Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/72221071-73f1-3658-aa09-b362117a1030.roa
File:                     72221071-73f1-3658-aa09-b362117a1030.roa (raw, json)
Hash identifier:          XkdZfo6h72CyWmosGCwDbIoq1khx9GazvdcMbhTdqZM=
Subject key identifier:   F1:36:E0:F8:6F:A8:A6:94:93:1B:1B:27:4B:54:65:D2:0D:44:CC:FC
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584D86954EDF4BE2024889701600
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/72221071-73f1-3658-aa09-b362117a1030.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     19901
IP address blocks:        9.144.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4e:df:4b:e2:02:48:89:70:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=4ba09d8b-beee-479f-a670-6cd8763ee092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:66:bd:9e:c9:34:bf:f1:77:d0:fd:01:0a:
                    f8:77:42:d9:cc:cf:d1:cd:5b:3e:e3:42:da:7a:68:
                    1b:62:6d:b9:0d:a1:0a:7e:4a:63:ef:3c:7f:8d:5a:
                    aa:30:d2:6a:c2:b9:73:fe:fe:4d:17:1b:de:b7:a0:
                    67:e2:87:d9:35:d4:e3:b6:11:80:2b:61:ce:e1:1e:
                    75:33:6d:1f:bb:7b:c4:89:d7:48:a7:c0:e8:f5:0a:
                    f5:e5:75:52:0e:00:ec:06:55:c2:f5:5e:ae:a5:10:
                    e1:7b:29:a0:83:a9:c1:cb:52:13:47:96:9e:d3:91:
                    33:9a:e4:7a:22:b1:b9:f5:2c:13:17:51:35:e0:e4:
                    94:27:9b:ff:b9:e5:c2:11:a3:eb:7b:44:84:93:92:
                    fd:7b:2e:46:53:0e:a1:23:c3:58:6c:fb:98:ae:68:
                    90:9d:1d:e1:83:b8:74:be:48:6a:5e:98:d0:ae:c4:
                    48:0e:79:d2:29:0c:70:c5:0d:49:c9:f4:e1:45:e3:
                    8a:44:9c:37:37:e5:db:e9:0d:27:4c:98:a4:2f:4f:
                    47:34:d3:ec:79:9d:d8:6a:19:63:f0:c6:6a:8b:d3:
                    63:bc:d4:38:70:ec:d4:d5:2b:05:17:d9:c7:1e:66:
                    ee:0e:96:65:d3:9f:48:3b:b6:24:96:54:11:22:e7:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:36:E0:F8:6F:A8:A6:94:93:1B:1B:27:4B:54:65:D2:0D:44:CC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/72221071-73f1-3658-aa09-b362117a1030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.144.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:02:17:d4:5d:f3:32:a7:c8:3c:50:ab:8b:65:d1:08:54:9f:
         37:92:3b:7c:05:0a:fb:87:81:c5:76:02:55:58:6d:90:34:bd:
         ec:bf:8f:89:35:00:32:5d:50:39:f3:96:50:5c:56:46:4b:ad:
         a4:d2:ca:66:5b:09:c0:23:27:84:59:89:24:85:13:68:ac:b1:
         0f:e0:09:7a:8a:d4:60:42:ff:f7:dc:17:79:36:f5:09:42:d1:
         07:52:20:37:49:ae:59:44:58:20:87:c1:6f:5e:b2:b8:21:26:
         bb:c6:a4:56:ab:b4:f7:7f:ef:7e:0c:07:74:e0:60:ac:cf:24:
         7f:88:0e:2b:9b:9d:ee:0b:23:37:ea:83:f6:89:76:03:82:45:
         ec:c9:e4:45:c7:b2:b6:7a:0d:cf:fc:75:91:56:6b:fb:1d:cd:
         f2:6f:d3:9d:d7:15:21:53:b1:18:cc:0c:91:5f:1c:d4:1c:0d:
         63:5d:5a:65:1f:8c:1a:3f:ec:b2:e3:4b:3c:97:10:f9:06:d4:
         db:be:7f:ad:d1:ad:a8:00:7d:72:77:21:68:ca:a5:a6:ca:b1:
         94:28:37:a5:8d:e0:7d:ff:54:9b:92:cb:b3:44:ee:93:91:27:
         b3:23:0e:8c:e5:ce:a5:cb:e4:32:cd:b4:7b:25:81:ac:f3:91:
         e7:b5:58:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlU7fS+ICSIlwFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
NGJhMDlkOGItYmVlZS00NzlmLWE2NzAtNmNkODc2M2VlMDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL1mvZ7JNL/xd9D9AQr4d0LZzM/RzVs+40La
emgbYm25DaEKfkpj7zx/jVqqMNJqwrlz/v5NFxvet6Bn4ofZNdTjthGAK2HO4R51
M20fu3vEiddIp8Do9Qr15XVSDgDsBlXC9V6upRDheymgg6nBy1ITR5ae05EzmuR6
IrG59SwTF1E14OSUJ5v/ueXCEaPre0SEk5L9ey5GUw6hI8NYbPuYrmiQnR3hg7h0
vkhqXpjQrsRIDnnSKQxwxQ1JyfThReOKRJw3N+Xb6Q0nTJikL09HNNPseZ3Yahlj
8MZqi9NjvNQ4cOzU1SsFF9nHHmbuDpZl059IO7YkllQRIufyRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPE24PhvqKaUkxsbJ0tUZdINRMz8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNzIyMjEwNzEtNzNmMS0z
NjU4LWFhMDktYjM2MjExN2ExMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFCZCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcCF9Rd8zKnyDxQq4tl0QhUnzeSO3wFCvuHgcV2AlVYbZA0vey/j4k1
ADJdUDnzllBcVkZLraTSymZbCcAjJ4RZiSSFE2issQ/gCXqK1GBC//fcF3k29QlC
0QdSIDdJrllEWCCHwW9esrghJrvGpFartPd/734MB3TgYKzPJH+IDiubne4LIzfq
g/aJdgOCRezJ5EXHsrZ6Dc/8dZFWa/sdzfJv053XFSFTsRjMDJFfHNQcDWNdWmUf
jBo/7LLjSzyXEPkG1Nu+f63RragAfXJ3IWjKpabKsZQoN6WN4H3/VJuSy7NE7pOR
J7MjDozlzqXL5DLNtHslgazzkee1WJ8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:24:07 2026 by rpki-client