Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa
File:                     1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa (raw, json)
Hash identifier:          R3HNvP5vl9VsePeJLrRJt7Z1RaVGth4mLg29wDJeyUw=
Subject key identifier:   62:00:83:47:B5:E5:49:E5:87:32:01:D6:79:FD:E5:30:D4:04:1A:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E5AFDC80895FFFEF1380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        97.69.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e5:af:dc:80:89:5f:ff:ef:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=5f114d00-d087-4595-b180-0a55495043ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:6f:59:74:42:44:dc:bd:57:0b:ed:8f:b6:
                    28:aa:b4:e1:15:55:71:68:ae:41:26:63:a6:8d:28:
                    80:e2:8d:b2:20:7c:18:34:5d:f4:3b:fa:09:d0:fc:
                    ad:7e:64:73:ec:35:45:d7:31:00:04:9f:66:0c:31:
                    c4:71:65:24:48:76:4a:5c:46:c1:69:3f:ad:f6:cd:
                    92:33:a0:17:f3:17:25:3a:12:9b:4d:69:4b:db:7a:
                    25:3d:2f:38:7a:9a:8b:5c:f6:49:a5:77:ed:fc:1f:
                    02:2f:80:5f:e6:34:8a:9d:db:bc:cc:ba:3d:aa:04:
                    b5:07:87:38:c3:c3:7a:6d:7a:6c:b9:84:f4:9d:67:
                    bb:14:e5:ef:9b:b0:a1:f5:f6:c7:18:30:fc:91:69:
                    dd:7a:bd:d0:60:82:d3:f1:b1:f6:f0:96:77:ae:72:
                    52:84:e3:4a:0e:39:7f:7a:dd:96:d3:c1:9c:f1:08:
                    15:8b:80:48:5a:34:01:df:48:4a:7d:82:70:c1:8c:
                    3a:ef:cd:5e:28:c6:6d:b2:cb:92:65:c3:d7:5e:22:
                    2f:07:ab:49:ee:f2:4c:d0:b3:f4:dc:56:36:05:41:
                    94:83:ab:0b:6b:bc:df:0c:84:d5:3c:1d:4d:14:1e:
                    44:8a:00:d5:2d:21:1a:00:83:67:42:49:14:5b:39:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:00:83:47:B5:E5:49:E5:87:32:01:D6:79:FD:E5:30:D4:04:1A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:fb:05:03:16:79:d8:b6:6d:e9:bd:3b:ef:d2:b1:0d:7d:67:
         99:33:96:83:63:82:dc:fc:01:2f:1b:8b:7a:80:ad:1c:78:4b:
         b5:90:28:d4:5e:92:e8:34:6f:70:ea:5a:fa:5c:c0:71:f3:05:
         47:e2:98:b0:5a:40:26:58:99:d5:8b:db:97:6b:17:f0:f2:c3:
         54:fc:c6:7d:df:0a:ef:bc:6e:57:16:e8:90:2c:92:ba:c5:52:
         7c:39:9e:08:f3:1f:58:6f:b2:41:c2:fa:97:67:b7:cb:c9:30:
         29:ea:d1:a4:b8:8d:57:04:ff:b3:81:23:66:06:be:57:d5:b4:
         bb:70:ec:98:ac:17:5d:c5:cf:4e:c2:73:a3:7b:d4:3c:9e:3b:
         7c:f6:73:13:96:f1:75:b1:34:91:8d:d4:26:fb:0b:f5:ca:75:
         6d:5f:8d:17:85:00:99:76:b0:e7:c7:02:9f:db:00:ce:94:ea:
         50:44:db:2a:31:8a:bb:dd:14:d3:6f:3f:ca:12:ca:02:ae:85:
         d4:2e:71:37:29:a6:c7:89:f3:92:0b:5d:67:f4:c9:31:5d:a2:
         38:36:49:59:93:30:c6:93:79:c2:77:62:d4:2a:a4:3b:c0:71:
         f6:25:50:80:f7:db:b1:10:71:7a:bc:ff:f3:e4:82:c2:22:4c:
         f2:41:f8:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuWv3ICJX//vE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NWYxMTRkMDAtZDA4Ny00NTk1LWIxODAtMGE1NTQ5NTA0M2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKFvWXRCRNy9Vwvtj7YoqrThFVVxaK5BJmOm
jSiA4o2yIHwYNF30O/oJ0PytfmRz7DVF1zEABJ9mDDHEcWUkSHZKXEbBaT+t9s2S
M6AX8xclOhKbTWlL23olPS84epqLXPZJpXft/B8CL4Bf5jSKndu8zLo9qgS1B4c4
w8N6bXpsuYT0nWe7FOXvm7Ch9fbHGDD8kWnder3QYILT8bH28JZ3rnJShONKDjl/
et2W08Gc8QgVi4BIWjQB30hKfYJwwYw6781eKMZtssuSZcPXXiIvB6tJ7vJM0LP0
3FY2BUGUg6sLa7zfDITVPB1NFB5EigDVLSEaAINnQkkUWzngdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIAg0e15UnlhzIB1nn95TDUBBrlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMWMwZWNkYmYtZjFkZC0z
MjFiLWE2YzMtOTgyYmExYmNiNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUW7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACv7BQMWedi2bem9O+/SsQ19Z5kzloNjgtz8AS8bi3qArRx4S7WQKNRe
kug0b3DqWvpcwHHzBUfimLBaQCZYmdWL25drF/Dyw1T8xn3fCu+8blcW6JAskrrF
Unw5ngjzH1hvskHC+pdnt8vJMCnq0aS4jVcE/7OBI2YGvlfVtLtw7JisF13Fz07C
c6N71DyeO3z2cxOW8XWxNJGN1Cb7C/XKdW1fjReFAJl2sOfHAp/bAM6U6lBE2yox
irvdFNNvP8oSygKuhdQucTcppseJ85ILXWf0yTFdojg2SVmTMMaTecJ3YtQqpDvA
cfYlUID327EQcXq8//PkgsIiTPJB+ME=
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:22:09 2026 by rpki-client