Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
File:                     7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (raw, json)
Hash identifier:          aRDnhUU4M5H1UL/bqnH7NVOgbOTcdaDf3w7cxqWJZc0=
Subject key identifier:   0B:82:4C:CE:EF:27:B8:25:AC:A3:0B:57:5D:00:47:62:9E:4A:BE:1D
Certificate issuer:       /CN=3228caa5-d014-404b-9e3d-61cdea1ff493
Certificate serial:       010D0C9F4328584EA786EB6D4FE3D8DD6ABAF900
Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401438
IP address blocks:        198.200.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:eb:6d:4f:e3:d8:dd:6a:ba:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=200804e3-d8f6-44f8-9ddc-df3e8bbd9ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:f7:ca:ab:68:d4:6a:19:14:54:03:c9:79:
                    9c:88:be:7a:08:b3:ae:f6:96:82:f9:f0:b2:01:84:
                    c7:ca:21:45:4c:d0:47:a1:07:6d:da:5a:4b:9b:cc:
                    da:36:bb:b6:fd:79:54:c9:c8:c1:58:ad:57:97:51:
                    15:bb:bf:9f:f7:58:99:f6:85:b5:39:fb:d8:c8:22:
                    ee:b7:dc:24:1a:17:4f:0a:45:fa:62:46:60:8c:f6:
                    5c:84:aa:4f:a9:41:69:9b:90:d1:10:99:17:5c:02:
                    36:51:fd:e3:d0:18:36:8b:21:dd:c6:fd:f9:ca:1c:
                    a9:5e:86:88:83:6d:a7:9e:6c:7d:3a:61:1d:e3:3a:
                    1b:d0:27:f0:73:b4:96:7a:4c:d3:f1:2b:67:4f:ff:
                    61:34:b0:67:db:2a:13:21:78:8b:44:63:e2:35:79:
                    58:2e:52:8c:f4:cc:04:95:a5:1b:5c:f1:ec:88:a3:
                    f7:30:b7:89:3d:a3:a8:01:5b:23:c6:f8:0d:a0:67:
                    cd:55:41:aa:ba:b7:f5:2d:08:d8:3a:4e:b0:0b:b1:
                    48:58:41:69:82:32:c4:b1:d5:97:53:15:90:f6:c6:
                    06:3c:44:67:05:6e:0f:cd:e2:cc:99:2f:17:67:89:
                    0a:f9:5a:f3:6a:b4:ff:4a:fb:d8:9f:b9:9c:36:cf:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:4C:CE:EF:27:B8:25:AC:A3:0B:57:5D:00:47:62:9E:4A:BE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl

            X509v3 Authority Key Identifier:
                keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c8:c4:41:00:ed:f4:57:87:d3:1d:37:91:f4:35:fb:c2:49:
         38:6e:71:28:7a:73:16:0f:1d:64:4c:a0:74:5c:31:db:ff:e8:
         cb:95:74:e6:fd:04:5a:f1:0e:ee:23:dd:d2:42:62:12:7b:8a:
         c2:a6:f9:ae:4f:e5:70:dc:3b:13:76:4d:68:a3:7a:9f:fe:ea:
         25:06:46:b0:7f:d7:0e:e7:7f:62:38:ac:29:fe:29:a9:40:41:
         4f:f0:66:49:e9:9a:c2:d1:44:aa:dd:90:1d:ee:92:ec:d6:81:
         bf:00:81:86:81:40:f3:1c:b4:df:21:3c:f1:90:62:fb:b4:bd:
         a1:11:08:f1:fd:05:73:f1:e7:33:31:ae:b4:d0:b8:05:17:1b:
         00:4a:b3:7d:66:ed:f1:de:4c:4b:7f:76:8c:46:7e:b2:2a:93:
         73:bb:2d:6a:76:3c:db:ca:aa:75:26:b5:16:6c:df:5e:c5:69:
         84:c8:9b:68:14:5b:aa:c7:5b:f9:5c:ed:d8:25:3d:b8:30:e0:
         42:87:45:1d:d4:30:15:a9:6e:79:84:48:e5:a5:29:d8:a4:33:
         36:b4:26:d8:ab:9c:57:94:12:98:c0:23:17:75:fd:d2:e4:29:
         6f:48:02:10:f6:37:5c:86:ec:7a:89:b6:3c:78:25:68:c8:ce:
         06:8b:1e:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuttT+PY3Wq6+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm
NDkzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjAwODA0ZTMtZDhmNi00NGY4LTlkZGMtZGYzZThiYmQ5YWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNf3yqto1GoZFFQDyXmciL56CLOu9paC+fCy
AYTHyiFFTNBHoQdt2lpLm8zaNru2/XlUycjBWK1Xl1EVu7+f91iZ9oW1OfvYyCLu
t9wkGhdPCkX6YkZgjPZchKpPqUFpm5DREJkXXAI2Uf3j0Bg2iyHdxv35yhypXoaI
g22nnmx9OmEd4zob0Cfwc7SWekzT8StnT/9hNLBn2yoTIXiLRGPiNXlYLlKM9MwE
laUbXPHsiKP3MLeJPaOoAVsjxvgNoGfNVUGqurf1LQjYOk6wC7FIWEFpgjLEsdWX
UxWQ9sYGPERnBW4PzeLMmS8XZ4kK+VrzarT/SvvYn7mcNs8GEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAuCTM7vJ7glrKMLV10AR2KeSr4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4
Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvNzQ3MmI0NDMtZDI2Zi0z
ZDhmLThkODktYzJiOGRjMWRkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll
M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm
ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk
ZWExZmY0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsjyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrIxEEA7fRXh9MdN5H0NfvCSThucSh6cxYPHWRMoHRcMdv/6MuVdOb9
BFrxDu4j3dJCYhJ7isKm+a5P5XDcOxN2TWijep/+6iUGRrB/1w7nf2I4rCn+KalA
QU/wZknpmsLRRKrdkB3ukuzWgb8AgYaBQPMctN8hPPGQYvu0vaERCPH9BXPx5zMx
rrTQuAUXGwBKs31m7fHeTEt/doxGfrIqk3O7LWp2PNvKqnUmtRZs317FaYTIm2gU
W6rHW/lc7dglPbgw4EKHRR3UMBWpbnmESOWlKdikMza0JtirnFeUEpjAIxd1/dLk
KW9IAhD2N1yG7HqJtjx4JWjIzgaLHrI=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:41 2026 by rpki-client