Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa
File:                     3a1ad304-cefa-344b-8e96-10634b0caf7f.roa (raw, json)
Hash identifier:          pbdMuVGdqiP9b1J8+Wq3lxqgZt6068Y0L+DGOXc5ImE=
Subject key identifier:   A6:A0:9B:0E:CF:6B:40:6F:05:BB:7D:6D:FC:FF:AD:23:5C:FA:48:6D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F698D82F696498E452990F7C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     834
IP address blocks:        173.211.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:82:f6:96:49:8e:45:29:90:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=9fe13a6d-12cd-4ac8-ad2f-08137d44cbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:f7:e7:d1:c7:ae:a4:0d:c8:46:5a:0f:a1:
                    11:fb:aa:15:7f:04:15:a5:1a:07:00:da:48:3c:b1:
                    d7:e6:fa:76:76:c9:c3:3f:4c:21:ff:e5:31:ce:d5:
                    4a:42:73:fe:10:ea:83:a0:ab:9c:c4:3b:84:5a:3a:
                    65:c2:e8:c0:33:52:6b:03:0e:4c:97:32:22:1f:49:
                    c9:c8:43:dc:18:09:07:3e:79:e8:53:fe:54:17:d4:
                    5f:87:87:ee:7f:48:11:5d:67:16:c0:37:63:30:f7:
                    9b:08:a6:01:9f:e8:5f:e7:4e:5d:44:0c:ca:52:29:
                    f8:7f:a5:35:b0:56:94:8c:53:99:89:57:ad:ee:51:
                    84:83:1e:83:84:fb:8d:77:f7:af:75:c2:c9:f1:d0:
                    29:e1:24:c9:8f:f1:18:6f:37:55:c9:63:46:ae:0b:
                    6a:41:52:28:ec:9f:f3:d5:4f:a3:2b:8a:bc:ca:74:
                    84:25:c7:ab:ef:f0:8d:8f:e8:34:02:f2:ea:53:8d:
                    5a:22:71:00:5d:f5:95:c0:d8:29:31:59:89:51:2a:
                    db:b5:0e:e1:33:39:98:4d:64:f5:35:72:04:30:c8:
                    10:92:e6:d1:7f:91:86:cc:9b:f2:a4:c8:96:cb:18:
                    1a:37:1c:03:45:3c:69:63:e5:23:2f:60:a9:31:af:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:9B:0E:CF:6B:40:6F:05:BB:7D:6D:FC:FF:AD:23:5C:FA:48:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:b7:11:34:9a:15:50:79:56:48:0c:b4:5c:13:f0:13:fe:
         bd:b3:3b:be:ef:09:11:77:14:92:5f:15:81:8a:ce:21:c2:5f:
         78:52:17:01:f1:f8:b3:fb:51:28:b3:c0:1b:d8:38:20:64:f4:
         70:d5:d2:6f:05:5b:27:8f:95:04:72:53:9e:34:e2:9d:3e:54:
         34:b9:19:e2:38:44:16:9a:cf:52:11:12:52:54:0e:47:48:48:
         b8:8d:ba:7f:2c:3b:c9:c2:50:7f:aa:33:5c:ff:78:ce:97:33:
         f3:52:ac:e9:75:3f:51:66:e2:1f:d0:ce:f7:f8:45:c6:d7:30:
         8b:ea:5a:2f:ee:11:88:3d:41:e6:80:47:9c:8e:bf:2d:85:6b:
         1d:7f:f0:5a:37:1f:09:ab:d6:73:93:c2:be:a5:2f:fb:a9:ea:
         e8:c1:e1:cc:ef:86:2d:79:0f:e4:a2:f6:80:e5:7f:a0:4d:5e:
         8d:79:f5:83:f6:7b:84:96:67:e7:53:98:22:f0:a4:10:f7:e6:
         37:5e:1d:20:19:d7:bf:33:d3:34:7b:51:35:bd:5f:51:4c:0c:
         f0:7d:48:61:67:cf:5f:30:67:e5:97:c4:53:f5:6f:48:b5:ac:
         66:4d:26:54:ed:54:84:30:a8:0c:40:87:2a:64:0d:7b:33:25:
         6d:13:ec:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYL2lkmORSmQ98AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
OWZlMTNhNmQtMTJjZC00YWM4LWFkMmYtMDgxMzdkNDRjYmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAief359HHrqQNyEZaD6ER+6oVfwQVpRoHANpI
PLHX5vp2dsnDP0wh/+UxztVKQnP+EOqDoKucxDuEWjplwujAM1JrAw5MlzIiH0nJ
yEPcGAkHPnnoU/5UF9Rfh4fuf0gRXWcWwDdjMPebCKYBn+hf505dRAzKUin4f6U1
sFaUjFOZiVet7lGEgx6DhPuNd/evdcLJ8dAp4STJj/EYbzdVyWNGrgtqQVIo7J/z
1U+jK4q8ynSEJcer7/CNj+g0AvLqU41aInEAXfWVwNgpMVmJUSrbtQ7hMzmYTWT1
NXIEMMgQkubRf5GGzJvypMiWyxgaNxwDRTxpY+UjL2CpMa9S6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKagmw7Pa0BvBbt9bfz/rSNc+khtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2ExYWQzMDQtY2VmYS0z
NDRiLThlOTYtMTA2MzRiMGNhZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdMvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALNytxE0mhVQeVZIDLRcE/AT/r2zO77vCRF3FJJfFYGKziHCX3hSFwHx
+LP7USizwBvYOCBk9HDV0m8FWyePlQRyU5404p0+VDS5GeI4RBaaz1IRElJUDkdI
SLiNun8sO8nCUH+qM1z/eM6XM/NSrOl1P1Fm4h/Qzvf4RcbXMIvqWi/uEYg9QeaA
R5yOvy2Fax1/8Fo3Hwmr1nOTwr6lL/up6ujB4czvhi15D+Si9oDlf6BNXo159YP2
e4SWZ+dTmCLwpBD35jdeHSAZ178z0zR7UTW9X1FMDPB9SGFnz18wZ+WXxFP1b0i1
rGZNJlTtVIQwqAxAhypkDXszJW0T7D0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 15:27:34 2026 by rpki-client