Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2951395b-d549-3af3-ae18-6344c005e079.roa
File:                     2951395b-d549-3af3-ae18-6344c005e079.roa (raw, json)
Hash identifier:          qwY6TAXcahzuxXPCaYBihgNn05oGQpMWO9lB0T+VHlw=
Subject key identifier:   33:D3:84:5A:AF:B2:AF:2B:09:CB:DC:92:F0:B6:CB:3C:0B:EF:3F:B4
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584EA78FC4158120B342D0FA6400
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2951395b-d549-3af3-ae18-6344c005e079.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53808
IP address blocks:        216.238.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:c4:15:81:20:b3:42:d0:fa:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=231c9efb-3c01-413f-ae11-d5c51f250711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:c3:65:63:e2:4e:5a:74:86:65:fa:cf:6a:
                    af:13:dd:4a:be:07:4f:75:bc:bb:27:7c:63:9b:1d:
                    f4:91:df:99:01:d2:34:db:c1:e5:3c:0d:58:74:e1:
                    40:5d:dd:8f:16:db:f1:3e:09:36:98:cb:d0:ea:76:
                    7b:19:cd:f4:c3:6e:9d:c5:a2:6d:05:be:66:cb:99:
                    49:d9:f2:ec:8a:96:98:fd:51:84:7e:3c:49:48:26:
                    e7:0a:fa:a3:da:df:7f:ba:9d:93:c3:1b:a5:4e:32:
                    94:a4:26:2f:67:b7:f5:1d:54:31:36:79:11:84:82:
                    7a:36:ed:0b:59:35:33:24:48:b6:d1:ba:39:9f:83:
                    ce:f8:fd:9a:ed:38:d2:13:4a:08:09:7a:6f:a0:f2:
                    2d:e3:12:3d:30:5f:fa:53:4f:14:38:2b:4e:22:08:
                    ee:80:ed:c9:34:a5:e3:b1:3b:40:2f:5c:6d:45:98:
                    b7:62:89:a9:0b:17:03:a2:3d:3c:4b:a3:20:29:ad:
                    37:10:65:85:af:23:8a:23:2e:8c:c0:ac:73:9c:70:
                    e3:51:45:17:3a:7f:d8:5d:04:ab:d3:66:1a:09:c9:
                    de:da:40:01:91:b9:1d:39:8b:83:bc:0a:8e:b4:67:
                    19:1f:d5:39:7d:cd:6b:47:b7:25:26:b9:af:91:e6:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D3:84:5A:AF:B2:AF:2B:09:CB:DC:92:F0:B6:CB:3C:0B:EF:3F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2951395b-d549-3af3-ae18-6344c005e079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7e:b0:13:90:b4:be:0c:3c:07:59:2b:3b:ca:cf:28:ef:67:
         54:45:7a:34:74:a5:7c:35:bb:ac:49:23:c6:ae:64:b5:b8:e0:
         80:6e:8c:54:f8:d2:42:96:7f:0a:e1:bb:c8:1d:dc:d7:f8:f6:
         22:ce:28:f9:69:0c:85:bd:27:25:dd:36:1c:03:7a:24:00:d3:
         32:41:17:1b:e3:26:36:fb:73:03:46:4f:95:b1:5e:b5:c7:21:
         cf:00:be:de:9e:e8:5b:2d:18:f0:73:4a:6d:e5:73:ac:89:c6:
         83:28:36:3e:f9:7c:7a:35:55:e9:11:9e:88:fd:ec:7c:8b:42:
         f7:85:a8:03:f9:02:51:76:51:a3:dd:c0:46:c6:23:ed:0d:29:
         8a:eb:09:c7:e9:21:27:d1:a3:c1:81:02:d6:4e:c9:d7:6e:8b:
         52:31:86:cc:f5:6d:2b:b1:c1:4d:5c:6c:b2:85:d2:a2:e5:bb:
         6f:88:58:a8:e5:85:4c:10:50:67:de:5c:8c:0d:ea:f3:21:c9:
         04:c9:21:39:ba:85:42:c5:a5:92:3b:37:b6:80:b5:03:d8:ec:
         ab:42:a5:1e:09:fa:b7:79:24:0d:7b:6a:c5:1d:6a:b0:32:cc:
         de:05:a0:c4:49:af:18:f6:b8:2a:20:b3:4a:ae:39:75:6b:62:
         31:c6:2a:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj8QVgSCzQtD6ZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm
Yjg0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjMxYzllZmItM2MwMS00MTNmLWFlMTEtZDVjNTFmMjUwNzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvvDZWPiTlp0hmX6z2qvE91KvgdPdby7J3xj
mx30kd+ZAdI028HlPA1YdOFAXd2PFtvxPgk2mMvQ6nZ7Gc30w26dxaJtBb5my5lJ
2fLsipaY/VGEfjxJSCbnCvqj2t9/up2TwxulTjKUpCYvZ7f1HVQxNnkRhIJ6Nu0L
WTUzJEi20bo5n4PO+P2a7TjSE0oICXpvoPIt4xI9MF/6U08UOCtOIgjugO3JNKXj
sTtAL1xtRZi3YompCxcDoj08S6MgKa03EGWFryOKIy6MwKxznHDjUUUXOn/YXQSr
02YaCcne2kABkbkdOYuDvAqOtGcZH9U5fc1rR7clJrmvkeYtbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPThFqvsq8rCcvckvC2yzwL7z+0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx
MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvMjk1MTM5NWItZDU0OS0z
YWYzLWFlMTgtNjM0NGMwMDVlMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi
MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz
ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0
NzNkM2ZiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2O40MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5+sBOQtL4MPAdZKzvKzyjvZ1RFejR0pXw1u6xJI8auZLW44IBujFT4
0kKWfwrhu8gd3Nf49iLOKPlpDIW9JyXdNhwDeiQA0zJBFxvjJjb7cwNGT5WxXrXH
Ic8Avt6e6FstGPBzSm3lc6yJxoMoNj75fHo1VekRnoj97HyLQveFqAP5AlF2UaPd
wEbGI+0NKYrrCcfpISfRo8GBAtZOyddui1Ixhsz1bSuxwU1cbLKF0qLlu2+IWKjl
hUwQUGfeXIwN6vMhyQTJITm6hULFpZI7N7aAtQPY7KtCpR4J+rd5JA17asUdarAy
zN4FoMRJrxj2uCogs0quOXVrYjHGKvY=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:59:19 2026 by rpki-client