Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
File:                     2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa (raw, json)
Hash identifier:          QW4BvwOg5EuU/l9TeMpNQF4/5i79B1wGid/y6g0j2lY=
Subject key identifier:   14:91:06:B5:B7:86:57:AA:A7:89:63:BF:D3:70:5B:D2:44:BF:70:60
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F6F22CF5D3FFBB40C0B7B7CC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     2914
IP address blocks:        170.130.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:cf:5d:3f:fb:b4:0c:0b:7b:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=28c1d2ad-7b39-4937-b76e-6c4f2d63302f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:6e:99:44:24:57:1e:68:64:bd:20:b7:90:
                    dd:6c:84:27:92:f9:66:57:00:39:93:ad:08:6d:da:
                    66:6d:2d:62:e8:8a:af:43:09:6a:aa:0f:36:a2:95:
                    ce:b0:9d:de:a2:5b:f4:61:f2:4b:b7:a1:ce:1f:e1:
                    67:56:16:b4:79:ac:7b:dd:4e:9b:09:4b:15:20:0b:
                    4c:d4:4e:48:6c:4c:9c:a0:56:33:79:9f:94:05:ca:
                    b9:88:aa:c1:b5:16:78:1c:6c:c3:91:9f:c4:b6:41:
                    ab:0b:f3:85:95:02:f8:ab:b9:f1:85:d6:d9:64:94:
                    20:65:9e:a5:b1:65:d9:9b:ef:d1:2f:c7:3e:a7:a5:
                    c0:a4:09:3b:4d:23:2d:29:7c:59:ac:b6:57:fe:a8:
                    02:0d:63:d0:73:e9:77:45:50:39:da:7f:0e:30:25:
                    86:1a:29:8a:7f:ce:4a:a0:87:d7:65:40:1c:2b:ad:
                    b0:52:00:5d:f3:36:49:6e:6f:ad:56:90:13:f4:94:
                    e6:7a:52:51:c0:68:1e:82:f9:5c:72:3e:93:3a:1d:
                    a1:b2:26:0e:da:50:6e:06:b8:b1:63:3e:7d:24:2f:
                    75:2e:e6:38:9f:d4:d5:86:09:c6:5f:e2:5d:f1:79:
                    ec:09:37:6b:c5:11:6c:24:58:66:2b:a9:88:45:19:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:91:06:B5:B7:86:57:AA:A7:89:63:BF:D3:70:5B:D2:44:BF:70:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a828512-9767-38ae-aa0a-3eb8dc0759dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d8:75:bf:ef:d5:5b:ca:45:85:37:c8:80:99:42:d2:94:1c:
         e0:5e:25:cb:1f:14:1f:57:9b:3c:72:0a:e4:76:7c:5f:c5:3d:
         b3:06:81:df:8a:57:bd:16:df:e4:c6:f5:98:43:d9:89:00:a2:
         96:fc:78:e1:61:d4:b2:99:41:53:d9:69:9b:95:5d:8d:b6:23:
         9e:1c:ae:51:9a:67:02:68:32:e0:4f:d0:48:23:84:21:70:f7:
         d4:92:75:42:17:c7:8b:b2:f4:8e:a2:53:f6:b5:35:91:46:fc:
         03:bd:14:1e:3c:78:d9:47:1a:b9:c2:0e:25:45:59:cf:fd:66:
         24:8c:96:bd:31:bf:e9:cb:d5:a8:2c:d1:92:cf:c0:25:49:a1:
         93:7f:99:c1:c4:ac:49:41:c2:cc:55:41:b7:0d:b7:ad:58:0c:
         62:56:54:60:b7:11:02:7f:f5:88:4b:95:68:50:90:10:7c:22:
         2d:dd:24:62:81:83:87:db:84:eb:bc:42:66:8c:0d:00:41:7f:
         b8:18:3e:5b:eb:4d:96:cd:7d:4c:75:4b:75:d8:26:1a:81:83:
         38:ed:0c:5d:35:f3:07:cc:da:e2:86:82:8b:38:a3:55:2e:f2:
         90:16:9c:65:80:4f:55:04:ce:a9:29:de:b8:54:33:fc:4a:4c:
         86:5b:0a:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIs9dP/u0DAt7fMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
MjhjMWQyYWQtN2IzOS00OTM3LWI3NmUtNmM0ZjJkNjMzMDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5xumUQkVx5oZL0gt5DdbIQnkvlmVwA5k60I
bdpmbS1i6IqvQwlqqg82opXOsJ3eolv0YfJLt6HOH+FnVha0eax73U6bCUsVIAtM
1E5IbEycoFYzeZ+UBcq5iKrBtRZ4HGzDkZ/EtkGrC/OFlQL4q7nxhdbZZJQgZZ6l
sWXZm+/RL8c+p6XApAk7TSMtKXxZrLZX/qgCDWPQc+l3RVA52n8OMCWGGimKf85K
oIfXZUAcK62wUgBd8zZJbm+tVpAT9JTmelJRwGgegvlccj6TOh2hsiYO2lBuBrix
Yz59JC91LuY4n9TVhgnGX+Jd8XnsCTdrxRFsJFhmK6mIRRlPJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSRBrW3hleqp4ljv9NwW9JEv3BgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmE4Mjg1MTItOTc2Ny0z
OGFlLWFhMGEtM2ViOGRjMDc1OWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqoJqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzYdb/v1VvKRYU3yICZQtKUHOBeJcsfFB9XmzxyCuR2fF/FPbMGgd+K
V70W3+TG9ZhD2YkAopb8eOFh1LKZQVPZaZuVXY22I54crlGaZwJoMuBP0EgjhCFw
99SSdUIXx4uy9I6iU/a1NZFG/AO9FB48eNlHGrnCDiVFWc/9ZiSMlr0xv+nL1ags
0ZLPwCVJoZN/mcHErElBwsxVQbcNt61YDGJWVGC3EQJ/9YhLlWhQkBB8Ii3dJGKB
g4fbhOu8QmaMDQBBf7gYPlvrTZbNfUx1S3XYJhqBgzjtDF018wfM2uKGgos4o1Uu
8pAWnGWAT1UEzqkp3rhUM/xKTIZbCtg=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:47:45 2026 by rpki-client