Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa
File:                     45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa (raw, json)
Hash identifier:          cFEOdqGIw08Xlz3a+1LhLsQzUfO7ZLD73UlEA8kawhM=
Subject key identifier:   F6:FA:39:61:3E:21:2B:0F:EA:A5:40:FE:B0:D1:14:C0:0E:4B:19:1B
Certificate issuer:       /CN=a6709f7f-42da-46f3-aa41-67580df7e49c
Certificate serial:       010D0C9F4328584CB81C852D51404AD1D1ED6F00
Authority key identifier: 54:C1:D2:42:19:11:D3:95:59:BD:1E:A1:39:09:69:3B:F9:34:4A:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     40280
IP address blocks:        192.94.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/a6709f7f-42da-46f3-aa41-67580df7e49c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/a6709f7f-42da-46f3-aa41-67580df7e49c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:85:2d:51:40:4a:d1:d1:ed:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6709f7f-42da-46f3-aa41-67580df7e49c
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=61838ecf-87ce-482e-828d-75b6880ef6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:69:bd:48:c1:a4:8c:9d:ea:69:78:8f:22:
                    75:01:81:64:d3:d2:d0:a8:a9:3d:5c:c9:9d:9b:b0:
                    64:f4:78:d6:3a:3f:ba:3b:b2:e9:00:96:d7:ad:6b:
                    45:1b:9d:2b:18:71:f7:ee:c6:50:fc:b1:4c:78:22:
                    ad:ce:11:60:a4:0f:24:d0:30:36:4d:35:cf:c9:cc:
                    be:5e:b6:30:56:c2:14:ca:f8:af:bc:04:a3:0e:02:
                    2e:72:bf:cf:c3:ef:df:b5:b0:4c:f4:e7:70:70:7d:
                    ab:1d:cc:a1:03:17:c0:9a:c7:1c:f6:a0:f8:d6:b7:
                    98:e6:b1:fe:3a:a4:78:4a:3d:27:e2:e2:30:a4:45:
                    94:c9:b8:e7:6c:bf:6a:e6:f6:a8:f5:46:60:70:b5:
                    f7:94:e3:d6:77:c8:3d:66:21:4e:7f:7e:df:53:07:
                    7c:c3:23:d9:e0:5a:ef:e2:03:5a:71:6f:3a:08:6d:
                    63:c0:9f:95:08:97:e4:28:58:b6:cc:9b:5c:1a:af:
                    bf:9a:04:81:f6:86:a0:6d:ac:b5:dd:14:bc:35:bc:
                    ac:81:0d:71:14:89:2f:24:6a:74:78:9c:c3:15:d7:
                    93:39:08:ae:f7:26:90:6b:39:5e:ba:7e:25:32:7b:
                    ac:ac:d1:72:10:90:57:b9:a1:64:29:2d:e8:2c:88:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FA:39:61:3E:21:2B:0F:EA:A5:40:FE:B0:D1:14:C0:0E:4B:19:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/45593b1d-658c-30b6-ae47-89a9b84ee4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c/a6709f7f-42da-46f3-aa41-67580df7e49c.crl

            X509v3 Authority Key Identifier:
                keyid:54:C1:D2:42:19:11:D3:95:59:BD:1E:A1:39:09:69:3B:F9:34:4A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a6709f7f-42da-46f3-aa41-67580df7e49c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:17:0d:32:82:e1:9f:15:15:b9:a5:5c:5b:91:71:9d:12:a4:
         5e:7c:43:bd:45:dc:9d:d4:77:38:c8:d4:1d:ab:14:19:c9:38:
         6a:e8:b5:c9:14:fa:85:69:53:00:43:33:27:d4:c4:98:57:0b:
         d2:e6:88:02:a1:f1:6a:3d:b3:64:d7:c5:04:e4:ee:ab:dc:99:
         40:7c:99:e9:b6:37:5d:eb:9b:54:81:04:7e:4f:13:a5:e0:e9:
         1c:02:b4:3a:3e:cd:9e:a5:f7:6f:98:f6:e9:dd:39:65:7b:96:
         46:cb:62:f2:24:0c:0f:5f:1b:ea:59:c3:c7:e2:1f:c6:20:67:
         cd:38:1b:e9:8a:f5:de:72:87:67:82:05:eb:68:53:71:8c:cd:
         94:2c:ce:01:5b:95:0a:a7:0f:08:8d:d0:fb:79:51:c3:bd:4d:
         7e:c5:f5:7d:ec:80:0f:94:f7:e9:3e:f5:9f:eb:a8:a0:4b:b5:
         5e:c4:a4:a5:3c:a3:cc:3d:b5:ef:4b:e2:84:05:60:d4:9b:09:
         7b:48:80:8e:fa:17:86:b7:cc:02:68:b2:e6:67:61:c4:e6:84:
         2b:1e:aa:92:30:dd:d2:fd:a6:9d:f3:33:4e:cd:a7:55:a9:af:
         bc:a3:92:94:aa:be:c4:cc:e2:19:d2:4b:a5:67:62:15:02:8a:
         4e:20:bf:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIUtUUBK0dHtbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY3MDlmN2YtNDJkYS00NmYzLWFhNDEtNjc1ODBkZjdl
NDljMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
NjE4MzhlY2YtODdjZS00ODJlLTgyOGQtNzViNjg4MGVmNmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+lpvUjBpIyd6ml4jyJ1AYFk09LQqKk9XMmd
m7Bk9HjWOj+6O7LpAJbXrWtFG50rGHH37sZQ/LFMeCKtzhFgpA8k0DA2TTXPycy+
XrYwVsIUyvivvASjDgIucr/Pw+/ftbBM9OdwcH2rHcyhAxfAmscc9qD41reY5rH+
OqR4Sj0n4uIwpEWUybjnbL9q5vao9UZgcLX3lOPWd8g9ZiFOf37fUwd8wyPZ4Frv
4gNacW86CG1jwJ+VCJfkKFi2zJtcGq+/mgSB9oagbay13RS8NbysgQ1xFIkvJGp0
eJzDFdeTOQiu9yaQazleun4lMnusrNFyEJBXuaFkKS3oLIibowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPb6OWE+ISsP6qVA/rDRFMAOSxkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNjcw
OWY3Zi00MmRhLTQ2ZjMtYWE0MS02NzU4MGRmN2U0OWMvNDU1OTNiMWQtNjU4Yy0z
MGI2LWFlNDctODlhOWI4NGVlNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTY3MDlmN2YtNDJkYS00NmYzLWFh
NDEtNjc1ODBkZjdlNDljL2E2NzA5ZjdmLTQyZGEtNDZmMy1hYTQxLTY3NTgwZGY3
ZTQ5Yy5jcmwwHwYDVR0jBBgwFoAUVMHSQhkR05VZvR6hOQlpO/k0SgQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hNjcwOWY3Zi00MmRhLTQ2ZjMtYWE0MS02NzU4
MGRmN2U0OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwF7MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUXDTKC4Z8VFbmlXFuRcZ0SpF58Q71F3J3UdzjI1B2rFBnJOGrotckU
+oVpUwBDMyfUxJhXC9LmiAKh8Wo9s2TXxQTk7qvcmUB8mem2N13rm1SBBH5PE6Xg
6RwCtDo+zZ6l92+Y9undOWV7lkbLYvIkDA9fG+pZw8fiH8YgZ804G+mK9d5yh2eC
BetoU3GMzZQszgFblQqnDwiN0Pt5UcO9TX7F9X3sgA+U9+k+9Z/rqKBLtV7EpKU8
o8w9te9L4oQFYNSbCXtIgI76F4a3zAJosuZnYcTmhCseqpIw3dL9pp3zM07Np1Wp
r7yjkpSqvsTM4hnSS6VnYhUCik4gv34=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:16 2026 by rpki-client