Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
File:                     cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa (raw, json)
Hash identifier:          KTDjMkkoxtbrB2rVeV0ePKUAbhuvTQgMyXIYhcZlJiA=
Subject key identifier:   B0:C7:B1:DC:BB:FD:48:8B:B9:CA:DD:DD:85:87:28:63:7C:23:F1:21
Certificate issuer:       /CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
Certificate serial:       010D0C9F4328584D3F64E0C85A6264AF02967B80
Authority key identifier: 41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     64230
IP address blocks:        69.161.205.0/24 maxlen: 24
                          2620:e2:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e0:c8:5a:62:64:af:02:96:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=d2577389-1b13-41d8-99cb-792f14f99c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:c1:1c:9a:24:df:47:78:0c:2c:40:99:fd:
                    25:3a:bf:3d:a2:3e:33:d7:3c:55:49:7f:e0:56:65:
                    0a:59:b9:e1:50:d5:b9:dd:43:aa:3b:88:15:b0:03:
                    54:30:2a:99:20:b6:3d:ec:f6:aa:80:d0:4c:10:9b:
                    75:98:33:78:bc:36:e6:9f:ee:d0:24:8c:02:87:36:
                    fd:a0:73:da:09:58:e3:7a:37:83:ab:a6:9f:95:24:
                    13:f2:a8:67:f5:c5:64:79:b7:b1:99:f3:d2:31:e5:
                    32:b9:51:45:1b:f1:a9:56:f3:19:43:b8:28:e2:ce:
                    83:8c:23:bd:ee:79:31:35:21:13:c4:27:5b:ef:f1:
                    a4:53:aa:8b:bc:74:63:0b:28:74:3b:45:f9:22:c1:
                    1a:8d:0f:c2:9c:e4:b8:59:f3:ab:af:d8:66:a6:68:
                    45:ff:1e:45:1d:18:66:c6:0b:44:37:5a:c0:be:f4:
                    77:45:41:ae:1e:60:ab:ef:84:f1:40:21:07:23:83:
                    03:1f:8d:71:b4:20:07:59:71:e3:fa:c8:9a:40:b5:
                    38:31:f2:d6:c1:13:a9:f8:d0:c9:d1:32:45:25:ce:
                    cd:a8:91:da:bb:19:7d:f0:7d:2d:05:03:88:02:89:
                    37:12:93:fb:8a:a4:be:09:df:a9:cd:5a:7b:65:fa:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:B1:DC:BB:FD:48:8B:B9:CA:DD:DD:85:87:28:63:7C:23:F1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl

            X509v3 Authority Key Identifier:
                keyid:41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.205.0/24
                IPv6:
                  2620:e2:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:08:de:f3:48:04:7e:8f:cc:dc:37:a9:95:b1:4a:f4:e6:
         6e:0b:70:28:03:55:a0:c2:c5:a9:9a:3f:f2:0d:48:05:f9:db:
         80:e4:2a:29:b9:fa:74:bc:e2:0f:f8:0c:01:22:8c:3a:81:cf:
         10:25:4e:6f:4c:6f:8b:7e:ca:0f:39:55:f0:be:85:83:e4:e7:
         6a:5e:83:c7:56:45:f4:9e:79:de:b4:d6:b5:9c:c9:10:d7:71:
         3f:fe:b5:4a:e2:a1:94:92:c6:a6:a4:c3:b0:91:96:5e:3d:b4:
         25:0a:7d:f3:0c:77:f4:d2:dc:01:c2:42:94:a4:8d:a5:bc:25:
         a8:68:51:4b:f0:00:9e:48:4f:af:e1:13:74:5f:39:75:fc:74:
         8c:d4:a9:35:aa:85:c9:e3:dc:57:34:78:b7:ae:2d:03:8e:f0:
         a3:b4:37:b7:ba:06:2a:74:18:96:fb:d7:38:b1:7e:b2:d8:e6:
         72:61:d9:36:41:8b:f4:c3:f2:93:3e:de:da:8f:55:df:a3:93:
         9d:93:16:c8:15:21:96:50:a7:24:aa:b0:85:4c:eb:dc:4f:c4:
         f6:38:86:8d:16:71:8e:bf:ee:67:3d:ef:99:1c:4b:fb:3c:46:
         0c:c9:8b:03:6d:3b:85:54:c6:87:6c:96:8c:47:cf:b6:3b:46:
         c9:75:df:b5
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0/ZODIWmJkrwKWe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZkOTZmYmUtODBlMC00MWM2LTlmOWQtMzhlM2E5OTFm
MGM5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZDI1NzczODktMWIxMy00MWQ4LTk5Y2ItNzkyZjE0Zjk5YzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqvBHJok30d4DCxAmf0lOr89oj4z1zxVSX/g
VmUKWbnhUNW53UOqO4gVsANUMCqZILY97PaqgNBMEJt1mDN4vDbmn+7QJIwChzb9
oHPaCVjjejeDq6aflSQT8qhn9cVkebexmfPSMeUyuVFFG/GpVvMZQ7go4s6DjCO9
7nkxNSETxCdb7/GkU6qLvHRjCyh0O0X5IsEajQ/CnOS4WfOrr9hmpmhF/x5FHRhm
xgtEN1rAvvR3RUGuHmCr74TxQCEHI4MDH41xtCAHWXHj+siaQLU4MfLWwROp+NDJ
0TJFJc7NqJHauxl98H0tBQOIAok3EpP7iqS+Cd+pzVp7ZfpAzQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLDHsdy7/UiLucrd3YWHKGN8I/EhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZmQ5
NmZiZS04MGUwLTQxYzYtOWY5ZC0zOGUzYTk5MWYwYzkvY2IyZjZkNmQtM2I1NS0z
NDQ0LTk2Y2EtZThkZjVmMWU2NWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmZkOTZmYmUtODBlMC00MWM2LTlm
OWQtMzhlM2E5OTFmMGM5L2ZmZDk2ZmJlLTgwZTAtNDFjNi05ZjlkLTM4ZTNhOTkx
ZjBjOS5jcmwwHwYDVR0jBBgwFoAUQerPAM9VNu4R+x49A8Qg1Tg2aYEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZmQ5NmZiZS04MGUwLTQxYzYtOWY5ZC0zOGUz
YTk5MWYwYzkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQARaHNMA8E
AgACMAkDBwAmIADiQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHUII3vNIBH6PzNw3qZWxSvTmbgtwKANV
oMLFqZo/8g1IBfnbgOQqKbn6dLziD/gMASKMOoHPECVOb0xvi37KDzlV8L6Fg+Tn
al6Dx1ZF9J553rTWtZzJENdxP/61SuKhlJLGpqTDsJGWXj20JQp98wx39NLcAcJC
lKSNpbwlqGhRS/AAnkhPr+ETdF85dfx0jNSpNaqFyePcVzR4t64tA47wo7Q3t7oG
KnQYlvvXOLF+stjmcmHZNkGL9MPykz7e2o9V36OTnZMWyBUhllCnJKqwhUzr3E/E
9jiGjRZxjr/uZz3vmRxL+zxGDMmLA207hVTGh2yWjEfPtjtGyXXftQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:11 2026 by rpki-client