Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2c2835-fa77-370c-8faa-62321153a639.roa
File:                     be2c2835-fa77-370c-8faa-62321153a639.roa (raw, json)
Hash identifier:          fA2kvmCUdIAwbC3H4EcRVmTnHiMTeL+B9jkNJVM43V4=
Subject key identifier:   85:39:9E:E0:FF:CF:AA:B8:C1:5D:FF:39:55:6A:1A:99:67:B4:3D:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF1822C1E1727F5321FBEE780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2c2835-fa77-370c-8faa-62321153a639.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        184.50.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:2c:1e:17:27:f5:32:1f:be:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=2a49ffa5-b860-4c3a-b0b3-599b8d85f548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:5e:33:46:41:77:d4:3f:ea:85:b9:5e:1a:
                    79:81:28:c8:2f:55:62:b6:33:61:40:d5:27:0b:26:
                    6d:fe:cc:35:84:70:97:6d:08:5e:8d:b1:cb:b3:88:
                    dd:f6:5c:99:24:fb:8e:02:84:b5:0a:10:59:35:a6:
                    b0:6c:c1:b3:03:3f:31:1e:54:14:52:60:02:94:c6:
                    24:51:d1:f9:ea:86:57:67:68:f3:79:8a:eb:08:20:
                    b7:fc:bf:56:74:a8:2a:7f:ac:76:cd:0c:eb:3b:d1:
                    af:19:03:0f:5f:59:ec:e5:24:ff:f3:5d:0e:a5:7a:
                    9d:eb:be:61:51:0a:29:69:5f:c8:08:54:2c:29:a5:
                    a8:98:dd:55:54:2b:00:51:cf:47:a1:5c:8c:cf:b5:
                    c9:02:3d:b0:f9:81:f6:06:84:51:52:fb:bf:a4:f1:
                    6f:83:a5:f4:6f:6c:b4:b0:d1:82:78:89:f7:ce:82:
                    f4:f7:44:dd:72:de:ff:a9:5f:17:c9:ef:45:a5:aa:
                    72:0b:ca:55:4b:74:f3:3f:11:ea:55:bb:79:03:c5:
                    1c:ca:c6:45:05:fc:0f:52:75:32:ef:73:9e:61:7f:
                    cf:11:c8:a5:bd:8e:19:cc:54:88:13:47:22:71:0c:
                    04:8b:d6:4c:17:c6:8f:11:2a:f9:70:7b:af:50:70:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:39:9E:E0:FF:CF:AA:B8:C1:5D:FF:39:55:6A:1A:99:67:B4:3D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2c2835-fa77-370c-8faa-62321153a639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c9:5a:24:2b:4b:d2:47:cd:06:31:1f:ad:28:fc:c4:11:5c:
         23:1e:fb:cd:fa:ba:d4:fb:07:1d:c4:64:43:0d:d4:b3:87:fd:
         c4:f9:cf:50:86:af:64:ec:37:e0:4a:bd:7f:1f:ce:fc:9b:a1:
         87:73:12:81:b4:d6:10:94:43:1c:49:29:e0:36:41:24:07:c2:
         08:e2:f7:10:a5:bf:57:62:18:bb:26:8c:7e:16:ba:6d:75:eb:
         a5:ef:f1:b8:70:cc:4e:fd:b5:2a:50:9d:57:df:83:c9:23:16:
         ca:08:56:e5:26:65:6f:14:87:d8:f0:5f:6a:87:b6:38:d3:5e:
         8d:7e:bf:93:cc:19:c1:9c:3f:74:60:63:54:ff:19:a6:e1:af:
         16:70:2c:70:e5:94:ef:6a:f4:f8:28:0d:3f:dd:8f:5e:45:59:
         ea:e9:23:96:93:6b:6e:1a:a3:c4:04:39:1a:5a:92:11:ac:ef:
         00:3f:f4:d5:7f:35:d6:2e:eb:b4:65:dd:61:0d:bf:4f:60:14:
         53:14:9b:a8:f4:05:3d:60:9d:95:57:fe:84:99:8c:01:43:13:
         6e:e1:e1:1f:d3:03:c9:b7:19:2a:45:49:fc:ce:9a:e4:80:a7:
         58:65:53:78:ad:b6:53:96:09:9e:8b:ce:f7:80:c6:f6:73:84:
         75:e2:9b:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgiweFyf1Mh++54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
MmE0OWZmYTUtYjg2MC00YzNhLWIwYjMtNTk5YjhkODVmNTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFeM0ZBd9Q/6oW5Xhp5gSjIL1VitjNhQNUn
CyZt/sw1hHCXbQhejbHLs4jd9lyZJPuOAoS1ChBZNaawbMGzAz8xHlQUUmAClMYk
UdH56oZXZ2jzeYrrCCC3/L9WdKgqf6x2zQzrO9GvGQMPX1ns5ST/810OpXqd675h
UQopaV/ICFQsKaWomN1VVCsAUc9HoVyMz7XJAj2w+YH2BoRRUvu/pPFvg6X0b2y0
sNGCeIn3zoL090Tdct7/qV8Xye9FpapyC8pVS3TzPxHqVbt5A8UcysZFBfwPUnUy
73OeYX/PEcilvY4ZzFSIE0cicQwEi9ZMF8aPESr5cHuvUHB1jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIU5nuD/z6q4wV3/OVVqGplntD01MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmUyYzI4MzUtZmE3Ny0z
NzBjLThmYWEtNjIzMjExNTNhNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuDKwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXJWiQrS9JHzQYxH60o/MQRXCMe+836utT7Bx3EZEMN1LOH/cT5z1CG
r2TsN+BKvX8fzvyboYdzEoG01hCUQxxJKeA2QSQHwgji9xClv1diGLsmjH4Wum11
66Xv8bhwzE79tSpQnVffg8kjFsoIVuUmZW8Uh9jwX2qHtjjTXo1+v5PMGcGcP3Rg
Y1T/GabhrxZwLHDllO9q9PgoDT/dj15FWerpI5aTa24ao8QEORpakhGs7wA/9NV/
NdYu67Rl3WENv09gFFMUm6j0BT1gnZVX/oSZjAFDE27h4R/TA8m3GSpFSfzOmuSA
p1hlU3ittlOWCZ6LzveAxvZzhHXim18=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:54:54 2026 by rpki-client