Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/94e52aa4-1dee-34d1-a93a-df8f50883f45.roa
File:                     94e52aa4-1dee-34d1-a93a-df8f50883f45.roa (raw, json)
Hash identifier:          G2/5X7H/coq38+w9zatrXn7alcjMcJATNGim+oEr104=
Subject key identifier:   46:30:3A:D8:E2:A2:84:B7:DD:1A:52:BF:56:DC:AB:24:16:84:FD:EB
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584E147ED46FBF2C6A8505209080
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/94e52aa4-1dee-34d1-a93a-df8f50883f45.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     30456
IP address blocks:        216.39.242.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:d4:6f:bf:2c:6a:85:05:20:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=7c0eda44-788a-4e47-b7de-503bae01d75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:96:32:66:a3:45:53:db:0d:70:88:3b:be:
                    05:64:a3:24:6c:27:87:7a:70:1d:d6:e5:24:1a:f0:
                    b4:5e:f6:81:b1:1c:bc:6d:2d:d1:25:4e:e2:2a:cf:
                    ba:4e:cc:e0:ab:42:1a:fd:2e:6d:e1:bc:f4:3e:ec:
                    71:a1:09:e9:08:cd:ed:4c:b7:28:b7:94:dc:ff:94:
                    58:c3:af:37:6e:d5:6b:66:28:49:ca:df:c7:e4:54:
                    5c:12:2e:07:ac:b4:db:fc:06:8d:f7:e8:ba:b3:17:
                    ff:6c:18:a9:51:fa:ae:88:b5:7c:8f:6a:72:4a:ea:
                    ca:df:0f:90:05:75:1e:f6:13:39:05:b3:f8:17:ce:
                    d5:4b:b3:23:8c:f8:24:2f:9c:e2:6b:d0:d4:d0:ce:
                    43:f2:22:d2:77:15:ae:f1:79:4c:dc:39:ac:44:e7:
                    a6:94:82:fe:db:75:9c:a3:f4:78:a4:ac:fb:f9:3c:
                    b4:5d:e2:e3:30:df:42:40:45:18:55:84:69:7c:24:
                    c3:63:90:45:5b:f2:b2:e7:4b:27:4f:b6:04:b7:5c:
                    f8:51:d0:04:f1:c0:49:eb:ed:c3:bc:5e:ff:04:96:
                    d9:bf:e4:1d:37:9f:71:98:a1:d5:2c:9e:86:69:89:
                    bf:38:83:8b:1f:f7:29:65:cf:6e:68:21:96:dd:76:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:30:3A:D8:E2:A2:84:B7:DD:1A:52:BF:56:DC:AB:24:16:84:FD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/94e52aa4-1dee-34d1-a93a-df8f50883f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5b:fc:dc:d6:61:fb:39:e1:4c:73:60:82:30:e0:cd:37:0d:
         f5:78:bf:3e:8b:38:f6:fa:14:13:c6:29:57:d0:aa:7a:c0:51:
         92:3a:af:81:ff:5f:47:40:d2:4a:a2:91:22:df:12:e4:d1:a0:
         d3:fc:34:fd:71:d5:c7:87:4a:41:a5:43:a4:05:94:aa:02:45:
         13:42:61:d4:54:de:d9:38:eb:c2:9b:cb:16:f7:7b:e6:67:4b:
         67:18:b9:65:5a:6a:a3:51:a1:1d:4f:42:ac:2b:f9:f2:9c:07:
         64:db:0f:83:ab:97:84:5e:bf:db:ba:d2:63:05:78:5b:71:9f:
         c0:79:a5:f1:e7:e7:83:aa:53:6f:6e:3c:2a:89:97:2e:85:20:
         fe:28:c6:4d:46:51:d3:24:bd:0b:ea:6b:8c:83:16:56:33:38:
         87:b0:82:49:66:4a:10:1c:64:f5:70:ae:b1:ec:c0:31:8d:c2:
         06:9c:3e:10:b3:1a:ca:8d:6e:51:84:be:bf:4c:e2:bf:bc:6b:
         ce:ee:26:c6:4e:fe:76:ae:61:b1:5d:fb:e2:21:e4:34:3d:59:
         a5:56:28:5c:71:aa:51:aa:77:3c:a8:87:57:b3:4b:6b:c5:85:
         9d:96:42:a8:5e:0f:f0:f4:33:5b:29:7c:06:6a:f6:b3:2d:6a:
         7e:28:89:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftRvvyxqhQUgkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
N2MwZWRhNDQtNzg4YS00ZTQ3LWI3ZGUtNTAzYmFlMDFkNzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx2WMmajRVPbDXCIO74FZKMkbCeHenAd1uUk
GvC0XvaBsRy8bS3RJU7iKs+6Tszgq0Ia/S5t4bz0PuxxoQnpCM3tTLcot5Tc/5RY
w683btVrZihJyt/H5FRcEi4HrLTb/AaN9+i6sxf/bBipUfquiLV8j2pySurK3w+Q
BXUe9hM5BbP4F87VS7MjjPgkL5zia9DU0M5D8iLSdxWu8XlM3DmsROemlIL+23Wc
o/R4pKz7+Ty0XeLjMN9CQEUYVYRpfCTDY5BFW/Ky50snT7YEt1z4UdAE8cBJ6+3D
vF7/BJbZv+QdN59xmKHVLJ6GaYm/OIOLH/cpZc9uaCGW3XaZLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEYwOtjiooS33RpSv1bcqyQWhP3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvOTRlNTJhYTQtMWRlZS0z
NGQxLWE5M2EtZGY4ZjUwODgzZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2CfyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJb/NzWYfs54UxzYIIw4M03DfV4vz6LOPb6FBPGKVfQqnrAUZI6r4H/
X0dA0kqikSLfEuTRoNP8NP1x1ceHSkGlQ6QFlKoCRRNCYdRU3tk468Kbyxb3e+Zn
S2cYuWVaaqNRoR1PQqwr+fKcB2TbD4Orl4Rev9u60mMFeFtxn8B5pfHn54OqU29u
PCqJly6FIP4oxk1GUdMkvQvqa4yDFlYzOIewgklmShAcZPVwrrHswDGNwgacPhCz
GsqNblGEvr9M4r+8a87uJsZO/nauYbFd++Ih5DQ9WaVWKFxxqlGqdzyoh1ezS2vF
hZ2WQqheD/D0M1spfAZq9rMtan4oiek=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:38 2026 by rpki-client