Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d4e821ee-44c8-3559-bbc5-7f46d0fc9f8f.roa
File:                     d4e821ee-44c8-3559-bbc5-7f46d0fc9f8f.roa (raw, json)
Hash identifier:          aTEqt0RgIYWtn4kOGGY0OU+EY1z0zYcEN9sKx7GFp8M=
Subject key identifier:   DF:53:2C:B4:B6:E9:90:9B:55:3D:B3:A3:CE:85:D5:27:43:B2:FB:50
Certificate issuer:       /CN=d7510e93-774e-4bdb-a8e4-63e59fb8c1c0
Certificate serial:       010D0C9F4328584F4972E6E3E389B04BF5764400
Authority key identifier: 2C:87:3E:A1:6E:5E:0B:38:B4:2E:25:5A:D4:BC:E3:94:A2:2B:56:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d4e821ee-44c8-3559-bbc5-7f46d0fc9f8f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46642
IP address blocks:        198.199.171.0/24 maxlen: 24
                          2620:99:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e6:e3:e3:89:b0:4b:f5:76:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7510e93-774e-4bdb-a8e4-63e59fb8c1c0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6afc7205-7e5d-4655-9f8d-be5726f27f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:47:05:e5:8c:91:4d:3d:5f:ee:e3:65:13:
                    0c:8d:ff:66:b0:c9:9c:cf:ad:13:28:8e:73:6c:80:
                    7d:c0:fd:73:68:af:ce:6c:c9:65:b5:85:8e:5a:d5:
                    1b:09:71:3b:6d:b4:50:e5:c0:4e:08:0e:4e:ff:a2:
                    db:5c:22:d8:9d:66:3b:d5:48:d2:1f:21:d3:f7:43:
                    ea:0a:5d:d2:ab:b4:2c:33:de:3f:b7:70:8d:d9:ba:
                    69:4f:91:b7:ca:7b:a2:3f:4a:f8:66:7e:27:b9:b0:
                    b0:78:c4:7b:ca:e2:5e:0e:10:01:50:b5:87:25:65:
                    1f:60:6e:44:d6:df:f8:37:49:f2:60:ca:b8:06:83:
                    e2:ef:eb:aa:cb:d0:99:9c:37:5e:fc:96:42:57:94:
                    6f:77:41:61:83:26:ea:e4:55:a8:8d:e6:54:ce:24:
                    6f:91:91:69:33:d8:b8:dd:e2:77:47:2d:2e:76:93:
                    62:92:39:c9:4b:c1:66:f8:a0:d6:60:30:89:0f:77:
                    75:c2:86:b4:99:b7:20:2e:0c:f0:2f:d0:33:15:50:
                    40:9c:82:42:14:ef:cd:28:4d:ad:d0:fa:05:ba:bf:
                    54:30:e0:53:5e:ab:dc:ca:ae:8b:f8:a2:51:92:67:
                    15:27:bc:e9:d2:54:18:e6:b8:0c:3c:2a:41:a3:de:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:53:2C:B4:B6:E9:90:9B:55:3D:B3:A3:CE:85:D5:27:43:B2:FB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d4e821ee-44c8-3559-bbc5-7f46d0fc9f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:87:3E:A1:6E:5E:0B:38:B4:2E:25:5A:D4:BC:E3:94:A2:2B:56:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d7510e93-774e-4bdb-a8e4-63e59fb8c1c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.199.171.0/24
                IPv6:
                  2620:99:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:13:18:e5:34:bb:59:e4:c8:0b:24:bc:c4:53:32:79:82:39:
         f4:57:23:bd:1e:72:27:4c:30:8e:b8:d7:66:6b:99:3b:64:d2:
         1d:e2:60:7b:65:9e:bd:7e:4a:99:f5:e0:d8:75:d5:b0:85:da:
         12:62:70:a1:9d:20:99:a5:11:00:3c:eb:94:b5:a5:38:da:84:
         6a:80:74:fc:bc:88:b4:44:3f:47:4b:d0:93:ca:b9:1c:59:10:
         95:1d:99:14:dd:8f:f8:78:79:17:ea:3f:df:18:0f:57:10:fd:
         d5:d0:04:87:c9:ff:7c:21:85:8f:ce:a7:f1:16:ca:a8:82:a5:
         3f:b5:2d:9e:87:2e:e2:56:35:5b:c9:ce:ed:70:63:6e:55:71:
         44:5d:ea:06:bd:1c:1a:49:ed:fb:02:c5:0c:c1:b7:e6:2d:f5:
         4e:56:53:a3:c2:de:f1:7b:13:91:dc:ce:2e:be:c4:07:c3:e5:
         35:be:0f:41:35:cc:47:10:5f:81:9f:e5:8d:7e:c6:cf:cb:7e:
         cd:4f:58:2c:47:ac:69:2e:ff:70:8f:c4:94:57:44:0a:61:a5:
         aa:6d:37:3b:e4:a6:77:f6:66:a6:4c:4e:62:cb:67:a1:5d:ca:
         44:67:14:7a:3c:e3:13:76:4f:2d:75:e7:aa:9c:8b:cc:84:d3:
         54:f9:94:93
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9Jcubj44mwS/V2RAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDc1MTBlOTMtNzc0ZS00YmRiLWE4ZTQtNjNlNTlmYjhj
MWMwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmFmYzcyMDUtN2U1ZC00NjU1LTlmOGQtYmU1NzI2ZjI3ZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41BHBeWMkU09X+7jZRMMjf9msMmcz60TKI5z
bIB9wP1zaK/ObMlltYWOWtUbCXE7bbRQ5cBOCA5O/6LbXCLYnWY71UjSHyHT90Pq
Cl3Sq7QsM94/t3CN2bppT5G3ynuiP0r4Zn4nubCweMR7yuJeDhABULWHJWUfYG5E
1t/4N0nyYMq4BoPi7+uqy9CZnDde/JZCV5Rvd0Fhgybq5FWojeZUziRvkZFpM9i4
3eJ3Ry0udpNikjnJS8Fm+KDWYDCJD3d1woa0mbcgLgzwL9AzFVBAnIJCFO/NKE2t
0PoFur9UMOBTXqvcyq6L+KJRkmcVJ7zp0lQY5rgMPCpBo94FtwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFN9TLLS26ZCbVT2zo86F1SdDsvtQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzUx
MGU5My03NzRlLTRiZGItYThlNC02M2U1OWZiOGMxYzAvZDRlODIxZWUtNDRjOC0z
NTU5LWJiYzUtN2Y0NmQwZmM5ZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDc1MTBlOTMtNzc0ZS00YmRiLWE4
ZTQtNjNlNTlmYjhjMWMwL2Q3NTEwZTkzLTc3NGUtNGJkYi1hOGU0LTYzZTU5ZmI4
YzFjMC5jcmwwHwYDVR0jBBgwFoAULIc+oW5eCzi0LiVa1LzjlKIrVgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzUxMGU5My03NzRlLTRiZGItYThlNC02M2U1
OWZiOGMxYzAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxserMA8E
AgACMAkDBwAmIACZ4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAchMY5TS7WeTICyS8xFMyeYI59FcjvR5y
J0wwjrjXZmuZO2TSHeJge2WevX5KmfXg2HXVsIXaEmJwoZ0gmaURADzrlLWlONqE
aoB0/LyItEQ/R0vQk8q5HFkQlR2ZFN2P+Hh5F+o/3xgPVxD91dAEh8n/fCGFj86n
8RbKqIKlP7Utnocu4lY1W8nO7XBjblVxRF3qBr0cGknt+wLFDMG35i31TlZTo8Le
8XsTkdzOLr7EB8PlNb4PQTXMRxBfgZ/ljX7Gz8t+zU9YLEesaS7/cI/ElFdECmGl
qm03O+Smd/ZmpkxOYstnoV3KRGcUejzjE3ZPLXXnqpyLzITTVPmUkw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:20:41 2026 by rpki-client