Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa
File:                     04477d9c-7b78-3e6f-8e26-aad090d37c24.roa (raw, json)
Hash identifier:          eBEwXdQmSwA/Novjen3FtAc6YpOAcmdCE65cv88m9Ig=
Subject key identifier:   B3:24:DA:7D:2C:F6:4E:45:21:E8:C9:7B:E8:88:3B:34:36:DC:35:13
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584D47C4E8056897156AAFE7F500
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     5769
IP address blocks:        198.252.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e8:05:68:97:15:6a:af:e7:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=e3d3eead-eeac-48f7-bec5-260652cfcd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:50:15:9e:62:43:ec:2e:73:38:62:60:98:
                    19:86:ba:c0:6c:da:1f:74:e4:72:35:10:bf:ab:bc:
                    56:b0:75:57:f9:69:90:0c:20:47:b8:e3:9c:5d:d0:
                    74:f3:89:b8:60:2f:a5:98:f6:02:44:03:56:f2:7b:
                    b7:44:2f:89:04:ec:68:7b:4f:b9:fb:97:79:04:4a:
                    2f:f3:42:f5:b7:0e:81:f0:3b:30:af:c5:a4:9f:48:
                    56:98:22:d6:36:02:1c:12:a9:fa:af:7d:19:12:b2:
                    0b:b7:31:76:08:bf:41:91:a3:01:23:93:78:ac:f2:
                    09:ae:f8:0a:39:e6:f7:f8:59:45:ca:77:81:20:2b:
                    63:64:26:a8:d7:94:36:d0:66:0f:c8:37:15:a2:39:
                    fc:6d:36:3f:c6:da:c2:db:7d:f0:01:84:dd:fb:7e:
                    6f:8e:17:fe:7d:f0:c6:8b:02:e5:32:0f:46:55:b7:
                    0e:16:18:66:c1:4a:3d:cb:25:8f:c0:86:0f:e6:fb:
                    eb:c5:d3:a9:5a:a3:3b:1c:33:bb:aa:24:6f:45:97:
                    aa:91:11:7d:e5:b7:78:31:f5:00:ed:d7:f1:e8:9f:
                    ea:85:1d:39:f5:f7:cc:ab:5b:84:a5:a9:ff:63:09:
                    18:bf:f5:25:01:20:41:17:73:9c:45:2d:cb:5f:98:
                    78:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:DA:7D:2C:F6:4E:45:21:E8:C9:7B:E8:88:3B:34:36:DC:35:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/04477d9c-7b78-3e6f-8e26-aad090d37c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:58:89:1c:70:fb:a5:39:87:19:13:a0:31:0a:ff:b7:1f:b5:
         d3:89:66:08:64:e3:e8:34:23:ef:1b:d3:06:10:cb:6e:54:d1:
         be:e7:d8:fd:f9:4c:8b:b0:d5:75:02:d8:13:0f:32:ab:35:18:
         67:d5:71:6e:28:76:a7:5b:10:cd:64:f9:a9:5c:96:a3:b9:f5:
         2d:1e:51:1d:a4:a3:2a:ae:3f:51:9b:ba:14:7b:37:dc:68:f5:
         28:c0:4f:e4:fa:4a:38:ac:80:14:4a:4e:59:22:46:38:e0:ae:
         0b:42:fb:29:8e:c2:53:69:6c:8b:37:ac:c5:db:4f:8d:7e:58:
         2d:91:83:28:9e:32:5d:ef:82:65:8f:ac:dc:2e:a6:2f:e9:4f:
         7f:44:2e:67:2e:80:ea:79:3f:90:d6:a0:49:b0:0c:9a:e2:85:
         34:59:1d:a6:54:28:c2:d9:37:12:46:77:0e:02:4c:13:3c:9b:
         10:fa:ff:7d:4d:0e:1d:5a:be:07:8a:bf:ef:cb:61:a2:67:f4:
         c1:19:1a:68:cd:f8:82:21:cd:76:29:e2:80:49:8f:21:c7:33:
         86:c6:c7:04:b3:04:ab:9e:c7:be:c9:f4:2f:aa:87:4e:ed:0c:
         7d:0f:74:af:f3:87:2d:01:c9:a6:df:58:dd:99:95:09:7d:0e:
         a5:c1:4e:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOgFaJcVaq/n9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
ZTNkM2VlYWQtZWVhYy00OGY3LWJlYzUtMjYwNjUyY2ZjZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtlQFZ5iQ+wuczhiYJgZhrrAbNofdORyNRC/
q7xWsHVX+WmQDCBHuOOcXdB084m4YC+lmPYCRANW8nu3RC+JBOxoe0+5+5d5BEov
80L1tw6B8Dswr8Wkn0hWmCLWNgIcEqn6r30ZErILtzF2CL9BkaMBI5N4rPIJrvgK
Oeb3+FlFyneBICtjZCao15Q20GYPyDcVojn8bTY/xtrC233wAYTd+35vjhf+ffDG
iwLlMg9GVbcOFhhmwUo9yyWPwIYP5vvrxdOpWqM7HDO7qiRvRZeqkRF95bd4MfUA
7dfx6J/qhR059ffMq1uEpan/YwkYv/UlASBBF3OcRS3LX5h4gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMk2n0s9k5FIejJe+iIOzQ23DUTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMDQ0NzdkOWMtN2I3OC0z
ZTZmLThlMjYtYWFkMDkwZDM3YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvylMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRYiRxw+6U5hxkToDEK/7cftdOJZghk4+g0I+8b0wYQy25U0b7n2P35
TIuw1XUC2BMPMqs1GGfVcW4odqdbEM1k+alclqO59S0eUR2koyquP1GbuhR7N9xo
9SjAT+T6SjisgBRKTlkiRjjgrgtC+ymOwlNpbIs3rMXbT41+WC2RgyieMl3vgmWP
rNwupi/pT39ELmcugOp5P5DWoEmwDJrihTRZHaZUKMLZNxJGdw4CTBM8mxD6/31N
Dh1avgeKv+/LYaJn9MEZGmjN+IIhzXYp4oBJjyHHM4bGxwSzBKuex77J9C+qh07t
DH0PdK/zhy0ByabfWN2ZlQl9DqXBTtw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:06 2026 by rpki-client