Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474/a0511310-8e40-319c-8c36-3f27f57a1df8.roa
File:                     a0511310-8e40-319c-8c36-3f27f57a1df8.roa (raw, json)
Hash identifier:          A52Y5cGTnLKrxxNAhTPxldwse++DiCZmJavMowcYBK0=
Subject key identifier:   41:3C:64:59:A6:F5:85:7C:DC:6E:56:7A:CE:FA:7D:30:9A:FD:4E:4D
Certificate issuer:       /CN=9b392da1-b0b8-48e0-92a9-d8617fc41474
Certificate serial:       010D0C9F4328584F0DC845A9DA0697DB7327E900
Authority key identifier: 1D:96:73:C5:37:DC:79:7F:23:88:14:D6:9B:9A:85:92:BD:2E:B8:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474/a0511310-8e40-319c-8c36-3f27f57a1df8.roa
Signing time:             Thu 03 Sep 2026 16:04:29 +0000
ROA not before:           Thu 03 Sep 2026 16:04:29 +0000
ROA not after:            Wed 02 Dec 2026 17:04:29 +0000
asID:                     30341
IP address blocks:        159.242.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474/9b392da1-b0b8-48e0-92a9-d8617fc41474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474/9b392da1-b0b8-48e0-92a9-d8617fc41474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:c8:45:a9:da:06:97:db:73:27:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b392da1-b0b8-48e0-92a9-d8617fc41474
        Validity
            Not Before: Sep  3 16:04:29 2026 GMT
            Not After : Dec  2 17:04:29 2026 GMT
        Subject: CN=ad69efdb-fc93-4904-a1d2-9468ef1413b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:a3:18:df:46:7a:4c:9c:f4:88:e5:98:23:
                    5e:bc:9d:3f:98:e0:80:e4:d0:60:40:a6:30:66:83:
                    6a:93:0e:80:e5:6c:7c:d7:09:25:9f:db:25:6f:5a:
                    6a:20:13:46:06:fb:92:09:f2:8f:26:c6:0d:9a:f0:
                    8f:0f:b1:d9:8b:75:a3:ef:0d:32:cc:95:01:0a:94:
                    04:15:8f:74:cd:54:b1:fc:a8:57:e6:9e:b8:ab:66:
                    8e:07:08:49:fa:7f:6b:29:2e:6a:70:97:b4:10:72:
                    7b:18:ad:62:85:c3:e2:65:65:35:15:d6:6b:7f:7d:
                    2c:cf:0c:60:ac:9b:c1:1a:74:09:6f:79:c2:65:d9:
                    d9:0f:56:82:47:25:1b:4b:01:e8:83:9a:9a:fc:b7:
                    e1:cf:41:e4:4a:81:a5:24:49:8f:0f:15:24:21:b5:
                    78:67:bf:ea:29:68:db:15:31:85:9c:d9:36:5d:f8:
                    a8:03:b5:66:6e:f4:ca:0b:a2:68:05:5c:ef:6d:cf:
                    f9:26:fe:bd:d3:b4:4d:fb:d3:b7:7e:72:d8:9b:7d:
                    d6:4a:13:ca:8e:05:77:d7:0c:2e:68:46:77:e0:a2:
                    64:f0:be:c6:a6:bd:ab:b5:fd:32:dc:03:f0:47:4f:
                    49:28:6b:d7:c9:25:39:4d:ce:03:c8:7d:ff:0e:f9:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3C:64:59:A6:F5:85:7C:DC:6E:56:7A:CE:FA:7D:30:9A:FD:4E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474/a0511310-8e40-319c-8c36-3f27f57a1df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474/9b392da1-b0b8-48e0-92a9-d8617fc41474.crl

            X509v3 Authority Key Identifier:
                keyid:1D:96:73:C5:37:DC:79:7F:23:88:14:D6:9B:9A:85:92:BD:2E:B8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9b392da1-b0b8-48e0-92a9-d8617fc41474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.242.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:5f:46:bd:a3:8b:9e:f2:21:19:cd:50:cb:d5:d3:a6:ef:bc:
         00:3a:31:16:0d:ca:69:97:9d:ab:d3:e2:46:af:88:f1:1e:5b:
         68:af:9b:59:ce:63:04:18:bc:9e:2b:74:a7:b6:5e:df:56:90:
         85:ac:12:73:f1:ae:65:0d:a9:3f:28:ee:3c:03:6d:81:ca:91:
         a3:e9:33:3c:b2:9f:0e:dd:b5:7f:ef:b6:40:c3:48:f5:9a:d9:
         d5:51:e1:35:1e:63:bc:c9:c5:0b:b1:6e:5e:f4:89:6b:a4:a4:
         42:fa:3d:36:fb:89:bb:8f:88:ba:c4:3c:00:0f:63:ef:b3:61:
         6c:b2:d3:1a:00:57:c9:ae:18:89:fe:f5:93:7c:7b:b7:68:9d:
         76:90:08:98:01:a0:2a:f9:d7:80:78:bd:36:f2:b5:5e:01:c6:
         1a:72:f1:58:51:35:d4:b9:54:8a:6a:d0:2a:65:33:44:ea:80:
         2d:68:4e:38:aa:f6:28:92:30:44:11:cb:50:04:e5:26:48:ad:
         40:b9:96:62:6e:6c:a5:9d:31:ab:aa:88:ba:4a:ec:fb:ff:da:
         ad:ba:95:72:99:27:24:38:ae:35:e1:8e:d1:21:2e:76:0b:93:
         b7:62:9d:6f:8c:08:60:fd:07:e8:b7:78:99:b4:f6:ef:b4:a4:
         60:84:76:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NyEWp2gaX23Mn6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIzOTJkYTEtYjBiOC00OGUwLTkyYTktZDg2MTdmYzQx
NDc0MB4XDTI2MDkwMzE2MDQyOVoXDTI2MTIwMjE3MDQyOVowLzEtMCsGA1UEAxMk
YWQ2OWVmZGItZmM5My00OTA0LWExZDItOTQ2OGVmMTQxM2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdmjGN9Gekyc9IjlmCNevJ0/mOCA5NBgQKYw
ZoNqkw6A5Wx81wkln9slb1pqIBNGBvuSCfKPJsYNmvCPD7HZi3Wj7w0yzJUBCpQE
FY90zVSx/KhX5p64q2aOBwhJ+n9rKS5qcJe0EHJ7GK1ihcPiZWU1FdZrf30szwxg
rJvBGnQJb3nCZdnZD1aCRyUbSwHog5qa/Lfhz0HkSoGlJEmPDxUkIbV4Z7/qKWjb
FTGFnNk2XfioA7VmbvTKC6JoBVzvbc/5Jv6907RN+9O3fnLYm33WShPKjgV31wwu
aEZ34KJk8L7Gpr2rtf0y3APwR09JKGvXySU5Tc4DyH3/DvnmNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEE8ZFmm9YV83G5Wes76fTCa/U5NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85YjM5
MmRhMS1iMGI4LTQ4ZTAtOTJhOS1kODYxN2ZjNDE0NzQvYTA1MTEzMTAtOGU0MC0z
MTljLThjMzYtM2YyN2Y1N2ExZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWIzOTJkYTEtYjBiOC00OGUwLTky
YTktZDg2MTdmYzQxNDc0LzliMzkyZGExLWIwYjgtNDhlMC05MmE5LWQ4NjE3ZmM0
MTQ3NC5jcmwwHwYDVR0jBBgwFoAUHZZzxTfceX8jiBTWm5qFkr0uuKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi85YjM5MmRhMS1iMGI4LTQ4ZTAtOTJhOS1kODYx
N2ZjNDE0NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn/LOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhfRr2ji57yIRnNUMvV06bvvAA6MRYNymmXnavT4kaviPEeW2ivm1nO
YwQYvJ4rdKe2Xt9WkIWsEnPxrmUNqT8o7jwDbYHKkaPpMzyynw7dtX/vtkDDSPWa
2dVR4TUeY7zJxQuxbl70iWukpEL6PTb7ibuPiLrEPAAPY++zYWyy0xoAV8muGIn+
9ZN8e7donXaQCJgBoCr514B4vTbytV4Bxhpy8VhRNdS5VIpq0CplM0TqgC1oTjiq
9iiSMEQRy1AE5SZIrUC5lmJubKWdMauqiLpK7Pv/2q26lXKZJyQ4rjXhjtEhLnYL
k7dinW+MCGD9B+i3eJm09u+0pGCEdkc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:12:34 2026 by rpki-client