Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/060abf6b-4497-3630-845c-bc21f6e5d1be.roa
File:                     060abf6b-4497-3630-845c-bc21f6e5d1be.roa (raw, json)
Hash identifier:          u3MpqnxjqTshTpRry2iJxwHQ6qrWXEwgcZRogXL0c/0=
Subject key identifier:   E5:43:A0:CD:F1:51:9A:48:E1:DA:D1:A9:60:AB:5D:8C:E5:60:33:A5
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F1037A902C55144FFCCB51480
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/060abf6b-4497-3630-845c-bc21f6e5d1be.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        199.235.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a9:02:c5:51:44:ff:cc:b5:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=c02f65e1-51ae-4e67-9172-25a7d3591377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:3a:39:5e:a7:e8:03:f9:bb:b5:a5:d6:ab:
                    e2:9d:45:0a:bd:61:94:ad:66:3c:6f:8b:22:6a:b7:
                    fb:0a:89:29:31:4c:98:81:ad:e4:c7:3a:8d:1c:90:
                    d2:24:41:3c:0b:60:6a:2e:13:17:b6:da:2b:cc:85:
                    4d:fa:90:ca:05:cf:07:f0:57:ed:d3:30:b9:b7:b2:
                    13:9d:e4:4d:51:6f:90:a7:a1:e4:ad:9c:de:93:99:
                    cf:e0:61:81:17:f3:5a:e3:1c:b4:bc:4c:4b:85:13:
                    a3:4f:e6:e9:9c:13:52:66:06:63:c6:77:74:90:9d:
                    d4:e6:4d:37:0e:d5:71:10:19:59:90:eb:93:00:d8:
                    ef:e0:15:75:e5:b1:6b:a9:06:57:ec:11:fd:e9:0b:
                    75:5f:0a:12:9c:2d:af:c2:97:ef:0e:f9:2f:69:de:
                    84:3b:c2:11:d9:2b:6d:16:e2:33:0a:9d:3f:d3:97:
                    54:26:21:d5:cb:74:f1:10:9a:42:bd:74:ea:c2:e0:
                    68:4d:22:76:6c:b0:85:56:1c:ec:11:5a:b6:0d:92:
                    47:6e:1f:25:e7:af:f6:4b:fd:3b:ba:1e:df:0f:f8:
                    46:ac:6d:70:09:2d:1f:a3:be:97:66:f5:78:3a:70:
                    9c:c2:e7:7d:b5:54:60:a8:28:1b:8d:74:d7:1b:f5:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:A0:CD:F1:51:9A:48:E1:DA:D1:A9:60:AB:5D:8C:E5:60:33:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/060abf6b-4497-3630-845c-bc21f6e5d1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:23:d6:1f:f5:4c:73:56:eb:44:f7:8e:11:d9:a7:f2:a5:e3:
         84:a8:74:99:e0:33:f8:3d:13:da:58:41:ca:99:78:08:d9:0e:
         de:a8:c7:6d:45:79:02:38:a2:4b:da:7e:f6:ab:ae:2a:0c:01:
         ae:62:c9:c5:d7:41:54:47:25:9b:3c:35:44:69:96:96:16:ff:
         1c:7b:1c:bb:10:d4:3f:cb:cf:f2:df:41:9f:74:0d:36:70:6e:
         c7:82:f4:96:35:cd:33:93:c6:60:61:f6:b8:de:9b:58:dc:d9:
         e3:d6:d1:17:32:71:f3:ce:bf:bc:7b:41:36:da:42:c4:a3:19:
         d4:af:3f:b6:2f:94:f4:d8:d4:da:d8:d7:7b:1c:da:0c:c8:06:
         a1:62:95:4c:b1:0f:c2:cb:3b:0d:c4:bf:15:7a:70:d1:cb:99:
         6a:b7:dd:57:29:26:ad:b4:1c:a6:ed:2e:f4:c3:27:ed:1e:f0:
         7c:7a:aa:d0:cb:5f:78:be:83:58:8f:de:10:41:5b:25:cf:b5:
         e5:3b:8f:80:1d:0f:2b:0d:b5:1a:81:11:85:47:12:27:4a:b4:
         d0:a1:ef:34:6e:24:25:29:f0:95:2f:f4:a5:cf:33:28:93:52:
         c1:7f:ce:a4:be:92:07:36:13:09:69:fb:a5:1e:53:45:fd:aa:
         d0:12:4f:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6kCxVFE/8y1FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
YzAyZjY1ZTEtNTFhZS00ZTY3LTkxNzItMjVhN2QzNTkxMzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms06OV6n6AP5u7Wl1qvinUUKvWGUrWY8b4si
arf7CokpMUyYga3kxzqNHJDSJEE8C2BqLhMXttorzIVN+pDKBc8H8Fft0zC5t7IT
neRNUW+Qp6HkrZzek5nP4GGBF/Na4xy0vExLhROjT+bpnBNSZgZjxnd0kJ3U5k03
DtVxEBlZkOuTANjv4BV15bFrqQZX7BH96Qt1XwoSnC2vwpfvDvkvad6EO8IR2Stt
FuIzCp0/05dUJiHVy3TxEJpCvXTqwuBoTSJ2bLCFVhzsEVq2DZJHbh8l56/2S/07
uh7fD/hGrG1wCS0fo76XZvV4OnCcwud9tVRgqCgbjXTXG/VffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOVDoM3xUZpI4drRqWCrXYzlYDOlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvMDYwYWJmNmItNDQ5Ny0z
NjMwLTg0NWMtYmMyMWY2ZTVkMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+tAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgj1h/1THNW60T3jhHZp/Kl44SodJngM/g9E9pYQcqZeAjZDt6ox21F
eQI4okvafvarrioMAa5iycXXQVRHJZs8NURplpYW/xx7HLsQ1D/Lz/LfQZ90DTZw
bseC9JY1zTOTxmBh9rjem1jc2ePW0RcycfPOv7x7QTbaQsSjGdSvP7YvlPTY1NrY
13sc2gzIBqFilUyxD8LLOw3EvxV6cNHLmWq33VcpJq20HKbtLvTDJ+0e8Hx6qtDL
X3i+g1iP3hBBWyXPteU7j4AdDysNtRqBEYVHEidKtNCh7zRuJCUp8JUv9KXPMyiT
UsF/zqS+kgc2Ewlp+6UeU0X9qtAST18=
-----END CERTIFICATE-----