:ea:09:19:aa:
         47:35:7f:ab:34:c1:47:0e:41:c7:52:6a:25:a4:4e:56:df:67:
         ff:83:5c:ba:cc:8a:86:2d:3c:3d:b2:9d:37:3a:46:fe:4e:0a:
         62:33:1f:a3:31:2a:96:02:4e:bf:4d:d4:da:07:f1:5f:56:83:
         e2:c5:dc:d1:1b:be:35:8d:2e:72:95:10:a2:68:6a:1b:a6:d2:
         6d:cc:cd:b7:64:53:40:39:43:31:7e:00:ca:a7:54:52:0b:08:
         ed:61:53:02:1f:36:09:81:5b:c5:e2:d2:7c:97:11:ff:40:a9:
         99:e2:9c:10:f5:15:79:56:8c:dc:64:2a:d0:4e:f4:c7:eb:81:
         aa:e3:79:43:bf:2f:bf:84:6a:6d:14:e1:d9:91:9a:82:7e:06:
         a8:f2:49:d3:97:52:32:4b:ba:5e:e9:fc:50:21:20:12:2c:45:
         87:83:c4:3f:dc:11:bc:58:82:e8:d7:0b:b2:1f:ad:62:12:da:
         36:da:3e:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhztz1ugSNMikP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzhmNzY5YzctMzljYS00ZWI1LWI4YmItZWMzYmNhMWNhNjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJu7+c9uwRRWf3CDa9MGeudwpfIdcJXCv424
V52qwt5VTEkM0Wssjbe4GxrhVhH+XtuCMaISTj4c2OePepX+jIxNCXaxK94UZ2xx
A44H9PTF0n5eKOS0iiV4AuusmymeT9ylZJ3rmMJJhxpTahW0UHO/esMPJAJfrS+Z
DdFLmZVmNlG2sqY0jNUNogUxtZzQY9agbIeCT0Xp3hMyD5e/FfPGuFNrgswIvO5I
eudXL7LTp6XFf6WHGSeeuNx4gvKASL17vmSh4MiHpxDjhCDIVbsEO9jVRV41AWAg
Ttsjh9KPMp61502dbEF0tr8syw6F9SX8HN0g/7abmyYucYpCpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEg9N4tysoj2SxuSBCdJZGJfK6QdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvY2M2YzQ4OTYtZWUzZS0z
Nzg2LWFiMDUtMTRhNmI4YTdjODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLF1yc8FMMIqrcMUdMtHmp8R8QL5g92sO28ehlyz4lLyuccro8FbaX3
BF7xZWGSPr71JO0idZkLPna53gA5X9TF5KRw6gkZqkc1f6s0wUcOQcdSaiWkTlbf
Z/+DXLrMioYtPD2ynTc6Rv5OCmIzH6MxKpYCTr9N1NoH8V9Wg+LF3NEbvjWNLnKV
EKJoahum0m3MzbdkU0A5QzF+AMqnVFILCO1hUwIfNgmBW8Xi0nyXEf9AqZninBD1
FXlWjNxkKtBO9MfrgarjeUO/L7+Eam0U4dmRmoJ+BqjySdOXUjJLul7p/FAhIBIs
RYeDxD/cEbxYgujXC7IfrWIS2jbaPmA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:30:22 2026 by rpki-client