Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa
File:                     c4d953b3-7c7f-365a-8946-e94b12d360e2.roa (raw, json)
Hash identifier:          YMF/15WeXcFI/LgU8RXUQYsm4eGq8/LbZ5YHi9Z1uys=
Subject key identifier:   13:B9:4D:6C:AC:50:BC:B9:AD:5D:5C:87:D4:08:87:0D:C3:FB:74:6D
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584D492A7164B4370862523FFCA0
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     1239
IP address blocks:        72.14.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:71:64:b4:37:08:62:52:3f:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=aa88937f-9d0b-413c-9ff2-0b906515a10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:eb:88:15:f4:7c:17:c1:e6:a2:7f:ce:33:
                    eb:01:0c:73:00:5e:e8:e1:8e:88:6b:d7:08:21:0c:
                    82:df:e4:ba:3a:3b:c7:76:26:42:aa:56:cb:8d:f5:
                    49:51:68:92:b1:38:2e:f2:8f:6d:99:e4:62:41:de:
                    d3:37:cc:a2:67:1c:55:49:2f:05:e8:71:ed:0c:17:
                    4a:a1:9c:62:b0:90:66:b7:bf:31:af:a1:91:fa:94:
                    b6:ee:7a:69:01:0e:1a:29:44:9e:7a:ac:ee:ff:b4:
                    3b:7b:0a:b4:7d:c1:e1:af:b8:45:e4:57:36:6d:6f:
                    84:cc:6a:01:08:e0:70:6a:ff:72:0a:6d:34:0f:89:
                    df:bd:64:e6:58:7c:14:9a:fd:25:32:54:b8:aa:7b:
                    e7:90:8c:10:a7:c9:31:37:7f:3d:47:db:37:7b:a8:
                    0c:e0:96:b0:3d:05:4a:29:5c:ad:4d:c1:f6:8e:ec:
                    31:c8:97:2e:2e:da:ff:c4:a0:3a:76:f2:ac:cb:f3:
                    31:92:c4:8f:b1:06:92:19:e2:1c:95:4d:a3:a4:08:
                    1f:42:9a:cf:0a:c2:ba:b6:18:06:f3:cb:29:7f:c6:
                    4f:fc:aa:84:16:b8:19:8e:59:fc:35:c5:e2:28:24:
                    77:f6:23:f6:ed:1c:51:20:e8:13:fe:ea:e3:85:4e:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:4D:6C:AC:50:BC:B9:AD:5D:5C:87:D4:08:87:0D:C3:FB:74:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/c4d953b3-7c7f-365a-8946-e94b12d360e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:7c:9d:ee:92:67:26:1e:0a:dd:1a:e7:ee:28:d7:a8:14:
         69:bc:5b:18:11:fc:04:28:4f:69:79:12:fd:77:01:c3:26:cd:
         c9:43:6d:dc:9e:d9:64:3c:03:b6:99:e4:50:25:04:72:f1:bc:
         80:73:20:78:91:c7:b0:4b:cb:a7:9a:41:f0:1a:f8:e8:22:57:
         c5:be:ec:c4:e9:c3:d2:0b:f8:6c:a1:0a:d4:5a:31:f7:b6:8f:
         50:14:c5:32:eb:18:45:a8:cf:09:d6:e8:ce:bd:47:45:08:37:
         03:2f:48:79:d8:8b:97:a5:ae:7b:6c:93:9a:e4:51:07:48:d5:
         8d:96:e7:ff:39:99:f3:57:23:c2:db:3c:66:b2:c6:ee:7d:50:
         82:d5:5b:f0:92:c1:84:03:d5:4d:ba:e8:b7:17:c7:f2:d4:73:
         bf:dd:0c:71:51:d3:ac:32:de:2a:cc:0c:f4:7b:08:0b:2f:96:
         1e:80:57:e4:fe:24:73:9d:86:95:06:9e:38:43:e5:98:4c:b3:
         3b:ef:1b:55:a8:5f:5e:67:8a:5d:0c:0f:81:3c:04:4e:bb:b2:
         27:87:f7:ea:49:e1:b2:c6:42:9b:0f:3e:52:da:d3:c2:cc:91:
         89:28:db:3f:13:88:82:ec:74:d2:1f:fc:98:a4:c9:f4:ae:8d:
         48:62:0b:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnFktDcIYlI//KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
YWE4ODkzN2YtOWQwYi00MTNjLTlmZjItMGI5MDY1MTVhMTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6rriBX0fBfB5qJ/zjPrAQxzAF7o4Y6Ia9cI
IQyC3+S6OjvHdiZCqlbLjfVJUWiSsTgu8o9tmeRiQd7TN8yiZxxVSS8F6HHtDBdK
oZxisJBmt78xr6GR+pS27nppAQ4aKUSeeqzu/7Q7ewq0fcHhr7hF5Fc2bW+EzGoB
COBwav9yCm00D4nfvWTmWHwUmv0lMlS4qnvnkIwQp8kxN389R9s3e6gM4JawPQVK
KVytTcH2juwxyJcuLtr/xKA6dvKsy/MxksSPsQaSGeIclU2jpAgfQprPCsK6thgG
88spf8ZP/KqEFrgZjln8NcXiKCR39iP27RxRIOgT/urjhU4IMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBO5TWysULy5rV1ch9QIhw3D+3RtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvYzRkOTUzYjMtN2M3Zi0z
NjVhLTg5NDYtZTk0YjEyZDM2MGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGKfJ3ukmcmHgrdGufuKNeoFGm8WxgR/AQoT2l5Ev13AcMmzclDbdye
2WQ8A7aZ5FAlBHLxvIBzIHiRx7BLy6eaQfAa+OgiV8W+7MTpw9IL+GyhCtRaMfe2
j1AUxTLrGEWozwnW6M69R0UINwMvSHnYi5elrntsk5rkUQdI1Y2W5/85mfNXI8Lb
PGayxu59UILVW/CSwYQD1U266LcXx/LUc7/dDHFR06wy3irMDPR7CAsvlh6AV+T+
JHOdhpUGnjhD5ZhMszvvG1WoX15nil0MD4E8BE67sieH9+pJ4bLGQpsPPlLa08LM
kYko2z8TiILsdNIf/JikyfSujUhiCz8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:23 2026 by rpki-client