Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
File:                     cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa (raw, json)
Hash identifier:          bPG+qO2Zt2EhCK6R9OaUFiUGF1H8oL3vmz4BhA4HGdM=
Subject key identifier:   63:F5:F9:BC:61:02:DE:65:7B:83:3D:9A:BB:29:5B:EA:A6:2E:6F:C2
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584E9BE51D10C47BC20DB7B06A00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     9084
IP address blocks:        154.1.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1d:10:c4:7b:c2:0d:b7:b0:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=48922d29-f8fa-44ed-a53c-e5fdb3cb8cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:8e:e7:5f:25:e9:6a:3c:92:b2:be:71:26:
                    c5:10:88:6d:9d:28:73:3d:80:a0:22:25:63:af:49:
                    20:39:26:81:c5:a1:8e:8d:90:73:7e:36:29:26:40:
                    c5:d1:45:6c:77:40:d8:0a:4e:90:49:71:e7:5e:74:
                    23:c6:9a:fe:35:34:d4:cd:09:6e:99:05:6a:ea:e3:
                    03:b0:c8:b0:b3:93:49:92:95:cb:44:12:a8:de:c8:
                    84:46:b1:eb:fe:db:7f:3b:c5:bb:27:91:06:6d:15:
                    52:06:4a:90:02:ac:17:7e:e4:c8:32:b7:f0:c2:f1:
                    86:c2:9e:a0:b7:51:cd:dd:36:7a:47:e0:74:3f:55:
                    96:4f:d0:28:90:e1:bc:45:4f:d3:d7:6e:e7:ae:05:
                    35:93:62:d4:67:7c:ba:89:e4:84:bb:87:36:0a:65:
                    6b:22:02:14:30:d2:41:d9:67:8a:30:a5:f0:05:11:
                    40:26:d8:6c:d3:ff:8d:01:8d:6f:b0:49:d7:30:57:
                    50:78:a6:05:e0:c7:5c:0a:fe:97:87:9b:4f:fb:2c:
                    31:4f:13:d1:a6:c0:d8:ba:6a:08:83:6d:19:33:75:
                    67:16:76:6d:4a:7e:a5:a2:15:2e:26:36:62:22:9c:
                    80:4e:3a:db:db:ec:7f:50:e8:0c:47:1c:b5:20:37:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F5:F9:BC:61:02:DE:65:7B:83:3D:9A:BB:29:5B:EA:A6:2E:6F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:e3:6f:e5:e7:52:de:b8:91:d1:c4:c7:88:b4:57:4a:5a:
         80:22:d4:ad:63:5c:df:00:53:c5:c7:b0:bc:1e:c5:c2:55:aa:
         19:f4:37:c5:7a:b4:60:55:b3:4e:cc:55:a7:a9:1e:6f:04:1b:
         8c:d3:79:5a:79:e1:11:9d:a2:a1:23:ba:00:c0:20:09:8c:6d:
         d4:e2:ab:63:ae:e6:d6:99:53:5c:e0:63:c0:c7:7f:d7:2c:e6:
         93:4b:85:75:21:20:88:8b:d8:3c:35:3b:79:37:fe:11:c8:ec:
         64:1d:a0:f1:68:f6:97:82:c2:69:e5:90:b4:46:f9:3b:d9:c9:
         d6:47:20:c3:9c:85:51:18:73:85:98:d0:c8:b5:25:f3:6e:92:
         5c:47:11:1c:a4:fc:c3:38:fd:71:51:03:ab:93:db:2f:8b:b1:
         a9:22:0b:bb:0a:66:89:58:bb:a2:fd:11:fc:38:da:00:bb:71:
         1e:31:04:e6:35:e3:6e:6a:47:b7:5a:04:83:b4:98:a5:b5:b9:
         7f:ff:f2:ba:8e:d7:ab:f3:3b:b0:cf:15:c2:66:2b:b6:b5:d7:
         9c:a4:97:6a:2f:eb:4c:bb:e6:15:91:33:f7:23:60:26:c6:ab:
         1d:3a:97:79:e6:bb:87:c1:aa:09:07:1c:fd:d3:d2:82:a5:d6:
         15:c0:cc:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R0QxHvCDbewagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGM1ZjZmYjgtMWY2OC00NzkyLThkZWYtYTYxNmE1MzI4
MGJlMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NDg5MjJkMjktZjhmYS00NGVkLWE1M2MtZTVmZGIzY2I4Y2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0qO518l6Wo8krK+cSbFEIhtnShzPYCgIiVj
r0kgOSaBxaGOjZBzfjYpJkDF0UVsd0DYCk6QSXHnXnQjxpr+NTTUzQlumQVq6uMD
sMiws5NJkpXLRBKo3siERrHr/tt/O8W7J5EGbRVSBkqQAqwXfuTIMrfwwvGGwp6g
t1HN3TZ6R+B0P1WWT9AokOG8RU/T127nrgU1k2LUZ3y6ieSEu4c2CmVrIgIUMNJB
2WeKMKXwBRFAJths0/+NAY1vsEnXMFdQeKYF4MdcCv6Xh5tP+ywxTxPRpsDYumoI
g20ZM3VnFnZtSn6lohUuJjZiIpyATjrb2+x/UOgMRxy1IDdirwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGP1+bxhAt5le4M9mrspW+qmLm/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80YzVm
NmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2YTUzMjgwYmUvY2MyODAxNWMtMzhkOC0z
N2NmLTlkNGYtOWZiMDZlODhmYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGM1ZjZmYjgtMWY2OC00NzkyLThk
ZWYtYTYxNmE1MzI4MGJlLzRjNWY2ZmI4LTFmNjgtNDc5Mi04ZGVmLWE2MTZhNTMy
ODBiZS5jcmwwHwYDVR0jBBgwFoAUqu/U+Zezd94fL8XYAsEplL9Ek5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80YzVmNmZiOC0xZjY4LTQ3OTItOGRlZi1hNjE2
YTUzMjgwYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmgGuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5h42/l51LeuJHRxMeItFdKWoAi1K1jXN8AU8XHsLwexcJVqhn0N8V6
tGBVs07MVaepHm8EG4zTeVp54RGdoqEjugDAIAmMbdTiq2Ou5taZU1zgY8DHf9cs
5pNLhXUhIIiL2Dw1O3k3/hHI7GQdoPFo9peCwmnlkLRG+TvZydZHIMOchVEYc4WY
0Mi1JfNuklxHERyk/MM4/XFRA6uT2y+LsakiC7sKZolYu6L9Efw42gC7cR4xBOY1
425qR7daBIO0mKW1uX//8rqO16vzO7DPFcJmK7a115ykl2ov60y75hWRM/cjYCbG
qx06l3nmu4fBqgkHHP3T0oKl1hXAzFU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:25:44 2026 by rpki-client