Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa
File:                     94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa (raw, json)
Hash identifier:          mcT1jtdYn2MQFqZ+2reE7hYjB0Z8ddIzqVy0pMt8wQo=
Subject key identifier:   F8:3C:42:90:81:A5:90:97:E2:04:B0:AC:0A:D0:D1:67:4A:9C:2C:EE
Certificate issuer:       /CN=e9769409-4db3-443e-9837-3afd4dca595d
Certificate serial:       010D0C9F4328584D5B4F9FCBABD84EF6ECBE7B80
Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     23316
IP address blocks:        162.211.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:9f:cb:ab:d8:4e:f6:ec:be:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=28c28a00-ab5b-47cf-b8c8-967b2a74d4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:32:1f:ff:5a:04:84:bf:7d:fb:54:7d:3d:
                    34:dd:97:f6:71:c2:ef:22:eb:c0:00:89:59:cd:0c:
                    c6:07:96:a1:ef:f2:40:0c:2f:44:db:b5:4c:09:be:
                    ef:37:8b:4c:4a:50:29:e4:87:90:b9:7e:3d:42:36:
                    cf:fc:d2:32:a4:b7:d0:95:6c:20:61:d9:bc:1c:e8:
                    5e:e1:7d:f1:9a:ac:31:42:64:ac:92:09:b4:7a:3f:
                    3a:1d:e4:bf:af:69:fc:b6:61:48:83:93:b5:af:d6:
                    2c:0e:5f:1a:6b:3d:75:84:6a:26:8c:52:26:13:f1:
                    49:b3:5b:bb:76:5e:56:19:c7:fc:fe:82:19:77:38:
                    fd:eb:9c:26:72:4a:76:7a:c7:e2:84:db:19:f6:71:
                    08:b1:4c:37:de:9b:15:ad:6e:53:84:98:df:20:ff:
                    53:34:98:a1:c1:2c:ea:2b:e4:21:0d:6f:36:09:c5:
                    c1:32:05:45:0b:84:3f:d8:63:4a:44:29:57:15:6a:
                    4f:ee:2d:2f:ca:ef:c8:2b:ca:6d:2b:86:aa:e5:5b:
                    50:12:e7:81:f8:ba:57:de:46:29:89:54:9f:23:71:
                    e8:37:c7:ca:5e:7c:da:c2:6d:2e:9a:a5:f7:45:5d:
                    05:6a:e6:f3:40:ea:56:1e:b3:7f:dc:88:0e:a4:b2:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:42:90:81:A5:90:97:E2:04:B0:AC:0A:D0:D1:67:4A:9C:2C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94dd3b0e-5cad-3fd7-b664-de94c7a38091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:73:02:bb:e0:b9:00:94:c6:e5:58:35:be:2d:e9:20:a4:1d:
         43:7e:f2:5f:48:8f:94:4d:6c:65:b7:02:cb:a0:19:9a:d6:6d:
         bd:80:06:bb:2a:bf:70:61:5a:dd:a7:f7:d3:55:06:32:0a:3f:
         ae:0b:33:b0:52:28:97:b3:31:50:05:8e:82:5c:30:c0:31:1f:
         dd:be:ae:a4:d0:b7:74:3f:13:2e:91:7d:b2:4c:74:1c:25:f8:
         dc:81:2e:f7:b6:4e:78:ea:10:61:81:6c:5d:fe:29:bf:f3:9f:
         5e:29:32:7c:41:30:f0:b1:80:8c:38:78:e8:49:a5:42:87:d4:
         f7:13:1c:94:c6:8e:8f:1a:a4:60:36:08:12:2e:7f:6a:7c:d0:
         7d:5e:1d:02:95:de:08:bf:4f:7f:9e:cf:19:a3:a2:7e:1f:7d:
         af:cb:f6:cb:4d:2f:7d:90:e6:76:e7:7d:29:b2:09:25:8c:41:
         c8:a5:b1:7f:71:75:c3:80:62:76:40:92:81:3f:46:31:a4:9f:
         f0:e9:1d:d5:2d:54:b7:28:c2:63:ac:c0:84:39:03:78:94:08:
         f5:68:c6:21:18:6f:fc:07:48:89:bd:fb:76:07:15:b5:fa:37:
         85:bf:4a:c6:f1:77:26:06:0b:48:7d:9c:f6:be:95:d9:85:3e:
         d7:8a:c3:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5/Lq9hO9uy+e4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1
OTVkMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk
MjhjMjhhMDAtYWI1Yi00N2NmLWI4YzgtOTY3YjJhNzRkNGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFoyH/9aBIS/fftUfT003Zf2ccLvIuvAAIlZ
zQzGB5ah7/JADC9E27VMCb7vN4tMSlAp5IeQuX49QjbP/NIypLfQlWwgYdm8HOhe
4X3xmqwxQmSskgm0ej86HeS/r2n8tmFIg5O1r9YsDl8aaz11hGomjFImE/FJs1u7
dl5WGcf8/oIZdzj965wmckp2esfihNsZ9nEIsUw33psVrW5ThJjfIP9TNJihwSzq
K+QhDW82CcXBMgVFC4Q/2GNKRClXFWpP7i0vyu/IK8ptK4aq5VtQEueB+LpX3kYp
iVSfI3HoN8fKXnzawm0umqX3RV0FaubzQOpWHrN/3IgOpLL5YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPg8QpCBpZCX4gSwrArQ0WdKnCzuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2
OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvOTRkZDNiMGUtNWNhZC0z
ZmQ3LWI2NjQtZGU5NGM3YTM4MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4
MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh
NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk
NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotOQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVzArvguQCUxuVYNb4t6SCkHUN+8l9Ij5RNbGW3AsugGZrWbb2ABrsq
v3BhWt2n99NVBjIKP64LM7BSKJezMVAFjoJcMMAxH92+rqTQt3Q/Ey6RfbJMdBwl
+NyBLve2TnjqEGGBbF3+Kb/zn14pMnxBMPCxgIw4eOhJpUKH1PcTHJTGjo8apGA2
CBIuf2p80H1eHQKV3gi/T3+ezxmjon4ffa/L9stNL32Q5nbnfSmyCSWMQcilsX9x
dcOAYnZAkoE/RjGkn/DpHdUtVLcowmOswIQ5A3iUCPVoxiEYb/wHSIm9+3YHFbX6
N4W/SsbxdyYGC0h9nPa+ldmFPteKwy8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:48 2026 by rpki-client