Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa
File:                     ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa (raw, json)
Hash identifier:          UGYmekR8GzVnWhZFGNpaLDAgik2EDTYkOM0yBQRILjw=
Subject key identifier:   CA:43:73:C9:5D:31:FC:47:1F:A0:F7:98:9C:DF:3C:48:2E:D7:A6:48
Certificate issuer:       /CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8
Certificate serial:       010D0C9F4328584EA78829DDE821FA1B92675A20
Authority key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46110
IP address blocks:        199.101.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:29:dd:e8:21:fa:1b:92:67:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=de28c954-2a56-4e16-95a3-64d055f93a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:41:46:37:06:02:74:1b:68:72:e8:87:0e:
                    b3:c9:6e:f2:d2:ea:6b:a1:2e:4c:c6:b2:36:38:cb:
                    e8:19:c7:49:10:26:59:96:40:a1:e9:e6:02:97:97:
                    50:92:c6:d7:c0:41:6d:19:0f:e9:5e:be:c0:bc:a6:
                    f4:f0:01:74:d7:0f:9e:4d:55:2c:b9:67:f4:74:f0:
                    3d:3c:ad:5a:d2:83:2f:c2:d7:0e:2c:06:98:be:80:
                    6f:de:25:7c:c3:35:1b:5f:68:30:31:6c:5d:25:c1:
                    49:e7:bd:b1:09:4c:67:2f:be:e6:62:2e:da:3a:b4:
                    45:31:59:39:33:bb:8e:c8:68:1f:e3:a2:da:c8:13:
                    0b:da:35:ae:dd:4d:e6:47:ad:2d:e1:1d:01:20:6b:
                    2b:13:77:51:ba:cf:7d:94:cd:81:c0:43:51:e1:2a:
                    1e:ff:d9:8d:a3:92:10:f7:70:e2:19:83:0a:0a:da:
                    c0:4a:f7:90:d4:c8:18:84:22:84:4d:78:08:6d:8f:
                    e8:61:c5:7b:64:31:b1:2c:f1:7d:d5:b8:c8:71:6a:
                    82:ab:93:fd:50:f4:3f:20:7d:5e:c6:7f:62:82:26:
                    88:8f:24:57:27:f6:bf:9f:f9:27:4c:ec:ba:fa:49:
                    08:f4:5c:26:40:a7:3d:ce:71:c2:4b:75:24:6c:d0:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:43:73:C9:5D:31:FC:47:1F:A0:F7:98:9C:DF:3C:48:2E:D7:A6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl

            X509v3 Authority Key Identifier:
                keyid:2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:88:ce:28:68:32:68:b0:04:a0:af:31:b9:d4:f4:3d:ff:32:
         c9:04:80:ef:c0:06:51:d8:15:2f:04:69:9b:91:2c:5e:cf:71:
         5f:34:12:52:b0:6c:63:39:8e:5e:63:4b:e9:42:30:61:d8:1b:
         9f:78:0c:2e:89:55:b8:15:93:03:48:19:33:cc:5b:11:9c:7f:
         59:3b:4f:b8:d9:03:5b:e7:23:37:d8:2a:b8:9e:54:1a:1f:44:
         34:6a:3d:21:1a:6c:d1:78:26:b5:be:bc:0a:ef:25:3d:e5:cb:
         ad:b8:d8:24:97:20:36:fb:6c:22:1e:9f:81:1e:23:0a:84:2d:
         dc:34:e5:d2:e5:d5:a0:7b:ee:4e:d2:f9:34:13:e8:13:73:4c:
         7c:45:af:52:c7:cc:69:05:23:84:d9:a3:cf:5c:59:ec:aa:44:
         7b:f9:cb:a3:02:dd:f1:ed:54:4c:b7:02:d6:d0:17:87:e9:7e:
         aa:fe:c2:d7:75:b8:50:f5:02:af:9f:5b:2d:2a:e0:3d:59:39:
         38:cc:49:9a:41:32:ee:3e:e9:77:10:af:0a:03:84:d6:3c:11:
         3c:71:d5:a2:15:df:30:3e:07:58:81:04:b9:34:9b:7e:f2:b2:
         3e:aa:e5:a3:02:0f:2e:ec:10:b1:cd:65:0c:01:f2:79:04:b4:
         85:51:d2:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niCnd6CH6G5JnWiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFhNDlkMDMtZGI0YS00ODA0LTgyZGMtZmMyYzBmZGI5
NGU4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGUyOGM5NTQtMmE1Ni00ZTE2LTk1YTMtNjRkMDU1ZjkzYTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1tBRjcGAnQbaHLohw6zyW7y0uproS5MxrI2
OMvoGcdJECZZlkCh6eYCl5dQksbXwEFtGQ/pXr7AvKb08AF01w+eTVUsuWf0dPA9
PK1a0oMvwtcOLAaYvoBv3iV8wzUbX2gwMWxdJcFJ572xCUxnL77mYi7aOrRFMVk5
M7uOyGgf46LayBML2jWu3U3mR60t4R0BIGsrE3dRus99lM2BwENR4Soe/9mNo5IQ
93DiGYMKCtrASveQ1MgYhCKETXgIbY/oYcV7ZDGxLPF91bjIcWqCq5P9UPQ/IH1e
xn9igiaIjyRXJ/a/n/knTOy6+kkI9FwmQKc9znHCS3UkbNBlGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpDc8ldMfxHH6D3mJzfPEgu16ZIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0
OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJjMGZkYjk0ZTgvY2U3YTZhODUtMzQwMC0z
ZTk3LWE2YjYtNjI2NDRmZTJmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmFhNDlkMDMtZGI0YS00ODA0LTgy
ZGMtZmMyYzBmZGI5NGU4LzJhYTQ5ZDAzLWRiNGEtNDgwNC04MmRjLWZjMmMwZmRi
OTRlOC5jcmwwHwYDVR0jBBgwFoAUL4GD8qhhJFWorV2604WpxuXzKEwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJj
MGZkYjk0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2UIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGIzihoMmiwBKCvMbnU9D3/MskEgO/ABlHYFS8EaZuRLF7PcV80ElKw
bGM5jl5jS+lCMGHYG594DC6JVbgVkwNIGTPMWxGcf1k7T7jZA1vnIzfYKrieVBof
RDRqPSEabNF4JrW+vArvJT3ly6242CSXIDb7bCIen4EeIwqELdw05dLl1aB77k7S
+TQT6BNzTHxFr1LHzGkFI4TZo89cWeyqRHv5y6MC3fHtVEy3AtbQF4fpfqr+wtd1
uFD1Aq+fWy0q4D1ZOTjMSZpBMu4+6XcQrwoDhNY8ETxx1aIV3zA+B1iBBLk0m37y
sj6q5aMCDy7sELHNZQwB8nkEtIVR0kg=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:32:53 2026 by rpki-client