Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa
File:                     31de5975-70d3-38db-af47-39cb7d439a32.roa (raw, json)
Hash identifier:          M4EkEjhIz/RQNsydLcQqDABsIdqABp8Ezd3U0XfFhJE=
Subject key identifier:   C9:79:C4:9A:23:EA:95:F2:D8:E7:38:99:7D:BF:60:06:C8:01:AE:05
Certificate issuer:       /CN=f12b39cc-0108-4db1-b059-b4833b53c1a3
Certificate serial:       010D0C9F4328584DEF4602DE1C55148A04927B40
Authority key identifier: 14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     3450
IP address blocks:        192.249.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:02:de:1c:55:14:8a:04:92:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12b39cc-0108-4db1-b059-b4833b53c1a3
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=430d83c1-c980-43d8-b014-8e17789ea8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:f4:86:48:ed:48:57:74:08:a7:6f:e5:f9:
                    58:dc:09:5e:49:c7:65:3a:f9:2d:fd:58:70:39:08:
                    40:f8:ab:2c:97:7a:b7:e4:d5:f3:d3:a8:2a:43:00:
                    d2:72:c0:e0:4a:a2:d6:83:d2:9b:ff:66:dc:5f:84:
                    d8:97:04:af:44:5d:97:5c:3b:7b:96:c0:3c:51:8c:
                    d7:77:61:bb:8a:4b:b4:39:85:45:a9:cd:a4:38:5c:
                    1b:7b:72:f2:09:8d:56:d7:3e:0a:86:41:2f:a6:e1:
                    01:b6:77:f8:60:b6:d9:ba:65:bd:10:2d:a9:91:0b:
                    a0:a1:d8:e9:e8:90:71:44:15:22:b5:66:96:6d:da:
                    9c:dd:c7:6d:a8:06:3f:fb:8a:85:cd:02:fb:99:2e:
                    05:bb:54:69:0e:35:67:d8:71:4f:be:d1:25:13:73:
                    ab:5e:6a:2f:c2:27:83:43:a1:19:d7:9e:6a:84:94:
                    85:f1:03:b0:55:c5:40:a0:ac:98:27:98:8a:0d:b2:
                    0e:09:5a:e0:2f:bd:42:1a:ac:c1:d6:9c:67:1d:35:
                    dd:35:55:7f:21:bd:c9:02:a0:b1:d1:2e:69:09:f7:
                    aa:7e:22:fb:ab:a3:cc:21:33:a2:cb:a3:25:ac:ef:
                    e7:42:dc:22:4f:09:5a:ef:8d:42:a7:4e:51:7e:42:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:C4:9A:23:EA:95:F2:D8:E7:38:99:7D:BF:60:06:C8:01:AE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/31de5975-70d3-38db-af47-39cb7d439a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3/f12b39cc-0108-4db1-b059-b4833b53c1a3.crl

            X509v3 Authority Key Identifier:
                keyid:14:E1:61:53:5C:BC:2F:83:DD:08:30:20:6B:35:12:AD:DA:E6:8F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f12b39cc-0108-4db1-b059-b4833b53c1a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.249.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:ff:e1:40:a0:9f:be:3a:a8:8a:35:d9:14:d8:3c:f8:fe:
         f7:83:f8:d5:4d:e2:40:72:50:c1:79:4b:63:e5:11:c2:84:b3:
         12:2f:d5:d6:71:0b:a3:3f:f1:a1:3a:5b:7c:e4:f6:be:20:97:
         2c:fd:46:86:d6:b7:ad:02:c3:14:7a:07:ac:c4:d1:f8:62:b3:
         79:e1:d6:09:18:26:df:c2:4c:33:ee:b5:2a:5b:a5:7c:b5:ef:
         01:f2:26:d8:4c:f8:b6:a1:51:3c:3d:0d:dc:59:0b:b7:12:ad:
         8c:e3:9d:a3:55:15:d4:18:ce:cf:d8:6d:a5:0f:0b:ec:7e:ae:
         f7:ae:f6:17:25:33:bf:f4:14:b8:1e:6e:0f:ee:d2:7a:f4:31:
         07:63:2d:02:07:f4:12:bf:90:10:a6:de:ed:8c:87:73:de:5a:
         52:26:c4:9c:46:c6:a0:75:45:9a:eb:f7:ae:3a:41:cc:06:24:
         27:25:d0:6c:b9:42:ea:b6:a1:62:45:f3:02:65:d1:a8:03:7f:
         6c:91:cf:67:54:a0:6b:e0:7d:0a:fc:94:1d:b1:7e:9d:92:a6:
         39:3a:b7:14:5d:24:d2:d8:65:a4:cd:ff:1c:c0:dd:3e:a8:82:
         32:d7:aa:50:59:b8:34:4f:3d:2c:e6:ee:59:f9:00:79:ba:7b:
         5e:6d:4f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRgLeHFUUigSSe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjEyYjM5Y2MtMDEwOC00ZGIxLWIwNTktYjQ4MzNiNTNj
MWEzMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk
NDMwZDgzYzEtYzk4MC00M2Q4LWIwMTQtOGUxNzc4OWVhOGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCv0hkjtSFd0CKdv5flY3AleScdlOvkt/Vhw
OQhA+Kssl3q35NXz06gqQwDScsDgSqLWg9Kb/2bcX4TYlwSvRF2XXDt7lsA8UYzX
d2G7iku0OYVFqc2kOFwbe3LyCY1W1z4KhkEvpuEBtnf4YLbZumW9EC2pkQugodjp
6JBxRBUitWaWbdqc3cdtqAY/+4qFzQL7mS4Fu1RpDjVn2HFPvtElE3OrXmovwieD
Q6EZ155qhJSF8QOwVcVAoKyYJ5iKDbIOCVrgL71CGqzB1pxnHTXdNVV/Ib3JAqCx
0S5pCfeqfiL7q6PMITOiy6MlrO/nQtwiTwla741Cp05RfkLNWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMl5xJoj6pXy2Oc4mX2/YAbIAa4FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJi
MzljYy0wMTA4LTRkYjEtYjA1OS1iNDgzM2I1M2MxYTMvMzFkZTU5NzUtNzBkMy0z
OGRiLWFmNDctMzljYjdkNDM5YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjEyYjM5Y2MtMDEwOC00ZGIxLWIw
NTktYjQ4MzNiNTNjMWEzL2YxMmIzOWNjLTAxMDgtNGRiMS1iMDU5LWI0ODMzYjUz
YzFhMy5jcmwwHwYDVR0jBBgwFoAUFOFhU1y8L4PdCDAgazUSrdrmj9MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9mMTJiMzljYy0wMTA4LTRkYjEtYjA1OS1iNDgz
M2I1M2MxYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwPkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFT1/+FAoJ++OqiKNdkU2Dz4/veD+NVN4kByUMF5S2PlEcKEsxIv1dZx
C6M/8aE6W3zk9r4glyz9RobWt60CwxR6B6zE0fhis3nh1gkYJt/CTDPutSpbpXy1
7wHyJthM+LahUTw9DdxZC7cSrYzjnaNVFdQYzs/YbaUPC+x+rveu9hclM7/0FLge
bg/u0nr0MQdjLQIH9BK/kBCm3u2Mh3PeWlImxJxGxqB1RZrr9646QcwGJCcl0Gy5
Quq2oWJF8wJl0agDf2yRz2dUoGvgfQr8lB2xfp2Spjk6txRdJNLYZaTN/xzA3T6o
gjLXqlBZuDRPPSzm7ln5AHm6e15tT2U=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:51:28 2026 by rpki-client