Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
File:                     a9240f31-54b4-373e-9a62-3ebd7223baae.roa (raw, json)
Hash identifier:          PtzWIu2A0FYEnLI3PnO9u1og1wdWNkiw9ZJSPJt7hyQ=
Subject key identifier:   A6:27:D6:F5:33:E8:EB:F2:B0:EB:C4:B0:32:6D:8D:A0:73:5B:7D:C0
Certificate issuer:       /CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
Certificate serial:       010D0C9F4328584D55BCB4DE59CB49EDE3468F40
Authority key identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     54606
IP address blocks:        132.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bc:b4:de:59:cb:49:ed:e3:46:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=80f39acf-e980-49bf-9560-e28c1ad7427e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:02:2f:5c:80:43:84:b6:3d:c0:d2:24:fa:
                    02:93:be:6f:9c:87:71:d2:09:97:27:e8:8d:fa:96:
                    92:17:ca:74:18:e0:4a:3e:29:73:d9:d8:88:f2:f9:
                    a8:10:0c:44:c3:97:a9:a9:21:f2:ad:b1:a2:6b:10:
                    d4:be:0c:0e:91:bc:24:9c:d4:d6:ac:41:ea:0b:33:
                    1f:a7:3f:d9:af:a0:8c:06:58:4b:23:72:fb:b4:70:
                    6f:20:3f:9a:56:d5:bc:4d:1c:67:58:35:a6:06:27:
                    30:75:b3:01:47:ee:75:69:aa:61:d6:07:fb:7a:1b:
                    6a:2c:ca:59:ac:d4:2c:01:ce:50:d6:06:38:ed:52:
                    5c:20:e1:50:1e:c9:46:bb:6e:85:3b:d6:54:5b:f8:
                    17:64:65:87:ec:10:0b:72:47:9c:e9:da:33:f2:26:
                    52:b6:e0:8e:83:79:49:2f:a7:57:57:b4:9a:a3:b0:
                    97:b5:d6:56:f8:d0:e5:a4:42:7a:6e:5b:e5:1e:56:
                    cc:5f:49:0b:df:7b:68:59:1c:3e:f2:0f:b9:41:d3:
                    e1:b0:30:4f:1b:58:84:62:2d:00:fc:3f:ba:a5:20:
                    15:75:41:a4:ab:4b:75:bd:af:fa:e9:eb:82:6c:9d:
                    ca:f0:8d:7c:2a:7e:5b:76:06:b4:60:eb:b6:94:c6:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:D6:F5:33:E8:EB:F2:B0:EB:C4:B0:32:6D:8D:A0:73:5B:7D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl

            X509v3 Authority Key Identifier:
                keyid:5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:5a:a0:a1:a2:c2:da:09:9a:8b:53:6b:6e:44:04:4f:13:
         a0:a7:d0:29:6f:88:55:c4:b3:92:2a:10:22:3c:7d:3b:00:68:
         e6:d0:2f:10:c1:26:30:bc:82:5a:d7:37:22:c3:c0:78:11:b8:
         6e:0d:24:da:e3:c4:80:60:de:8c:33:02:0e:88:8d:b1:e8:ec:
         34:b9:be:73:b4:0c:8a:5f:b0:0d:5e:7d:b8:96:fa:51:d6:36:
         5d:8f:61:07:4c:bd:23:29:d3:d8:1c:51:8d:00:ed:f9:c2:10:
         3a:21:93:62:86:62:82:2d:c8:12:55:b8:17:3c:fa:bb:c8:d5:
         c5:b5:2f:c6:b1:bf:c2:61:85:b2:31:1b:3f:43:03:bd:6f:7b:
         96:9c:1a:3f:9d:3a:04:36:63:8d:28:99:7e:cd:d5:2b:23:4b:
         76:a0:08:d1:0b:66:f2:6c:5c:51:4c:e6:28:2f:28:82:68:e1:
         c4:fa:9d:d3:4b:13:ad:82:1e:ee:b5:60:e1:b8:77:91:63:6d:
         29:51:93:4a:fb:a1:8a:3e:f5:f9:fb:96:e3:60:f4:1d:66:8a:
         0a:cc:69:cc:e1:a5:6f:9d:4a:24:39:3a:11:04:3a:36:5e:f4:
         87:f4:2d:fb:52:da:f5:79:74:79:a0:88:ad:e9:7f:62:99:08:
         ac:a9:14:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1VvLTeWctJ7eNGj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk5N2ZkMzQtMDZiZC00NzU4LWE4YTgtMzU4MDQzZWI4
Y2ZkMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ODBmMzlhY2YtZTk4MC00OWJmLTk1NjAtZTI4YzFhZDc0MjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgsCL1yAQ4S2PcDSJPoCk75vnIdx0gmXJ+iN
+paSF8p0GOBKPilz2diI8vmoEAxEw5epqSHyrbGiaxDUvgwOkbwknNTWrEHqCzMf
pz/Zr6CMBlhLI3L7tHBvID+aVtW8TRxnWDWmBicwdbMBR+51aaph1gf7ehtqLMpZ
rNQsAc5Q1gY47VJcIOFQHslGu26FO9ZUW/gXZGWH7BALckec6doz8iZStuCOg3lJ
L6dXV7Sao7CXtdZW+NDlpEJ6blvlHlbMX0kL33toWRw+8g+5QdPhsDBPG1iEYi0A
/D+6pSAVdUGkq0t1va/66euCbJ3K8I18Kn5bdga0YOu2lMYKCwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKYn1vUz6OvysOvEsDJtjaBzW33AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OTk3
ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgwNDNlYjhjZmQvYTkyNDBmMzEtNTRiNC0z
NzNlLTlhNjItM2ViZDcyMjNiYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTk5N2ZkMzQtMDZiZC00NzU4LWE4
YTgtMzU4MDQzZWI4Y2ZkLzk5OTdmZDM0LTA2YmQtNDc1OC1hOGE4LTM1ODA0M2Vi
OGNmZC5jcmwwHwYDVR0jBBgwFoAUXKZKUS4UEwq7AGa8IaCjg7f86tkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85OTk3ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgw
NDNlYjhjZmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbARaoKGiwtoJmotTa25EBE8ToKfQKW+IVcSzkioQIjx9OwBo5tAvEMEm
MLyCWtc3IsPAeBG4bg0k2uPEgGDejDMCDoiNsejsNLm+c7QMil+wDV59uJb6UdY2
XY9hB0y9IynT2BxRjQDt+cIQOiGTYoZigi3IElW4Fzz6u8jVxbUvxrG/wmGFsjEb
P0MDvW97lpwaP506BDZjjSiZfs3VKyNLdqAI0Qtm8mxcUUzmKC8ogmjhxPqd00sT
rYIe7rVg4bh3kWNtKVGTSvuhij71+fuW42D0HWaKCsxpzOGlb51KJDk6EQQ6Nl70
h/Qt+1La9Xl0eaCIrel/YpkIrKkUXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:14:47 2026 by rpki-client