Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa
File:                     b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa (raw, json)
Hash identifier:          Vu1xCFlneupHJUbOIa6tNmSOL1phmtrOah3rxX7gpIc=
Subject key identifier:   AB:2D:06:81:79:92:FF:E5:64:AE:6E:82:6C:EE:25:61:9F:E9:5E:2C
Certificate issuer:       /CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
Certificate serial:       010D0C9F4328584D44FA72602E77C42CCCD37A80
Authority key identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     393668
IP address blocks:        131.143.235.0/24 maxlen: 24
                          192.65.0.0/24 maxlen: 24
                          2620:12f:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:72:60:2e:77:c4:2c:cc:d3:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=d0bb469f-7b44-40b8-bde8-bfd659baf0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:d2:cd:91:e4:49:d2:f5:c3:14:bb:d2:7d:
                    79:9a:79:b2:dc:46:8a:77:7f:17:31:e6:0e:10:d2:
                    4c:fc:99:3a:be:e8:03:71:be:c0:34:b9:ba:9b:f9:
                    c7:de:88:3d:b3:17:63:0a:85:75:bf:2e:95:ae:ea:
                    7e:cb:4c:a2:ca:ad:c8:bd:5b:b6:24:0a:37:d0:16:
                    54:80:06:dc:95:ae:d8:67:7c:7f:65:2e:8e:5e:0d:
                    d4:cd:36:db:75:98:75:c3:fe:74:7b:2f:1a:ec:f8:
                    1c:ed:b7:98:e8:1a:09:98:ec:0d:c0:b3:e8:b0:84:
                    21:82:43:36:cb:fd:b8:d3:ad:07:02:d0:79:67:ec:
                    ae:f0:6f:96:40:28:02:5a:c6:a3:86:83:73:52:c9:
                    4c:2b:b9:e7:8a:21:d4:89:62:ed:3b:fa:5f:e1:0b:
                    8e:60:7e:95:3b:2c:d7:9f:6d:3e:ab:7c:b2:40:78:
                    db:d6:27:e3:76:cf:d0:0e:cb:a1:33:b9:52:85:53:
                    e7:5f:c1:0e:ca:ec:79:70:3d:40:3b:06:c0:de:9f:
                    6d:f5:be:85:da:59:96:46:a8:4d:e2:95:c9:d3:6a:
                    2e:63:cc:5f:a4:75:db:aa:9b:24:22:85:2c:00:3b:
                    4e:a5:e9:81:3d:d0:8f:2c:55:fc:55:0c:11:8e:58:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2D:06:81:79:92:FF:E5:64:AE:6E:82:6C:EE:25:61:9F:E9:5E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/b46ba7a9-4be2-32f5-8684-16ddac68ecc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.235.0/24
                  192.65.0.0/24
                IPv6:
                  2620:12f:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:cb:db:f8:cf:98:64:b9:23:e4:13:d9:2e:7c:1b:49:c4:0d:
         03:3d:2e:29:df:23:9e:c8:14:03:a0:28:de:2e:8e:1f:ff:18:
         6d:8a:5c:b4:3e:22:3c:a2:52:1e:03:20:4a:77:4c:3b:8e:29:
         ce:db:aa:c9:cf:fa:b9:39:a7:5a:8d:c4:90:0e:4d:0c:64:9f:
         24:5b:24:e2:e4:97:49:45:c4:2c:ac:a7:0b:7a:d8:69:b3:7b:
         01:75:d2:5c:0d:a2:5f:7f:36:50:38:dd:25:98:21:ef:08:e0:
         bd:c9:9b:91:c6:d8:7e:c4:1f:4c:86:8a:57:1e:24:69:6d:20:
         91:c0:ea:c5:3a:ce:5d:8e:0a:f2:db:c2:59:49:88:b9:4f:a6:
         37:ac:11:c5:be:ce:37:86:cc:56:1a:af:f0:91:0b:99:0d:16:
         2f:90:45:b7:f1:20:9b:b0:50:47:9d:8d:e5:3e:d4:c1:65:4d:
         f1:6d:da:32:64:8a:14:4c:5a:ec:52:63:3c:54:ed:25:3c:a9:
         d8:e3:2f:b9:4c:e9:d3:6b:9f:03:6a:ea:3c:81:cf:a1:ef:63:
         6a:91:fe:c5:d2:1a:c5:b0:67:df:7a:fa:0a:81:48:b9:7c:50:
         fe:d1:e4:5f:d3:06:92:76:39:51:07:6d:cb:ea:0d:54:17:69:
         ca:0e:cd:59
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE1E+nJgLnfELMzTeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDgxZWZmOWEtYzhiOS00ZWVkLWFmOGUtYzM4NTljMjJi
NWM4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
ZDBiYjQ2OWYtN2I0NC00MGI4LWJkZTgtYmZkNjU5YmFmMGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJjSzZHkSdL1wxS70n15mnmy3EaKd38XMeYO
ENJM/Jk6vugDcb7ANLm6m/nH3og9sxdjCoV1vy6Vrup+y0yiyq3IvVu2JAo30BZU
gAbcla7YZ3x/ZS6OXg3UzTbbdZh1w/50ey8a7Pgc7beY6BoJmOwNwLPosIQhgkM2
y/24060HAtB5Z+yu8G+WQCgCWsajhoNzUslMK7nniiHUiWLtO/pf4QuOYH6VOyzX
n20+q3yyQHjb1ifjds/QDsuhM7lShVPnX8EOyux5cD1AOwbA3p9t9b6F2lmWRqhN
4pXJ02ouY8xfpHXbqpskIoUsADtOpemBPdCPLFX8VQwRjlgnJwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFKstBoF5kv/lZK5ugmzuJWGf6V4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODFl
ZmY5YS1jOGI5LTRlZWQtYWY4ZS1jMzg1OWMyMmI1YzgvYjQ2YmE3YTktNGJlMi0z
MmY1LTg2ODQtMTZkZGFjNjhlY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgxZWZmOWEtYzhiOS00ZWVkLWFm
OGUtYzM4NTljMjJiNWM4LzQ4MWVmZjlhLWM4YjktNGVlZC1hZjhlLWMzODU5YzIy
YjVjOC5jcmwwHwYDVR0jBBgwFoAUGi4E3siROCW7GC4m4sCYeOc6unkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODFlZmY5YS1jOGI5LTRlZWQtYWY4ZS1jMzg1
OWMyMmI1YzguY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAg4/rAwQA
wEEAMA8EAgACMAkDBwQmIAEvYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO8vb+M+YZLkj5BPZLnwbScQN
Az0uKd8jnsgUA6Ao3i6OH/8YbYpctD4iPKJSHgMgSndMO44pztuqyc/6uTmnWo3E
kA5NDGSfJFsk4uSXSUXELKynC3rYabN7AXXSXA2iX382UDjdJZgh7wjgvcmbkcbY
fsQfTIaKVx4kaW0gkcDqxTrOXY4K8tvCWUmIuU+mN6wRxb7ON4bMVhqv8JELmQ0W
L5BFt/Egm7BQR52N5T7UwWVN8W3aMmSKFExa7FJjPFTtJTyp2OMvuUzp02ufA2rq
PIHPoe9japH+xdIaxbBn33r6CoFIuXxQ/tHkX9MGknY5UQdty+oNVBdpyg7NWQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:19 2026 by rpki-client