Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa
File:                     685e5fb0-74b7-3641-bd89-1132b33d3635.roa (raw, json)
Hash identifier:          lu6HyUk0uAl/KSRJtVsWiaq2vhMu/HGra+TYrwFa/Rg=
Subject key identifier:   D3:9F:4E:C3:76:88:F2:0E:12:F8:D6:51:06:27:02:1A:C3:D8:11:E4
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584D83CAB484C00A3259F55BA500
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     17055
IP address blocks:        204.99.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b4:84:c0:0a:32:59:f5:5b:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=bd98c0aa-67fe-46c2-8c2e-c7b1e1de577d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:41:74:55:e6:9d:b0:5b:54:ee:a5:21:7f:
                    99:09:b3:e0:09:9b:f1:70:c3:47:83:99:96:3c:ce:
                    cd:6b:d3:d9:00:a7:5a:0d:c1:8d:7a:bd:a5:01:7e:
                    43:ec:2c:47:88:e1:78:e9:c0:1f:58:61:ed:a9:00:
                    08:37:70:90:63:3f:2d:0d:f9:fe:94:e0:41:54:fb:
                    6e:0d:f3:2f:6c:c9:86:29:d3:46:44:29:e2:d8:da:
                    5f:7d:dd:9b:d6:d3:64:e3:50:03:e0:58:aa:6b:a3:
                    d0:06:f0:57:19:a7:f3:38:d4:29:b1:5c:d5:51:1a:
                    58:dd:b4:b5:4b:07:82:9d:51:5e:30:5c:c4:30:78:
                    29:39:ee:f7:1e:5d:05:3b:5f:87:02:2d:a8:e3:82:
                    90:32:ef:ad:15:9a:7e:24:de:ed:43:14:fd:64:2e:
                    8e:b1:e8:7c:9f:cd:82:93:cf:1a:81:3f:cb:67:65:
                    41:84:69:5d:41:6b:88:ef:9c:4b:52:07:0e:a9:d8:
                    db:e0:8a:66:28:7a:10:66:45:50:cf:be:46:c0:9c:
                    fb:56:68:45:a8:47:df:a0:8e:dd:36:ed:5a:a9:2e:
                    f7:f1:92:59:64:63:fb:aa:76:5f:9c:26:2a:f5:4d:
                    fb:b7:cf:50:04:6a:9f:8d:f8:1e:2e:ce:2f:f7:80:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:4E:C3:76:88:F2:0E:12:F8:D6:51:06:27:02:1A:C3:D8:11:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.99.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:4e:ba:92:8b:2a:ca:00:f9:ef:00:a4:89:dd:75:e2:63:
         60:c1:f3:18:9f:8c:68:8b:be:c3:e9:4d:24:3d:dd:67:9c:89:
         78:9a:d7:df:b8:40:64:da:bd:fd:e9:d4:34:ca:ea:dd:b2:52:
         80:e5:93:fd:21:09:8b:21:01:c7:73:0a:10:9c:3d:1b:9b:59:
         50:d5:dd:11:ef:76:f2:16:76:5c:23:10:28:22:78:08:e8:6c:
         3f:64:c7:0e:93:ca:37:71:29:f0:3c:d4:89:ac:13:10:f4:89:
         3e:ec:29:91:ff:11:7d:35:32:98:ac:20:a1:0f:68:6e:dc:b9:
         09:2a:a5:d8:18:07:3f:58:bc:91:f5:2c:b2:d9:a0:ba:cd:66:
         78:a7:7f:3b:bf:7e:07:d9:eb:1c:ac:bc:9c:11:2f:a8:32:55:
         de:54:24:89:4d:6f:50:88:79:01:18:a2:6e:9b:1e:cb:e3:c1:
         26:0c:92:ca:0c:16:2e:7b:f7:4c:3a:10:53:17:98:81:9c:0f:
         1c:d0:a6:16:75:50:f1:91:59:78:3c:d9:f9:da:10:7a:b6:42:
         61:ba:01:2e:9e:9b:46:37:a7:89:6d:1c:7a:a9:2d:be:62:97:
         b7:88:8b:c7:41:49:3c:6b:fd:17:65:db:c7:f9:9a:39:b0:39:
         53:94:07:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyrSEwAoyWfVbpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx
NTNmMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
YmQ5OGMwYWEtNjdmZS00NmMyLThjMmUtYzdiMWUxZGU1NzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG9BdFXmnbBbVO6lIX+ZCbPgCZvxcMNHg5mW
PM7Na9PZAKdaDcGNer2lAX5D7CxHiOF46cAfWGHtqQAIN3CQYz8tDfn+lOBBVPtu
DfMvbMmGKdNGRCni2Npffd2b1tNk41AD4Fiqa6PQBvBXGafzONQpsVzVURpY3bS1
SweCnVFeMFzEMHgpOe73Hl0FO1+HAi2o44KQMu+tFZp+JN7tQxT9ZC6Oseh8n82C
k88agT/LZ2VBhGldQWuI75xLUgcOqdjb4IpmKHoQZkVQz75GwJz7VmhFqEffoI7d
Nu1aqS738ZJZZGP7qnZfnCYq9U37t89QBGqfjfgeLs4v94DqCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOfTsN2iPIOEvjWUQYnAhrD2BHkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0
OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvNjg1ZTVmYjAtNzRiNy0z
NjQxLWJkODktMTEzMmIzM2QzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk
YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh
MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4
YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzGOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMKTrqSiyrKAPnvAKSJ3XXiY2DB8xifjGiLvsPpTSQ93WeciXia19+4
QGTavf3p1DTK6t2yUoDlk/0hCYshAcdzChCcPRubWVDV3RHvdvIWdlwjECgieAjo
bD9kxw6TyjdxKfA81ImsExD0iT7sKZH/EX01MpisIKEPaG7cuQkqpdgYBz9YvJH1
LLLZoLrNZninfzu/fgfZ6xysvJwRL6gyVd5UJIlNb1CIeQEYom6bHsvjwSYMksoM
Fi5790w6EFMXmIGcDxzQphZ1UPGRWXg82fnaEHq2QmG6AS6em0Y3p4ltHHqpLb5i
l7eIi8dBSTxr/Rdl28f5mjmwOVOUBwA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:30 2026 by rpki-client