Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa
File:                     5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa (raw, json)
Hash identifier:          RDJFumQF+jxnsK6EvX5l5bbKqfFN1KIAFWlkkX4F69M=
Subject key identifier:   F6:4C:86:8A:7A:05:1A:1B:04:1D:D1:05:54:2D:37:D2:44:84:E7:F0
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584DBA3AE592EC83B592557BE120
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     18434
IP address blocks:        147.249.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e5:92:ec:83:b5:92:55:7b:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=73b52e2b-1bb7-4c0d-a4d0-555d4b63f022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:1b:c2:a9:59:ef:e7:24:aa:ee:30:03:b1:
                    6a:58:43:b3:13:10:33:65:17:8f:3d:f6:86:4b:46:
                    b1:a2:28:98:a9:01:c6:da:53:23:ba:70:72:9e:27:
                    fd:23:39:ad:dc:69:5b:11:8e:0c:12:b7:d2:a1:7a:
                    83:77:1f:05:a1:73:21:5f:45:24:f6:02:ba:0d:12:
                    5c:90:56:1d:79:0f:59:64:9b:c7:ab:c1:63:71:2f:
                    16:b4:b3:3a:8c:1b:0b:e8:6a:84:20:ab:13:cf:cd:
                    57:72:37:c5:63:c0:2d:8a:e8:b5:a9:ec:ca:9c:1a:
                    2b:d0:b6:4a:6a:ab:21:9d:4e:69:35:c3:56:82:60:
                    9b:23:f7:e0:19:11:75:9d:0f:f3:4e:4c:4c:a6:85:
                    ea:0e:79:98:71:50:d7:9e:ef:9b:14:6b:8a:c2:ec:
                    60:c4:e6:23:43:7f:00:92:ef:6b:f9:e7:a7:41:bb:
                    4e:b0:1e:62:98:e4:ae:18:79:83:82:02:33:2a:01:
                    84:89:5f:5b:92:cc:f0:0f:7b:18:9c:fc:7c:54:69:
                    cf:c7:38:c9:03:5d:18:4a:6c:61:88:45:30:b1:e9:
                    e6:7c:4a:85:d6:16:6c:6d:8b:64:81:14:41:48:de:
                    b9:53:69:53:78:27:b4:c0:cf:fb:02:04:f2:ac:1b:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:86:8A:7A:05:1A:1B:04:1D:D1:05:54:2D:37:D2:44:84:E7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.249.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:77:b1:22:0b:d8:b0:2a:de:69:46:1d:62:6f:9d:e6:6f:13:
         6a:89:bf:81:cf:f8:9a:6b:1f:80:da:70:b6:6e:86:8d:f4:cc:
         56:12:7f:33:13:2b:5f:44:8a:1e:44:d7:5b:fe:84:ae:de:22:
         ef:38:42:0e:66:8d:b1:75:31:0e:19:8d:4a:b5:48:8e:a6:fd:
         ee:ab:c6:63:98:18:20:62:36:3d:7e:66:39:67:38:53:48:f8:
         e8:11:0b:7a:2f:4d:2f:55:2c:51:f0:e7:fc:ef:da:3a:2d:8e:
         84:0f:2b:11:ef:9e:69:28:0b:cf:d1:d6:b1:9f:40:63:ef:13:
         73:3b:7e:32:7c:65:c4:9b:92:8e:e9:cf:d9:d8:7f:04:db:a8:
         f7:db:04:2d:81:88:cd:82:83:e8:43:4c:a1:08:4c:25:42:62:
         74:f4:80:fa:6a:3e:e7:32:fb:4a:d4:e8:32:d5:a0:27:d3:20:
         34:ce:8a:95:52:8d:9d:15:b5:77:66:6e:6a:2b:42:5b:94:4d:
         3b:14:42:2e:6a:1f:1f:a0:a8:cc:63:f4:d5:ac:8e:fd:de:9f:
         49:01:ce:53:cd:ce:d8:ac:2d:7b:77:d2:02:79:b5:8a:90:12:
         39:70:fa:1e:a6:4b:ce:af:13:fb:7c:0f:d9:48:02:09:88:2e:
         20:56:70:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuWS7IO1klV74SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
NzNiNTJlMmItMWJiNy00YzBkLWE0ZDAtNTU1ZDRiNjNmMDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvEbwqlZ7+ckqu4wA7FqWEOzExAzZRePPfaG
S0axoiiYqQHG2lMjunBynif9Izmt3GlbEY4MErfSoXqDdx8FoXMhX0Uk9gK6DRJc
kFYdeQ9ZZJvHq8FjcS8WtLM6jBsL6GqEIKsTz81XcjfFY8Atiui1qezKnBor0LZK
aqshnU5pNcNWgmCbI/fgGRF1nQ/zTkxMpoXqDnmYcVDXnu+bFGuKwuxgxOYjQ38A
ku9r+eenQbtOsB5imOSuGHmDggIzKgGEiV9bkszwD3sYnPx8VGnPxzjJA10YSmxh
iEUwsenmfEqF1hZsbYtkgRRBSN65U2lTeCe0wM/7AgTyrBtcxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZMhop6BRobBB3RBVQtN9JEhOfwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNWVhMzIxYjMtMWU1OC0z
MmY1LTkyZDAtYjU2MDQwYWIwZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/ksMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGV3sSIL2LAq3mlGHWJvneZvE2qJv4HP+JprH4DacLZuho30zFYSfzMT
K19Eih5E11v+hK7eIu84Qg5mjbF1MQ4ZjUq1SI6m/e6rxmOYGCBiNj1+ZjlnOFNI
+OgRC3ovTS9VLFHw5/zv2jotjoQPKxHvnmkoC8/R1rGfQGPvE3M7fjJ8ZcSbko7p
z9nYfwTbqPfbBC2BiM2Cg+hDTKEITCVCYnT0gPpqPucy+0rU6DLVoCfTIDTOipVS
jZ0VtXdmbmorQluUTTsUQi5qHx+gqMxj9NWsjv3en0kBzlPNztisLXt30gJ5tYqQ
Ejlw+h6mS86vE/t8D9lIAgmILiBWcDI=
-----END CERTIFICATE-----
Generated at Wed May 13 05:00:23 2026 by rpki-client