Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa
File:                     a3942e48-3cb7-3034-9c5b-e50d782b704c.roa (raw, json)
Hash identifier:          HZbCtHBXM1QT2DdJ9ifPTtkEY5YdJOmzyqaH4Jokf8k=
Subject key identifier:   F9:FB:24:78:6E:2F:E9:5F:F0:0A:A7:9B:9D:9C:74:82:49:79:4C:69
Certificate issuer:       /CN=647216b7-a938-45d2-8264-7d448a4eaad9
Certificate serial:       010D0C9F4328584F49876F06A8366C41E7B98F40
Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398143
IP address blocks:        204.187.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:6f:06:a8:36:6c:41:e7:b9:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0ae14d5d-deb4-4bb6-b197-d6ca5759bec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:bb:7c:7d:84:54:3d:ef:b9:b7:94:c0:d6:
                    fa:46:59:1b:b0:d2:7d:af:6b:ea:74:43:ec:2d:a6:
                    24:cd:60:14:14:92:96:b1:5e:91:73:23:94:1f:9d:
                    78:81:c3:39:41:26:bf:02:2e:d4:6b:e3:db:fa:a6:
                    b1:cc:24:db:df:93:bd:da:1f:03:b6:e1:d0:5e:ef:
                    3a:e3:1d:04:5a:07:5c:4c:a9:21:4f:94:87:7e:69:
                    ec:de:76:3d:ec:4f:87:77:48:1d:9f:1f:c5:60:45:
                    d1:37:16:3c:ea:d9:84:fa:7d:11:db:94:b2:1f:d8:
                    04:58:0d:8e:c6:69:60:65:6d:e9:7e:0d:09:15:59:
                    db:a0:1c:66:25:fe:9f:6b:37:f1:2f:bf:53:c1:bd:
                    9e:29:2d:f7:72:d0:ac:23:7e:50:b9:67:98:c6:07:
                    0a:5c:05:97:5b:45:99:f9:68:04:c2:50:12:20:5f:
                    3a:a0:c5:7b:dd:bc:4d:35:d8:49:55:e2:68:63:41:
                    76:b6:b1:92:5f:0a:71:7c:3c:d5:2b:33:f7:a1:91:
                    86:4c:bf:b0:9d:6e:65:ea:ef:f4:58:1a:cc:57:74:
                    3c:f4:cc:25:07:10:8f:35:29:1f:f6:56:f8:03:9f:
                    3f:b7:bb:62:90:4d:f1:23:e7:f9:cd:32:ea:65:c5:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:24:78:6E:2F:E9:5F:F0:0A:A7:9B:9D:9C:74:82:49:79:4C:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl

            X509v3 Authority Key Identifier:
                keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.187.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:91:d2:2d:77:e3:16:48:d6:e5:fb:92:77:21:02:73:1f:0a:
         19:24:aa:b0:56:29:ef:83:21:a8:cc:f6:c4:37:b7:fa:51:3d:
         95:a8:f2:cf:ab:d0:9f:c4:f9:5c:30:94:33:64:f2:49:1a:1c:
         37:3a:ce:8d:13:bb:44:95:19:a7:f3:ee:f9:4c:a9:b6:92:a9:
         20:13:74:a6:f7:f8:5f:b2:21:df:31:d6:50:10:66:c8:3f:5b:
         a5:8d:1b:af:dd:e1:44:6e:9a:39:60:7d:32:aa:1e:3a:81:53:
         09:f5:71:de:c8:66:6a:6d:b5:d2:b5:ae:b0:3e:a8:b9:75:10:
         b5:84:37:19:3b:fb:76:07:59:a9:68:d7:2a:9f:8f:85:9e:4b:
         a5:c5:63:9e:be:11:23:ce:10:1c:60:d3:14:ca:ae:e7:09:9f:
         19:6a:77:6c:78:5d:75:3d:79:6e:02:3a:c2:7d:89:76:75:6b:
         e1:65:ff:2d:29:6d:d6:1e:77:ed:26:e1:5b:12:c8:a4:dd:a0:
         f5:66:9c:9c:00:70:20:12:85:10:da:9c:7a:46:e3:ed:06:6a:
         7a:72:96:f9:64:09:07:21:94:d7:64:69:43:04:a5:8d:eb:79:
         81:50:6e:d8:f0:d3:bb:aa:ba:43:57:e5:95:ba:8e:60:ec:4e:
         e0:6c:22:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh28GqDZsQee5j0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh
YWQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGFlMTRkNWQtZGViNC00YmI2LWIxOTctZDZjYTU3NTliZWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAu7fH2EVD3vubeUwNb6RlkbsNJ9r2vqdEPs
LaYkzWAUFJKWsV6RcyOUH514gcM5QSa/Ai7Ua+Pb+qaxzCTb35O92h8DtuHQXu86
4x0EWgdcTKkhT5SHfmns3nY97E+Hd0gdnx/FYEXRNxY86tmE+n0R25SyH9gEWA2O
xmlgZW3pfg0JFVnboBxmJf6fazfxL79Twb2eKS33ctCsI35QuWeYxgcKXAWXW0WZ
+WgEwlASIF86oMV73bxNNdhJVeJoY0F2trGSXwpxfDzVKzP3oZGGTL+wnW5l6u/0
WBrMV3Q89MwlBxCPNSkf9lb4A58/t7tikE3xI+f5zTLqZcVHlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn7JHhuL+lf8Aqnm52cdIJJeUxpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy
MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYTM5NDJlNDgtM2NiNy0z
MDM0LTljNWItZTUwZDc4MmI3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy
NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl
YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0
OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLteMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2R0i134xZI1uX7knchAnMfChkkqrBWKe+DIajM9sQ3t/pRPZWo8s+r
0J/E+VwwlDNk8kkaHDc6zo0Tu0SVGafz7vlMqbaSqSATdKb3+F+yId8x1lAQZsg/
W6WNG6/d4URumjlgfTKqHjqBUwn1cd7IZmpttdK1rrA+qLl1ELWENxk7+3YHWalo
1yqfj4WeS6XFY56+ESPOEBxg0xTKrucJnxlqd2x4XXU9eW4COsJ9iXZ1a+Fl/y0p
bdYed+0m4VsSyKTdoPVmnJwAcCAShRDanHpG4+0GanpylvlkCQchlNdkaUMEpY3r
eYFQbtjw07uqukNX5ZW6jmDsTuBsIsg=
-----END CERTIFICATE-----
Generated at Tue Sep 29 06:12:22 2026 by rpki-client