Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/93dc11b7-7124-37e2-8d65-cd194a2a6836.roa
File:                     93dc11b7-7124-37e2-8d65-cd194a2a6836.roa (raw, json)
Hash identifier:          1rgwogR0Jrdj3xof5lfWiqnsawCuaES3Jl7hdIc2okY=
Subject key identifier:   CF:CA:51:DC:C3:53:26:3D:25:60:DC:E1:36:B2:72:9D:E4:E4:9F:8F
Certificate issuer:       /CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
Certificate serial:       010D0C9F4328584E15E4A43DDF003FBE950EB0C0
Authority key identifier: 68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/93dc11b7-7124-37e2-8d65-cd194a2a6836.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22840
IP address blocks:        198.245.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a4:3d:df:00:3f:be:95:0e:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811af7cb-bc82-4a78-ba0f-2ba88b6d9f74
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=e617c378-6e56-4dba-861b-08446ead8797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:24:2f:fc:94:6c:aa:9d:96:ea:ed:10:11:9c:
                    92:ec:a0:18:f0:00:80:c9:d0:e1:be:76:ca:13:f2:
                    53:8e:68:a7:db:5d:6e:c8:57:8a:39:c7:8d:93:2c:
                    c0:fe:45:ad:52:4a:2e:58:6c:a1:d0:06:08:07:4d:
                    0b:04:f1:80:c6:26:bc:54:3f:4f:ca:09:47:90:77:
                    83:76:7e:a5:c8:83:b1:b5:ef:33:c3:86:83:31:9b:
                    46:38:5e:93:dd:60:e4:66:64:5f:15:a3:f6:2c:1c:
                    7c:b6:35:05:a9:3d:1c:4c:e3:60:a3:49:55:60:58:
                    67:c2:58:39:23:56:89:ea:f4:34:0d:05:da:81:5a:
                    59:d0:72:d2:cb:26:d2:18:d2:ca:79:29:59:f6:07:
                    56:e0:db:d3:06:a4:16:bf:82:37:bc:45:ff:8b:b0:
                    10:68:ad:c9:c4:6e:69:3d:07:16:e0:fd:b6:45:7c:
                    c5:62:60:e7:88:ba:57:e3:0a:f1:ad:18:c1:42:ec:
                    6d:ea:8b:5d:28:8a:a3:e4:20:ff:d6:c9:ef:82:80:
                    40:e2:0a:93:4f:16:e8:c4:38:f3:a0:00:1b:00:8a:
                    4c:85:b2:1f:25:e5:aa:cf:eb:8c:92:a4:ec:ef:81:
                    f6:a4:97:63:2d:eb:cc:76:b8:c8:4b:05:50:ec:37:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CA:51:DC:C3:53:26:3D:25:60:DC:E1:36:B2:72:9D:E4:E4:9F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/93dc11b7-7124-37e2-8d65-cd194a2a6836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.crl

            X509v3 Authority Key Identifier:
                keyid:68:10:33:A3:A6:E3:17:1D:56:9B:32:AF:83:B7:27:D6:B6:B1:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/811af7cb-bc82-4a78-ba0f-2ba88b6d9f74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:ce:f5:b4:5f:15:4f:18:4f:f9:a2:b4:b7:38:24:7a:2a:
         29:a6:98:c2:ab:52:5c:6c:f2:cd:d8:a1:bb:65:35:37:45:ab:
         14:6c:4a:c0:c6:ee:ab:9f:39:0f:af:d9:c0:70:c6:38:36:c7:
         2f:02:82:44:e2:72:a5:37:25:41:67:0f:ff:a4:b0:99:59:d2:
         a1:04:27:9d:c0:5d:5d:94:56:ae:50:31:2d:7e:93:b8:d9:0d:
         14:7c:96:7c:6f:bc:31:fe:e2:dd:c6:e7:42:ca:3b:80:4e:17:
         3b:9b:bd:e8:98:ff:33:ca:c4:8d:5b:f1:aa:8a:0e:69:a7:bc:
         c6:30:c8:52:2c:0d:4a:e1:12:ae:23:da:67:29:f8:d3:69:3c:
         64:d0:20:e0:14:a8:9a:fe:5b:f9:22:b7:42:ab:7f:c5:d1:9e:
         b5:88:c8:1b:c5:2c:6c:7d:32:68:8a:69:b5:6f:6b:74:cb:0c:
         fe:96:7f:cc:37:b8:76:3b:fc:bd:94:c2:d7:c0:ab:a0:62:76:
         82:86:c8:d2:ee:d8:10:1b:9c:29:8a:1e:75:a8:d9:1e:f8:56:
         42:7f:af:5a:5f:f6:8b:a7:43:31:f7:72:a1:f0:a1:14:33:ab:
         d0:9a:6e:c6:4a:b1:73:e4:33:18:bf:4f:86:0c:9d:30:3f:e8:
         7c:db:e7:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5KQ93wA/vpUOsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODExYWY3Y2ItYmM4Mi00YTc4LWJhMGYtMmJhODhiNmQ5
Zjc0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
ZTYxN2MzNzgtNmU1Ni00ZGJhLTg2MWItMDg0NDZlYWQ4Nzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSQv/JRsqp2W6u0QEZyS7KAY8ACAydDhvnbK
E/JTjmin211uyFeKOceNkyzA/kWtUkouWGyh0AYIB00LBPGAxia8VD9PyglHkHeD
dn6lyIOxte8zw4aDMZtGOF6T3WDkZmRfFaP2LBx8tjUFqT0cTONgo0lVYFhnwlg5
I1aJ6vQ0DQXagVpZ0HLSyybSGNLKeSlZ9gdW4NvTBqQWv4I3vEX/i7AQaK3JxG5p
PQcW4P22RXzFYmDniLpX4wrxrRjBQuxt6otdKIqj5CD/1snvgoBA4gqTTxboxDjz
oAAbAIpMhbIfJeWqz+uMkqTs74H2pJdjLevMdrjISwVQ7Dcr6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/KUdzDUyY9JWDc4Taycp3k5J+PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFh
ZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4OGI2ZDlmNzQvOTNkYzExYjctNzEyNC0z
N2UyLThkNjUtY2QxOTRhMmE2ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODExYWY3Y2ItYmM4Mi00YTc4LWJh
MGYtMmJhODhiNmQ5Zjc0LzgxMWFmN2NiLWJjODItNGE3OC1iYTBmLTJiYTg4YjZk
OWY3NC5jcmwwHwYDVR0jBBgwFoAUaBAzo6bjFx1WmzKvg7cn1rax/18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84MTFhZjdjYi1iYzgyLTRhNzgtYmEwZi0yYmE4
OGI2ZDlmNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvWvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAPzvW0XxVPGE/5orS3OCR6KimmmMKrUlxs8s3YobtlNTdFqxRsSsDG
7qufOQ+v2cBwxjg2xy8CgkTicqU3JUFnD/+ksJlZ0qEEJ53AXV2UVq5QMS1+k7jZ
DRR8lnxvvDH+4t3G50LKO4BOFzubveiY/zPKxI1b8aqKDmmnvMYwyFIsDUrhEq4j
2mcp+NNpPGTQIOAUqJr+W/kit0Krf8XRnrWIyBvFLGx9MmiKabVva3TLDP6Wf8w3
uHY7/L2UwtfAq6BidoKGyNLu2BAbnCmKHnWo2R74VkJ/r1pf9ounQzH3cqHwoRQz
q9CabsZKsXPkMxi/T4YMnTA/6Hzb54c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:00:39 2026 by rpki-client