Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa
File:                     0662bfc3-9ab0-3172-9e56-66414ef41478.roa (raw, json)
Hash identifier:          9KmhvbG81PnayC1V3LZvnRUqLt6IhNztSbFjJjKiH2A=
Subject key identifier:   5D:AA:6A:42:FF:E0:69:24:79:9C:E1:62:E7:D7:D3:6D:77:96:81:05
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584F71EDA2D21ECC0F0B10E8A500
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     44632
IP address blocks:        208.99.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a2:d2:1e:cc:0f:0b:10:e8:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=41613aaf-1c7d-4223-9144-ee528758976b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:1c:22:33:d4:d1:13:69:c3:7b:b4:76:74:
                    81:5c:eb:c2:ef:3f:5d:f7:b3:f4:7a:ef:d8:58:69:
                    e2:dc:b1:54:8e:a3:c8:4b:a8:30:3a:67:93:0a:c6:
                    19:f5:2c:f5:02:49:55:b0:12:bf:03:0d:86:ca:b3:
                    e0:77:c1:4c:bb:d2:ea:bb:2e:d8:13:be:1c:2c:e9:
                    c1:d7:b8:05:04:22:ba:bf:f3:ee:32:31:ba:a5:bb:
                    57:10:4d:68:dc:8d:16:91:68:2f:ee:27:5e:e8:d4:
                    b8:b2:d3:86:45:37:c6:4e:be:fd:43:d7:c3:4e:31:
                    ed:38:1f:4b:04:1e:db:69:44:cf:b6:73:d3:2e:31:
                    70:be:a7:30:a8:56:67:a4:1f:aa:d1:e5:de:a6:69:
                    3a:42:fc:3d:87:38:50:75:86:35:e8:1c:73:9d:6b:
                    d4:1e:06:83:0b:50:7b:b7:1a:00:30:f5:33:d7:36:
                    1c:59:0b:61:6d:56:c8:2c:0c:c3:51:b5:64:fe:1e:
                    f0:70:2f:d8:9c:e0:50:57:ee:2b:76:1e:86:57:44:
                    24:0f:a7:5f:af:89:98:53:ff:80:3c:a4:4a:05:2b:
                    2b:82:ef:fd:37:e7:31:2b:cd:6b:67:a9:37:c1:c2:
                    08:ac:dc:a6:76:1b:74:27:8a:23:70:dc:7e:5d:a8:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AA:6A:42:FF:E0:69:24:79:9C:E1:62:E7:D7:D3:6D:77:96:81:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/0662bfc3-9ab0-3172-9e56-66414ef41478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:22:74:67:c1:4f:e2:26:c8:32:a7:be:a4:ff:7f:17:98:
         07:7a:34:30:b1:5d:8d:a4:4a:f0:7c:0d:4e:18:1b:f6:e3:90:
         6a:50:2d:e7:ef:5e:35:ad:6a:17:31:d3:39:2f:f4:d9:7f:5f:
         6f:c0:a9:bc:ec:3a:8b:76:e8:16:5b:25:79:bb:f5:26:dc:25:
         09:7b:9f:40:15:4e:27:bd:21:87:bb:94:f5:e4:f8:cb:e6:79:
         2b:4f:cb:cc:2e:40:20:a5:49:f4:72:6b:50:4c:39:ee:35:94:
         27:e8:77:48:87:b1:76:30:d8:92:61:c9:5d:b5:fd:74:a6:c4:
         36:51:eb:aa:30:97:b9:c5:60:34:eb:93:5c:5b:71:a9:f3:25:
         5c:39:79:c4:a3:ea:a8:41:4d:3f:78:f1:4d:7f:ed:8c:fd:dd:
         f3:2d:f8:9f:2d:db:b1:69:45:73:80:ac:18:79:ec:ca:0e:0b:
         88:a9:7b:52:e4:93:39:3c:d9:3a:79:93:05:15:d0:99:3e:3a:
         d0:ac:5a:2a:b2:e8:28:03:44:c2:87:17:21:4c:05:d6:93:03:
         38:54:9d:c0:b7:26:04:3c:06:96:5d:ee:55:28:c9:46:be:65:
         ad:bc:7c:f6:21:68:b1:a7:f5:9e:32:11:87:fa:d1:db:74:d2:
         21:45:c9:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aLSHswPCxDopQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
NDE2MTNhYWYtMWM3ZC00MjIzLTkxNDQtZWU1Mjg3NTg5NzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUcIjPU0RNpw3u0dnSBXOvC7z9d97P0eu/Y
WGni3LFUjqPIS6gwOmeTCsYZ9Sz1AklVsBK/Aw2GyrPgd8FMu9Lquy7YE74cLOnB
17gFBCK6v/PuMjG6pbtXEE1o3I0WkWgv7ide6NS4stOGRTfGTr79Q9fDTjHtOB9L
BB7baUTPtnPTLjFwvqcwqFZnpB+q0eXepmk6Qvw9hzhQdYY16BxznWvUHgaDC1B7
txoAMPUz1zYcWQthbVbILAzDUbVk/h7wcC/YnOBQV+4rdh6GV0QkD6dfr4mYU/+A
PKRKBSsrgu/9N+cxK81rZ6k3wcIIrNymdht0J4ojcNx+XaivxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2qakL/4GkkeZzhYufX0213loEFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvMDY2MmJmYzMtOWFiMC0z
MTcyLTllNTYtNjY0MTRlZjQxNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbRInRnwU/iJsgyp76k/38XmAd6NDCxXY2kSvB8DU4YG/bjkGpQLefv
XjWtahcx0zkv9Nl/X2/AqbzsOot26BZbJXm79SbcJQl7n0AVTie9IYe7lPXk+Mvm
eStPy8wuQCClSfRya1BMOe41lCfod0iHsXYw2JJhyV21/XSmxDZR66owl7nFYDTr
k1xbcanzJVw5ecSj6qhBTT948U1/7Yz93fMt+J8t27FpRXOArBh57MoOC4ipe1Lk
kzk82Tp5kwUV0Jk+OtCsWiqy6CgDRMKHFyFMBdaTAzhUncC3JgQ8BpZd7lUoyUa+
Za28fPYhaLGn9Z4yEYf60dt00iFFybo=
-----END CERTIFICATE-----
Generated at Tue Oct 13 13:42:25 2026 by rpki-client