Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa
File:                     c112586d-f411-30a6-89bd-6a1bd803789b.roa (raw, json)
Hash identifier:          je1ztDN8gq+Nd4+G6v2yoNPuRiuyFcVH6Ax7mam5SXM=
Subject key identifier:   66:5D:CC:B5:28:01:C1:22:48:FA:DB:C2:00:0B:DB:54:D3:A7:86:42
Certificate issuer:       /CN=b5280624-435b-4568-8d14-dbdda87b17c2
Certificate serial:       010D0C9F4328584D80FFF59ACAA07B334A705FB8
Authority key identifier: 40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     396441
IP address blocks:        192.101.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f5:9a:ca:a0:7b:33:4a:70:5f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5280624-435b-4568-8d14-dbdda87b17c2
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=699ca3c2-38f5-47b5-b005-cc4be0ae248d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:e8:b9:b2:db:2b:d0:81:0f:d3:0f:40:fe:
                    a1:43:5f:dc:5d:07:7c:15:b8:2f:ef:fe:a9:11:49:
                    f9:ac:7d:85:ce:c9:5c:f0:dc:72:0f:07:c1:d0:66:
                    a0:76:28:b0:28:57:33:d0:d2:7b:63:fd:11:d3:6b:
                    c3:7e:e7:09:76:05:63:ba:72:1f:b3:19:b8:c7:78:
                    20:cc:58:9e:e2:a5:74:4f:e1:e3:a0:38:cd:35:a6:
                    08:0b:c6:e4:2b:3e:b0:44:10:e8:a3:37:6f:74:8a:
                    3f:07:56:3a:74:cb:bf:96:9a:51:5e:10:78:24:bb:
                    76:8e:b1:45:e5:59:64:26:d8:47:35:ee:2b:dc:ea:
                    3e:65:a6:26:84:5d:20:e7:9d:30:8f:57:e6:ae:0d:
                    ea:7d:d6:7b:ad:dc:ec:c0:0f:9b:c2:6c:07:67:75:
                    11:26:9d:e4:9c:30:6d:1a:50:b0:df:bc:9f:9a:c3:
                    42:02:10:6e:5e:61:83:d8:28:da:7f:5f:e9:e7:ce:
                    c8:b1:bf:ee:17:70:6d:9b:1d:6b:e9:07:9e:4b:6f:
                    a0:93:fe:c9:76:56:e4:95:fc:c7:18:d0:98:93:50:
                    ac:3a:a3:0b:72:e9:24:24:0e:7b:e0:43:a0:d3:d8:
                    fe:a4:f9:67:dc:41:40:45:b0:74:2e:d8:1c:34:43:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5D:CC:B5:28:01:C1:22:48:FA:DB:C2:00:0B:DB:54:D3:A7:86:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/c112586d-f411-30a6-89bd-6a1bd803789b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2/b5280624-435b-4568-8d14-dbdda87b17c2.crl

            X509v3 Authority Key Identifier:
                keyid:40:2C:F4:EC:E7:9E:A5:3C:3C:FC:A5:1F:D7:C0:AD:A8:08:90:DA:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5280624-435b-4568-8d14-dbdda87b17c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:9d:15:f3:7d:43:7b:19:f2:8c:b2:10:b0:50:d8:ea:b5:
         07:00:7c:5b:2c:8f:45:16:d7:c2:1b:ba:c5:81:08:75:e3:bd:
         22:95:3b:4d:39:80:7c:cf:aa:f3:2a:7c:9d:4b:45:92:76:68:
         30:af:55:68:0a:21:93:64:bf:a3:8c:8e:57:60:0b:81:d5:da:
         a8:db:06:46:3c:ad:79:5b:ef:bb:6a:ab:02:82:c2:10:7b:eb:
         cc:8a:4f:33:05:dc:c1:44:0c:53:dc:15:0d:4f:d7:ec:cf:4e:
         a9:3e:3b:cd:e8:bb:75:eb:c8:a6:cc:16:b4:14:ee:b4:cf:5e:
         93:b2:54:fa:a5:c0:7d:ba:af:fd:47:23:66:04:18:0a:ff:3a:
         0e:9a:8c:43:15:a7:52:ed:7c:47:e7:e8:8c:3d:e0:fa:fd:0a:
         9c:95:6b:2c:27:ee:4d:4c:42:bf:2b:8e:9f:1b:5c:13:4a:1b:
         41:e7:3b:b1:98:52:2b:de:9d:d5:4a:6d:41:88:53:47:3e:9a:
         18:53:04:b8:59:44:47:9a:31:25:7e:b4:59:bb:33:2c:4f:dd:
         db:e8:d9:34:5e:4a:12:61:53:6b:41:3b:35:e5:ac:74:46:4d:
         90:e1:60:3d:bf:5a:84:27:59:f9:7c:0e:0d:bb:98:0b:97:f8:
         ce:b3:7d:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//WayqB7M0pwX7gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUyODA2MjQtNDM1Yi00NTY4LThkMTQtZGJkZGE4N2Ix
N2MyMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
Njk5Y2EzYzItMzhmNS00N2I1LWIwMDUtY2M0YmUwYWUyNDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni7oubLbK9CBD9MPQP6hQ1/cXQd8Fbgv7/6p
EUn5rH2Fzslc8NxyDwfB0GagdiiwKFcz0NJ7Y/0R02vDfucJdgVjunIfsxm4x3gg
zFie4qV0T+HjoDjNNaYIC8bkKz6wRBDoozdvdIo/B1Y6dMu/lppRXhB4JLt2jrFF
5VlkJthHNe4r3Oo+ZaYmhF0g550wj1fmrg3qfdZ7rdzswA+bwmwHZ3URJp3knDBt
GlCw37yfmsNCAhBuXmGD2Cjaf1/p587Isb/uF3Btmx1r6QeeS2+gk/7JdlbklfzH
GNCYk1CsOqMLcukkJA574EOg09j+pPln3EFARbB0LtgcNEOUswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZdzLUoAcEiSPrbwgAL21TTp4ZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTI4
MDYyNC00MzViLTQ1NjgtOGQxNC1kYmRkYTg3YjE3YzIvYzExMjU4NmQtZjQxMS0z
MGE2LTg5YmQtNmExYmQ4MDM3ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjUyODA2MjQtNDM1Yi00NTY4LThk
MTQtZGJkZGE4N2IxN2MyL2I1MjgwNjI0LTQzNWItNDU2OC04ZDE0LWRiZGRhODdi
MTdjMi5jcmwwHwYDVR0jBBgwFoAUQCz07OeepTw8/KUf18CtqAiQ2howDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTI4MDYyNC00MzViLTQ1NjgtOGQxNC1kYmRk
YTg3YjE3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGViMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7RnRXzfUN7GfKMshCwUNjqtQcAfFssj0UW18IbusWBCHXjvSKVO005
gHzPqvMqfJ1LRZJ2aDCvVWgKIZNkv6OMjldgC4HV2qjbBkY8rXlb77tqqwKCwhB7
68yKTzMF3MFEDFPcFQ1P1+zPTqk+O83ou3XryKbMFrQU7rTPXpOyVPqlwH26r/1H
I2YEGAr/Og6ajEMVp1LtfEfn6Iw94Pr9CpyVaywn7k1MQr8rjp8bXBNKG0HnO7GY
UivendVKbUGIU0c+mhhTBLhZREeaMSV+tFm7MyxP3dvo2TReShJhU2tBOzXlrHRG
TZDhYD2/WoQnWfl8Dg27mAuX+M6zfQk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:19:28 2026 by rpki-client