Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa
File:                     89dc4be2-10ea-36db-bac9-0f0528784800.roa (raw, json)
Hash identifier:          HbxqYZvW631gDpLuJNHq5Bs4C2t9PYVzYPCSYo/O33Y=
Subject key identifier:   4C:A2:53:F8:9A:EA:E6:19:A8:52:AB:8A:BC:A0:C7:8F:0E:BA:62:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E058867EB42F9540170660
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        67.54.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:58:86:7e:b4:2f:95:40:17:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=33cd120e-6c67-41f1-abb6-f5f61eaa17c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0c:9a:74:6a:03:36:4d:07:2b:33:52:7b:d0:
                    3a:a7:79:d4:ba:9c:c3:08:20:20:66:53:cb:85:68:
                    3a:46:cd:35:ae:86:dc:1b:0a:40:ce:2a:ca:f0:fc:
                    09:0d:b2:e4:03:66:0a:6c:98:00:cd:2d:dd:81:72:
                    b0:d9:28:b9:4d:82:15:2f:71:67:0f:c8:a0:be:c6:
                    8a:8f:2f:95:c1:36:f1:39:4a:2f:bc:f4:47:ec:a7:
                    50:3e:8f:70:98:a6:87:9d:ca:b9:0a:19:d5:dd:a4:
                    fb:6b:a0:57:fa:f8:6a:01:fa:65:63:30:08:a9:83:
                    9b:de:89:2d:c2:af:62:01:91:69:b4:3e:5d:87:49:
                    96:83:25:40:09:cf:95:a3:33:cc:c2:78:43:5d:22:
                    1d:1b:db:41:7f:ef:42:39:3d:96:c3:a8:4c:27:6b:
                    e6:37:30:c9:ab:b9:ef:1f:3c:70:82:c6:15:23:62:
                    cf:74:fd:00:f7:47:1a:36:c3:b8:aa:b5:ab:b4:eb:
                    27:6d:6d:a2:0b:09:da:b8:7e:a5:c6:c8:e5:47:8d:
                    0c:7c:55:65:ac:eb:bf:24:fa:fe:3a:a2:52:2b:e6:
                    4e:4a:24:3a:ba:05:46:11:d9:2c:61:af:0b:56:68:
                    bc:98:c9:87:ef:3e:09:9d:85:36:fa:94:14:af:0e:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:53:F8:9A:EA:E6:19:A8:52:AB:8A:BC:A0:C7:8F:0E:BA:62:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3a:ce:26:fb:f4:74:77:73:21:78:58:3a:fb:f7:9a:72:d1:
         ee:8a:73:54:2e:99:1c:eb:1f:5d:c2:87:91:12:43:ed:48:a9:
         e1:08:d2:e8:94:a0:f3:72:2f:07:30:e9:be:a3:02:c5:e5:75:
         0e:b9:d5:d9:99:71:f0:0f:45:1b:61:fa:1b:7a:f0:e6:e8:0d:
         a6:12:87:b7:4f:38:3b:a4:49:ea:2f:72:0d:23:92:28:11:c1:
         ae:f4:a8:ef:bf:71:21:a1:e4:a3:05:85:ac:7c:8f:f3:66:af:
         00:b9:d5:88:c5:48:d6:0b:42:ee:ee:e0:ff:48:30:db:41:23:
         07:8d:fd:d1:68:58:76:5d:e9:97:5a:2c:c6:e0:56:a5:a4:08:
         af:66:ff:03:61:e6:2e:d9:d5:cf:30:e1:65:25:15:5d:f1:e0:
         f3:a6:fe:ab:f8:57:42:83:1d:e5:87:0c:a3:28:5d:3a:e2:af:
         1a:e5:03:0b:c3:4e:0f:cb:63:18:ca:f9:0f:b5:e4:a0:e7:b6:
         d3:08:f6:4a:2f:5c:a9:12:b4:2a:ca:37:27:31:e2:16:2e:e6:
         a5:cf:45:19:ee:88:6d:a1:1b:2e:09:c0:12:a7:c3:7c:36:c7:
         dc:8b:81:70:48:8d:24:34:93:3c:bf:c5:1f:c2:7d:50:08:b7:
         9e:3a:b9:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FiGfrQvlUAXBmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MzNjZDEyMGUtNmM2Ny00MWYxLWFiYjYtZjVmNjFlYWExN2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAyadGoDNk0HKzNSe9A6p3nUupzDCCAgZlPL
hWg6Rs01robcGwpAzirK8PwJDbLkA2YKbJgAzS3dgXKw2Si5TYIVL3FnD8igvsaK
jy+VwTbxOUovvPRH7KdQPo9wmKaHncq5ChnV3aT7a6BX+vhqAfplYzAIqYOb3okt
wq9iAZFptD5dh0mWgyVACc+VozPMwnhDXSIdG9tBf+9COT2Ww6hMJ2vmNzDJq7nv
HzxwgsYVI2LPdP0A90caNsO4qrWrtOsnbW2iCwnauH6lxsjlR40MfFVlrOu/JPr+
OqJSK+ZOSiQ6ugVGEdksYa8LVmi8mMmH7z4JnYU2+pQUrw7UuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyiU/ia6uYZqFKrirygx48OumLKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODlkYzRiZTItMTBlYS0z
NmRiLWJhYzktMGYwNTI4Nzg0ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzanMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAk6zib79HR3cyF4WDr795py0e6Kc1QumRzrH13Ch5ESQ+1IqeEI0uiU
oPNyLwcw6b6jAsXldQ651dmZcfAPRRth+ht68OboDaYSh7dPODukSeovcg0jkigR
wa70qO+/cSGh5KMFhax8j/NmrwC51YjFSNYLQu7u4P9IMNtBIweN/dFoWHZd6Zda
LMbgVqWkCK9m/wNh5i7Z1c8w4WUlFV3x4POm/qv4V0KDHeWHDKMoXTrirxrlAwvD
Tg/LYxjK+Q+15KDnttMI9kovXKkStCrKNycx4hYu5qXPRRnuiG2hGy4JwBKnw3w2
x9yLgXBIjSQ0kzy/xR/CfVAIt546uc4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:38 2026 by rpki-client