Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a94cab63-0633-34d0-891a-5201e88ed83c.roa
File:                     a94cab63-0633-34d0-891a-5201e88ed83c.roa (raw, json)
Hash identifier:          2x7prCOAzGUrqJVlfndG86L41jhNAhFX5qtOHhBgFjo=
Subject key identifier:   39:19:16:88:13:82:53:0B:A4:4D:EA:74:19:38:52:9D:94:43:C9:CF
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CB3EC65ABDB816327A3977420
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a94cab63-0633-34d0-891a-5201e88ed83c.roa
Signing time:             Sat 31 Jan 2026 02:00:32 +0000
ROA not before:           Sat 31 Jan 2026 02:00:32 +0000
ROA not after:            Fri 01 May 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        198.1.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b3:ec:65:ab:db:81:63:27:a3:97:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jan 31 02:00:32 2026 GMT
            Not After : May  1 01:00:32 2026 GMT
        Subject: CN=1defea8c-02d9-482e-b6fd-93f4e9cc16b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:72:15:db:70:dc:54:f1:bf:30:9a:b2:29:
                    47:94:7c:58:69:70:1e:99:13:be:11:e7:e9:79:66:
                    0d:bc:13:79:55:8d:0d:9a:51:c5:71:a5:ce:ba:fd:
                    19:0b:6f:5a:22:33:67:08:7e:8a:65:7b:51:d6:ac:
                    93:24:dd:65:ec:40:7c:4c:d7:c8:10:44:4a:5a:e9:
                    b6:13:5c:cc:92:fc:33:17:08:80:e6:3d:67:30:06:
                    fd:fa:74:0f:1e:9f:d9:6a:77:49:16:57:7d:fa:40:
                    d6:b3:4a:ec:87:cf:59:d9:c0:8f:de:d2:49:75:6e:
                    da:07:64:4e:58:1d:59:5c:79:3d:11:24:26:fe:5d:
                    23:99:3c:c3:bd:9f:25:63:44:bb:ed:d9:ac:a4:6c:
                    12:9d:00:8a:98:8a:82:51:25:de:b7:cc:c5:c0:8d:
                    3b:8f:cf:d7:a0:84:53:96:c3:4e:2a:60:5c:be:2e:
                    3f:80:76:c9:40:40:4a:ab:f3:b2:58:c3:5a:3a:76:
                    bd:24:03:6d:16:bd:f5:77:7e:1f:7e:e7:e6:cb:1f:
                    dd:01:26:d6:87:44:dd:df:63:a2:22:8d:95:73:cd:
                    e7:d8:3a:fb:95:51:43:dc:19:c7:74:5f:2c:4a:9b:
                    a5:8e:70:d2:ac:18:92:05:b4:de:f3:4d:2d:63:01:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:19:16:88:13:82:53:0B:A4:4D:EA:74:19:38:52:9D:94:43:C9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a94cab63-0633-34d0-891a-5201e88ed83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2d:62:54:39:29:a5:b5:fb:92:7b:02:52:01:66:63:db:3b:
         69:c4:d2:0c:f4:0c:ed:c8:ec:46:83:d7:9a:ab:48:bb:36:13:
         73:ff:b8:64:34:25:29:0b:25:a1:1c:1c:7b:1e:ab:33:69:6c:
         f7:1c:25:3b:8f:1d:5f:29:4d:c0:47:eb:a1:bd:8f:3d:65:6b:
         ef:10:f3:57:b4:26:cb:80:11:7b:43:f3:f2:d2:bf:dd:a0:e1:
         a6:cc:98:9d:e5:ef:96:5e:99:57:c4:db:33:f9:ea:fc:ce:e5:
         4e:3d:68:fe:4e:71:9d:3e:cd:22:59:5d:b5:47:68:99:ac:44:
         78:ea:29:ef:26:fd:f9:54:78:17:1a:b6:50:7e:ea:42:5e:31:
         45:ab:b7:ce:fd:70:b3:43:1d:a3:50:a5:41:87:be:f1:cc:02:
         ce:66:41:c0:57:22:a2:6e:86:eb:d1:69:de:ee:fd:b1:4d:bc:
         9c:3a:74:33:7d:2d:a1:17:de:cf:c8:92:d8:50:5e:2e:64:db:
         1d:51:ba:a8:a5:23:71:73:fe:ed:f7:35:56:87:c2:82:83:3e:
         55:9d:06:d0:a7:88:07:3e:aa:70:f2:f6:98:80:46:cd:ad:2b:
         60:ba:8c:d6:ba:d6:c0:94:dd:f1:e5:69:91:09:3a:ef:60:44:
         24:a0:cc:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GWr24FjJ6OXdCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh
MjJmMB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk
MWRlZmVhOGMtMDJkOS00ODJlLWI2ZmQtOTNmNGU5Y2MxNmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbZyFdtw3FTxvzCasilHlHxYaXAemRO+Eefp
eWYNvBN5VY0NmlHFcaXOuv0ZC29aIjNnCH6KZXtR1qyTJN1l7EB8TNfIEERKWum2
E1zMkvwzFwiA5j1nMAb9+nQPHp/ZandJFld9+kDWs0rsh89Z2cCP3tJJdW7aB2RO
WB1ZXHk9ESQm/l0jmTzDvZ8lY0S77dmspGwSnQCKmIqCUSXet8zFwI07j8/XoIRT
lsNOKmBcvi4/gHbJQEBKq/OyWMNaOna9JANtFr31d34ffufmyx/dASbWh0Td32Oi
Io2Vc83n2Dr7lVFD3BnHdF8sSpuljnDSrBiSBbTe800tYwFj+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkZFogTglMLpE3qdBk4Up2UQ8nPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0
ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvYTk0Y2FiNjMtMDYzMy0z
NGQwLTg5MWEtNTIwMWU4OGVkODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi
NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll
YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm
NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAtYlQ5KaW1+5J7AlIBZmPbO2nE0gz0DO3I7EaD15qrSLs2E3P/uGQ0
JSkLJaEcHHseqzNpbPccJTuPHV8pTcBH66G9jz1la+8Q81e0JsuAEXtD8/LSv92g
4abMmJ3l75ZemVfE2zP56vzO5U49aP5OcZ0+zSJZXbVHaJmsRHjqKe8m/flUeBca
tlB+6kJeMUWrt879cLNDHaNQpUGHvvHMAs5mQcBXIqJuhuvRad7u/bFNvJw6dDN9
LaEX3s/IkthQXi5k2x1RuqilI3Fz/u33NVaHwoKDPlWdBtCniAc+qnDy9piARs2t
K2C6jNa61sCU3fHlaZEJOu9gRCSgzOw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:45 2026 by rpki-client