Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/67b00ca2-3fbc-378d-a946-c97b39ff71fc.roa
File:                     67b00ca2-3fbc-378d-a946-c97b39ff71fc.roa (raw, json)
Hash identifier:          rCkoAQS5d7amrREHqS+bGRQ7aEfcX5N/RRzD3+rKfnM=
Subject key identifier:   32:2C:FE:18:E1:65:BB:36:61:AB:31:1F:96:EE:16:E3:A5:7D:5D:AA
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F225CF421218D7B343DD7A900
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/67b00ca2-3fbc-378d-a946-c97b39ff71fc.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        199.235.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5c:f4:21:21:8d:7b:34:3d:d7:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=943c3ccf-9621-40aa-88ff-c263713398ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:a8:a5:59:4f:46:c2:14:2a:a1:1b:b7:62:
                    e7:2d:75:48:05:14:ff:28:14:77:67:e0:13:82:13:
                    65:65:65:f4:1b:3c:38:de:02:18:97:bb:38:58:2d:
                    e5:d6:7b:4b:40:1b:2d:9e:2b:6c:e6:ae:87:53:1e:
                    44:2a:84:eb:6a:f8:aa:68:1f:c0:75:e4:2d:74:98:
                    66:29:11:f0:1d:32:a4:a8:1b:18:65:6a:0c:c2:68:
                    0a:6a:3f:e7:a4:75:3a:36:1e:e6:7f:dd:d7:8d:8d:
                    8e:a3:cd:59:2a:55:25:dc:2e:13:94:60:d3:3f:e9:
                    c6:37:1f:ae:29:b1:31:2d:33:72:00:0d:29:ff:db:
                    e2:85:40:b4:df:83:a9:0e:bc:35:e8:d2:05:7b:41:
                    b9:58:6e:1e:25:da:c8:4e:b7:7c:8e:e9:56:f0:47:
                    5b:8c:53:50:a7:93:57:c8:4d:26:3a:14:57:b9:8a:
                    17:47:e4:91:8a:52:41:e9:ac:36:7c:47:3b:ba:ab:
                    6c:d3:87:b9:11:e7:63:37:60:49:f0:6c:73:d3:db:
                    cd:ef:40:1a:ea:41:be:19:c3:8a:e6:58:1c:05:f8:
                    e1:4e:f8:7e:d8:5e:6d:9e:84:b5:ff:89:ec:e8:16:
                    a9:b1:a1:09:81:8c:db:bd:70:2c:28:98:f2:22:8c:
                    fe:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:FE:18:E1:65:BB:36:61:AB:31:1F:96:EE:16:E3:A5:7D:5D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/67b00ca2-3fbc-378d-a946-c97b39ff71fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:86:eb:35:d9:19:ce:ae:9c:9a:3f:e7:ce:2a:a0:1b:de:
         21:bc:cb:be:31:7f:75:2d:45:2c:a4:fa:f3:3a:27:88:3e:90:
         b4:6e:b5:7e:b2:bc:d3:60:0b:af:94:5a:1e:b1:3f:5c:14:0c:
         86:a2:d8:6f:26:d2:a3:76:f1:22:a8:cb:55:55:3a:27:03:4f:
         d1:3a:98:f3:48:ee:a3:6d:ce:93:87:51:dc:32:1a:21:90:5b:
         57:28:b9:c3:36:4b:e0:c6:73:1a:d9:69:f3:04:8a:79:62:d0:
         cf:dd:a3:88:a7:1f:5e:aa:26:da:24:3a:a9:a4:47:34:b6:f4:
         fb:bb:20:0f:b3:c3:6f:46:06:fb:b7:fb:83:71:8a:d0:b4:4a:
         ee:75:f5:6d:54:a9:51:4c:b8:2a:b0:68:e4:95:57:b3:eb:66:
         31:b3:df:69:8f:be:fa:dd:43:fb:0f:f6:2f:f8:02:97:64:c7:
         1c:dc:74:42:d0:54:0d:49:fd:fc:26:06:84:80:73:17:c0:53:
         d5:0e:89:db:cc:82:6e:47:d9:f7:3a:d9:2f:b3:5f:7c:13:76:
         1b:29:f0:86:41:cb:4b:07:f2:54:e0:2b:41:ee:5a:d2:33:82:
         8d:74:09:9e:1a:b5:71:52:ef:a9:40:77:39:5e:ad:37:74:31:
         b2:be:e9:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPQhIY17ND3XqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBkMGZmN2MtNDhjYi00M2MxLWE3MmMtNmIyM2VkMzEz
N2M5MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
OTQzYzNjY2YtOTYyMS00MGFhLTg4ZmYtYzI2MzcxMzM5OGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1eopVlPRsIUKqEbt2LnLXVIBRT/KBR3Z+AT
ghNlZWX0Gzw43gIYl7s4WC3l1ntLQBstnits5q6HUx5EKoTraviqaB/AdeQtdJhm
KRHwHTKkqBsYZWoMwmgKaj/npHU6Nh7mf93XjY2Oo81ZKlUl3C4TlGDTP+nGNx+u
KbExLTNyAA0p/9vihUC034OpDrw16NIFe0G5WG4eJdrITrd8julW8EdbjFNQp5NX
yE0mOhRXuYoXR+SRilJB6aw2fEc7uqts04e5EedjN2BJ8Gxz09vN70Aa6kG+GcOK
5lgcBfjhTvh+2F5tnoS1/4ns6BapsaEJgYzbvXAsKJjyIoz+qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIs/hjhZbs2YasxH5buFuOlfV2qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQw
ZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIzZWQzMTM3YzkvNjdiMDBjYTItM2ZiYy0z
NzhkLWE5NDYtYzk3YjM5ZmY3MWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTBkMGZmN2MtNDhjYi00M2MxLWE3
MmMtNmIyM2VkMzEzN2M5LzUwZDBmZjdjLTQ4Y2ItNDNjMS1hNzJjLTZiMjNlZDMx
MzdjOS5jcmwwHwYDVR0jBBgwFoAU5ryzmOgkaykMsEVrRSpIIhFT1igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS81MGQwZmY3Yy00OGNiLTQzYzEtYTcyYy02YjIz
ZWQzMTM3YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+tuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLxhus12RnOrpyaP+fOKqAb3iG8y74xf3UtRSyk+vM6J4g+kLRutX6y
vNNgC6+UWh6xP1wUDIai2G8m0qN28SKoy1VVOicDT9E6mPNI7qNtzpOHUdwyGiGQ
W1coucM2S+DGcxrZafMEinli0M/do4inH16qJtokOqmkRzS29Pu7IA+zw29GBvu3
+4NxitC0Su519W1UqVFMuCqwaOSVV7PrZjGz32mPvvrdQ/sP9i/4ApdkxxzcdELQ
VA1J/fwmBoSAcxfAU9UOidvMgm5H2fc62S+zX3wTdhsp8IZBy0sH8lTgK0HuWtIz
go10CZ4atXFS76lAdzlerTd0MbK+6XA=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:17:32 2026 by rpki-client