Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/f9e6c530-846a-3e06-812c-206bcca4499e.roa
File:                     f9e6c530-846a-3e06-812c-206bcca4499e.roa (raw, json)
Hash identifier:          ZiCobYMU+aJWSEdSVx4dNzMa9Ah4u2Cikli0ThVeQ8o=
Subject key identifier:   2D:71:9B:31:50:BF:54:63:FA:6F:3E:DC:C5:5F:91:6F:A2:9B:07:BB
Certificate issuer:       /CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1
Certificate serial:       010D0C9F4328584CCA41D3410B34D14C47036C00
Authority key identifier: F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/f9e6c530-846a-3e06-812c-206bcca4499e.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     393506
IP address blocks:        192.31.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:d3:41:0b:34:d1:4c:47:03:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa7171b0-4847-462e-b732-1c7ed6b3b0b1
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=20c051e3-fa08-41b5-b1fc-e6e56e139963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:7e:be:23:6d:20:cf:6d:06:40:a2:21:74:
                    d5:f9:73:1b:45:bf:ed:3d:b4:29:65:bb:3f:36:bb:
                    1c:55:f2:64:7f:0a:ce:27:40:ce:22:f7:a1:89:97:
                    f8:b8:77:fc:6b:9d:63:c8:b4:2c:7c:82:2d:69:ab:
                    a8:23:b1:2b:3f:e1:2a:f3:dd:16:6d:75:8e:51:e0:
                    93:5b:6a:34:e1:23:b9:2d:8d:1f:e5:33:2e:16:b8:
                    2f:80:4c:8d:c9:97:bb:c1:97:88:86:2b:33:a4:ad:
                    82:9f:48:8a:7d:80:02:63:88:87:0f:b4:31:2c:72:
                    2e:a5:54:80:f6:df:aa:12:f2:06:25:47:c8:d6:34:
                    c1:0f:99:68:2b:34:b2:f2:1c:6d:03:0a:30:c0:2e:
                    48:83:21:1e:4f:94:d2:f0:d3:e9:f7:22:d5:1d:9d:
                    cf:fa:56:f4:28:7a:78:a8:8a:d2:07:da:cf:5d:78:
                    26:e6:86:9b:19:e3:72:86:4e:26:93:46:9c:9b:ef:
                    af:f4:86:08:b1:69:1e:23:87:db:3b:ac:50:f8:25:
                    9d:32:5d:f3:b7:73:be:93:7c:d9:4c:d3:d8:13:3f:
                    0d:83:1e:08:a2:12:04:0a:6e:58:9d:87:6a:46:04:
                    d1:ab:df:17:47:bf:74:5b:b1:4c:c4:86:bc:9e:57:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:71:9B:31:50:BF:54:63:FA:6F:3E:DC:C5:5F:91:6F:A2:9B:07:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/f9e6c530-846a-3e06-812c-206bcca4499e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.crl

            X509v3 Authority Key Identifier:
                keyid:F9:0C:DB:DA:38:8A:15:51:9D:4E:27:95:05:A6:CB:01:1D:75:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aa7171b0-4847-462e-b732-1c7ed6b3b0b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bf:c4:9d:9e:3d:b9:58:e9:c5:26:4c:e9:ce:c2:68:67:95:
         8c:5c:c4:3b:d3:21:67:16:58:74:f0:f7:0a:55:8e:9d:46:25:
         6b:51:8e:f2:d8:06:c8:a1:ee:ff:0d:7a:3e:2c:39:fa:c5:59:
         04:54:3c:f3:76:94:91:92:bd:6b:f1:82:61:22:44:13:a2:a1:
         d2:e0:35:9f:72:76:a9:1d:4b:bf:f4:81:d2:cd:69:88:5e:96:
         e2:a1:d7:95:ca:ff:f4:98:71:2a:2b:1a:92:50:e9:04:0f:f9:
         7d:0e:12:da:8c:9f:76:87:50:9a:fe:69:91:65:9f:eb:1c:bb:
         6e:bd:6b:60:f3:ea:bd:ea:2c:ea:ce:0c:ac:e3:5f:9b:c1:ca:
         8e:7f:60:69:5a:c0:55:ac:99:aa:d4:4b:b9:7d:59:55:fb:77:
         0f:c3:a7:6d:f7:6e:46:69:b1:35:b2:81:a8:db:a8:8d:42:3d:
         e5:59:1f:c4:b2:8e:c2:13:52:56:33:ca:44:4c:2f:33:1f:f6:
         e5:c1:e3:47:28:03:49:ec:9c:52:2f:a7:69:ee:35:74:3a:06:
         a9:d7:be:91:37:e6:fa:d0:29:92:61:81:2b:96:71:3f:ab:af:
         9c:42:4c:dd:01:23:61:79:64:3c:ad:dd:f2:d9:59:9d:62:39:
         b7:d7:c5:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzKQdNBCzTRTEcDbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE3MTcxYjAtNDg0Ny00NjJlLWI3MzItMWM3ZWQ2YjNi
MGIxMB4XDTI2MDIwODAyMDAzMloXDTI2MDUwOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjBjMDUxZTMtZmEwOC00MWI1LWIxZmMtZTZlNTZlMTM5OTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFB+viNtIM9tBkCiIXTV+XMbRb/tPbQpZbs/
NrscVfJkfwrOJ0DOIvehiZf4uHf8a51jyLQsfIItaauoI7ErP+Eq890WbXWOUeCT
W2o04SO5LY0f5TMuFrgvgEyNyZe7wZeIhiszpK2Cn0iKfYACY4iHD7QxLHIupVSA
9t+qEvIGJUfI1jTBD5loKzSy8hxtAwowwC5IgyEeT5TS8NPp9yLVHZ3P+lb0KHp4
qIrSB9rPXXgm5oabGeNyhk4mk0acm++v9IYIsWkeI4fbO6xQ+CWdMl3zt3O+k3zZ
TNPYEz8Ngx4IohIECm5YnYdqRgTRq98XR790W7FMxIa8nlc9WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1xmzFQv1Rj+m8+3MVfkW+imwe7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYTcx
NzFiMC00ODQ3LTQ2MmUtYjczMi0xYzdlZDZiM2IwYjEvZjllNmM1MzAtODQ2YS0z
ZTA2LTgxMmMtMjA2YmNjYTQ0OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWE3MTcxYjAtNDg0Ny00NjJlLWI3
MzItMWM3ZWQ2YjNiMGIxL2FhNzE3MWIwLTQ4NDctNDYyZS1iNzMyLTFjN2VkNmIz
YjBiMS5jcmwwHwYDVR0jBBgwFoAU+Qzb2jiKFVGdTieVBabLAR11op8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hYTcxNzFiMC00ODQ3LTQ2MmUtYjczMi0xYzdl
ZDZiM2IwYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB+yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEC/xJ2ePblY6cUmTOnOwmhnlYxcxDvTIWcWWHTw9wpVjp1GJWtRjvLY
Bsih7v8Nej4sOfrFWQRUPPN2lJGSvWvxgmEiRBOiodLgNZ9ydqkdS7/0gdLNaYhe
luKh15XK//SYcSorGpJQ6QQP+X0OEtqMn3aHUJr+aZFln+scu269a2Dz6r3qLOrO
DKzjX5vByo5/YGlawFWsmarUS7l9WVX7dw/Dp233bkZpsTWygajbqI1CPeVZH8Sy
jsITUlYzykRMLzMf9uXB40coA0nsnFIvp2nuNXQ6BqnXvpE35vrQKZJhgSuWcT+r
r5xCTN0BI2F5ZDyt3fLZWZ1iObfXxZk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:27:07 2026 by rpki-client