Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa
File:                     57de1a6f-2177-3036-8e1c-1f8d76c10484.roa (raw, json)
Hash identifier:          Lco4UGTDopPOG+SpyfD7G+CjAQfYv+LnkARJ7Hy6Fag=
Subject key identifier:   A6:5E:79:94:D2:3A:F7:AD:4C:06:5C:86:1B:3D:5E:F8:B1:AB:59:B3
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584D44FA3924415968AA2C7D8D80
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        216.238.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:39:24:41:59:68:aa:2c:7d:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=67115c97-fa2d-4997-8bde-f1c81465ab83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:93:66:dd:e3:80:70:b1:f8:36:2b:ca:97:62:
                    ff:d5:70:10:fa:3d:1c:5e:09:36:00:39:95:bf:69:
                    17:18:60:90:a6:5e:c3:79:9a:d4:a6:5b:f0:dc:b9:
                    92:58:da:21:9e:2e:50:28:dd:fb:e3:3b:83:f1:bf:
                    11:61:3e:bc:b0:c5:4d:9b:b1:ad:87:6e:84:17:13:
                    22:5e:60:16:06:c5:10:a8:cc:ec:1f:94:f2:90:55:
                    ee:c1:a0:71:88:de:a9:4c:ed:ff:d3:ae:e3:8b:61:
                    38:e7:6f:7d:f0:76:53:48:4c:13:7a:5f:28:86:a2:
                    1c:e9:ca:8a:6c:86:84:38:5b:ad:1a:82:b8:b2:af:
                    42:c8:cf:94:cf:04:0b:34:d0:76:4b:9d:03:bb:c9:
                    f2:58:b2:65:7c:83:85:93:5a:ef:fa:a1:4b:15:09:
                    b1:d2:97:88:e6:ee:2d:89:b5:c8:03:c5:05:14:2e:
                    2c:0f:22:3d:44:f3:ff:49:f2:e6:ba:91:b7:db:2b:
                    9a:ad:61:ab:3a:06:2e:24:c5:e1:72:ff:83:cf:27:
                    e9:36:78:16:69:f0:50:67:6c:98:2b:ff:7a:a7:de:
                    5b:75:0c:bb:6d:cd:fd:da:c3:b2:75:04:b8:c5:3c:
                    bb:af:23:e9:6b:4c:94:a6:bf:e2:d6:e5:ed:3d:97:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:79:94:D2:3A:F7:AD:4C:06:5C:86:1B:3D:5E:F8:B1:AB:59:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/57de1a6f-2177-3036-8e1c-1f8d76c10484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:8e:a2:23:e5:31:4e:73:ea:99:44:b2:98:8d:cf:40:3b:
         ff:32:37:b9:b5:bf:31:eb:84:3c:ad:a1:a2:7c:bf:72:7f:fe:
         95:03:ef:90:d6:fe:e7:71:79:cd:d1:c0:65:d4:a2:48:01:85:
         f6:8f:ed:cc:76:4f:9e:2e:b6:4c:fb:56:de:ec:82:dc:25:27:
         01:c1:be:bb:72:0d:33:47:1e:c4:b3:a7:d7:38:4b:33:19:1d:
         7d:79:cb:09:74:8c:4c:24:95:66:c3:1f:f5:f7:1e:db:2f:c3:
         54:cf:37:4e:ef:ce:90:28:de:91:a6:04:c3:1a:d0:9a:4f:7e:
         7f:99:7a:cf:10:8b:3b:1f:6c:83:26:fe:95:93:1e:7d:8c:00:
         87:a2:d3:d8:44:0a:4c:4e:ee:cb:28:03:8d:9f:02:64:24:42:
         18:d9:22:bd:05:2f:88:27:ef:76:0c:70:e9:c1:20:4d:5b:66:
         fe:1b:13:a3:03:6e:9e:6f:dc:4c:bb:3d:f7:2e:af:2a:12:0a:
         f1:83:8e:4d:80:e2:0e:1b:19:d5:b0:11:f3:41:03:fd:b4:2b:
         9a:03:ec:76:a9:0d:54:2f:9a:c6:34:ff:6c:5f:d3:3a:20:66:
         3a:44:45:31:ae:bd:8f:51:5c:aa:26:8f:d5:73:a3:ac:a2:7a:
         ef:37:15:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jkkQVloqix9jYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3
MjM4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
NjcxMTVjOTctZmEyZC00OTk3LThiZGUtZjFjODE0NjVhYjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZNm3eOAcLH4NivKl2L/1XAQ+j0cXgk2ADmV
v2kXGGCQpl7DeZrUplvw3LmSWNohni5QKN374zuD8b8RYT68sMVNm7Gth26EFxMi
XmAWBsUQqMzsH5TykFXuwaBxiN6pTO3/067ji2E452998HZTSEwTel8ohqIc6cqK
bIaEOFutGoK4sq9CyM+UzwQLNNB2S50Du8nyWLJlfIOFk1rv+qFLFQmx0peI5u4t
ibXIA8UFFC4sDyI9RPP/SfLmupG32yuarWGrOgYuJMXhcv+DzyfpNngWafBQZ2yY
K/96p95bdQy7bc392sOydQS4xTy7ryPpa0yUpr/i1uXtPZdm4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZeeZTSOvetTAZchhs9Xvixq1mzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVh
ZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvNTdkZTFhNmYtMjE3Ny0z
MDM2LThlMWMtMWY4ZDc2YzEwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWZlYWQzY2ItMWQzOC00MDdmLWJh
MDYtOGUyNzZiMDY3MjM4L2VmZWFkM2NiLTFkMzgtNDA3Zi1iYTA2LThlMjc2YjA2
NzIzOC5jcmwwHwYDVR0jBBgwFoAUNPnajc3fX4CiVfX2aItPRyDBA9IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3
NmIwNjcyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O69MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXjjqIj5TFOc+qZRLKYjc9AO/8yN7m1vzHrhDytoaJ8v3J//pUD75DW
/udxec3RwGXUokgBhfaP7cx2T54utkz7Vt7sgtwlJwHBvrtyDTNHHsSzp9c4SzMZ
HX15ywl0jEwklWbDH/X3Htsvw1TPN07vzpAo3pGmBMMa0JpPfn+Zes8QizsfbIMm
/pWTHn2MAIei09hECkxO7ssoA42fAmQkQhjZIr0FL4gn73YMcOnBIE1bZv4bE6MD
bp5v3Ey7PfcuryoSCvGDjk2A4g4bGdWwEfNBA/20K5oD7HapDVQvmsY0/2xf0zog
ZjpERTGuvY9RXKomj9Vzo6yieu83Fds=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:47 2026 by rpki-client