Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
File:                     bb5807ed-8deb-3938-bc64-5cc7806d002d.roa (raw, json)
Hash identifier:          gPpIxORl06yLRw+ZLbMTCeBdlx164zJr7DlnxXLNi8E=
Subject key identifier:   54:20:98:6B:B2:39:70:D0:87:27:44:A7:03:5C:0F:7A:C9:6F:4A:8B
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584D80FFF2D538C4BA44D02CF180
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     3356
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f2:d5:38:c4:ba:44:d0:2c:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=9386bde8-8986-492f-9992-d44d08646bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:e3:10:4e:89:2e:0a:8f:15:4a:ae:8c:47:
                    e7:c2:26:74:51:55:7a:e8:44:c2:6e:70:91:03:78:
                    e9:32:ca:06:87:b6:85:0b:7e:3c:75:ce:c7:36:8c:
                    d7:e5:d3:26:3f:97:5d:60:fa:52:01:f2:45:db:12:
                    cf:d7:ac:28:5a:9b:d7:06:a5:9d:cd:10:4d:21:2a:
                    26:a4:d3:5a:3f:c6:0f:70:f9:ac:d5:c6:56:34:67:
                    3f:9b:e4:c3:eb:7e:d2:90:f9:15:93:b4:65:72:12:
                    01:5c:62:45:47:07:0a:51:d2:b9:92:e2:1b:b7:09:
                    2e:a2:92:4c:49:1b:7a:63:3e:c9:54:25:f1:d4:0f:
                    c9:48:77:ea:8b:27:9c:49:bf:02:aa:cc:70:3a:c9:
                    a9:cf:8e:b8:1e:fb:9c:66:a2:97:78:cc:5d:a5:45:
                    6d:63:ab:d5:09:66:c8:5b:b6:b7:e8:d0:70:ca:42:
                    57:cb:31:3f:87:e0:46:69:c0:bb:ca:43:d4:a0:e1:
                    74:ba:d4:33:01:df:bb:22:56:51:98:59:a8:cb:d7:
                    ba:aa:fd:cc:56:80:b1:7a:66:b1:8f:46:b4:3e:de:
                    f2:ed:b1:6c:19:f8:dd:88:14:ef:bc:13:3b:fa:d7:
                    69:a6:b2:3e:d9:ea:88:b2:a8:d6:c6:23:cd:5f:89:
                    10:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:20:98:6B:B2:39:70:D0:87:27:44:A7:03:5C:0F:7A:C9:6F:4A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:70:ab:1b:c8:61:87:6e:33:d2:e8:b8:e7:21:e2:29:55:dc:
         e1:f6:be:fd:45:ec:2d:60:17:98:46:9e:a5:14:e4:31:dd:32:
         49:c1:08:f9:e5:8d:b2:6f:9b:3b:98:f6:84:a4:c0:31:b4:e8:
         40:a0:6a:b9:f6:f2:db:3e:27:60:ff:78:0e:71:f5:99:9f:b2:
         eb:b8:a7:b8:77:9e:75:ec:db:95:b5:f9:14:f4:07:ea:b7:ed:
         d0:f3:5d:57:69:fc:96:f2:0a:2c:72:88:f0:27:2d:bb:9d:a4:
         17:f6:a6:15:87:0a:72:34:90:80:fc:c7:d9:95:ad:1a:db:73:
         24:39:f2:83:6e:3f:65:6a:2c:9b:30:0e:1e:a9:62:f7:ee:f7:
         a5:f2:bc:d5:82:95:4d:59:c1:e4:d8:f1:97:8f:06:12:9d:8c:
         70:b3:62:f1:24:9e:9c:9e:a3:d3:89:f4:d7:9e:4b:aa:1c:d4:
         6e:55:bc:70:8d:cc:38:38:ec:e6:00:7d:60:1f:5d:a6:08:b0:
         ed:65:5b:c8:d4:c4:bb:71:5a:6b:e5:79:d2:63:e7:b9:41:df:
         7c:d6:b6:5f:96:6d:35:65:43:6a:8c:40:7f:c3:5a:e7:2f:13:
         67:79:b2:f4:d8:6b:88:6d:f3:de:0b:bc:c3:f5:86:37:91:83:
         af:60:93:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//LVOMS6RNAs8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3
N2YxMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
OTM4NmJkZTgtODk4Ni00OTJmLTk5OTItZDQ0ZDA4NjQ2YmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTXjEE6JLgqPFUqujEfnwiZ0UVV66ETCbnCR
A3jpMsoGh7aFC348dc7HNozX5dMmP5ddYPpSAfJF2xLP16woWpvXBqWdzRBNISom
pNNaP8YPcPms1cZWNGc/m+TD637SkPkVk7RlchIBXGJFRwcKUdK5kuIbtwkuopJM
SRt6Yz7JVCXx1A/JSHfqiyecSb8CqsxwOsmpz464HvucZqKXeMxdpUVtY6vVCWbI
W7a36NBwykJXyzE/h+BGacC7ykPUoOF0utQzAd+7IlZRmFmoy9e6qv3MVoCxemax
j0a0Pt7y7bFsGfjdiBTvvBM7+tdpprI+2eqIsqjWxiPNX4kQnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQgmGuyOXDQhydEpwNcD3rJb0qLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1
MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYmI1ODA3ZWQtOGRlYi0z
OTM4LWJjNjQtNWNjNzgwNmQwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl
N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1
NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0
ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhwqxvIYYduM9LouOch4ilV3OH2vv1F7C1gF5hGnqUU5DHdMknBCPnl
jbJvmzuY9oSkwDG06ECgarn28ts+J2D/eA5x9Zmfsuu4p7h3nnXs25W1+RT0B+q3
7dDzXVdp/JbyCixyiPAnLbudpBf2phWHCnI0kID8x9mVrRrbcyQ58oNuP2VqLJsw
Dh6pYvfu96XyvNWClU1ZweTY8ZePBhKdjHCzYvEknpyeo9OJ9NeeS6oc1G5VvHCN
zDg47OYAfWAfXaYIsO1lW8jUxLtxWmvledJj57lB33zWtl+WbTVlQ2qMQH/DWucv
E2d5svTYa4ht894LvMP1hjeRg69gk88=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:14 2026 by rpki-client