Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3c4da9d-2403-3535-87d7-47f88ccd7bf0.roa
File:                     f3c4da9d-2403-3535-87d7-47f88ccd7bf0.roa (raw, json)
Hash identifier:          uCQEC8WOtWs7OSwn0knsx7++rqoGMpuczyu5LmTAKGY=
Subject key identifier:   63:00:2C:42:3B:71:C4:0C:44:5C:C9:E4:22:E8:65:0B:06:D2:5B:99
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584D146D91C1A95BDEB9B2395F00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3c4da9d-2403-3535-87d7-47f88ccd7bf0.roa
Signing time:             Fri 06 Mar 2026 15:38:31 +0000
ROA not before:           Fri 06 Mar 2026 15:38:31 +0000
ROA not after:            Thu 04 Jun 2026 14:38:31 +0000
asID:                     6559
IP address blocks:        204.84.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:6d:91:c1:a9:5b:de:b9:b2:39:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar  6 15:38:31 2026 GMT
            Not After : Jun  4 14:38:31 2026 GMT
        Subject: CN=452c02db-1c2c-43c3-b134-9fea0265e080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:9d:ea:7b:08:5c:db:05:b6:ef:7e:d0:17:
                    6f:1d:bb:47:83:be:7f:e1:ea:3b:ef:b7:ee:76:fe:
                    ed:ef:be:8d:24:b8:df:0b:11:c4:e2:0d:15:cf:15:
                    3a:35:1e:09:e9:b9:f4:64:b4:0e:53:dd:14:fe:04:
                    6d:44:03:be:e8:7d:fb:2e:f1:bc:2c:f7:29:be:10:
                    19:cd:dd:cc:10:f2:40:66:b9:44:f1:a0:c6:03:6c:
                    2b:fc:f8:b8:12:fd:05:aa:4a:95:bf:10:58:e1:5a:
                    08:9b:e6:b9:90:56:9c:2d:3f:9f:88:ce:15:81:fb:
                    5c:7a:c7:7b:98:04:89:6e:c4:ef:55:6e:09:b7:b0:
                    4a:90:d6:ad:d9:e9:6b:62:78:c0:1f:f0:d7:c5:6b:
                    52:84:64:e0:31:7d:f6:20:d6:d5:5a:4a:9d:b3:dc:
                    af:2d:bb:f2:0d:45:f9:84:62:80:b7:8a:c7:23:8d:
                    ed:34:1f:b4:85:9b:8c:86:a2:b1:1b:9d:2a:73:6e:
                    ec:e9:45:a0:fa:48:fc:70:be:33:b7:a8:cb:16:4d:
                    0a:68:7a:37:6a:ed:24:b3:9e:51:72:d2:28:a9:b1:
                    ff:17:b9:0c:e2:8f:5c:19:f5:eb:5f:b0:ac:0f:dd:
                    c0:39:d3:ef:8c:e0:66:17:0b:4d:46:3b:f2:ab:93:
                    aa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:00:2C:42:3B:71:C4:0C:44:5C:C9:E4:22:E8:65:0B:06:D2:5B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3c4da9d-2403-3535-87d7-47f88ccd7bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f8:7c:8e:80:c6:12:43:87:46:c1:1b:d8:59:03:2d:07:37:
         db:46:52:78:74:be:6a:eb:1c:ef:2e:ce:74:40:be:d2:97:95:
         b8:ec:f2:7e:fd:b1:ec:cf:8e:52:b8:7a:4c:76:eb:97:80:07:
         d2:db:1d:12:e5:2a:73:60:70:b6:b9:3e:7e:4d:fd:cf:72:1c:
         bd:cf:31:d0:ef:e6:20:0c:5c:6e:72:f5:ca:df:92:f6:54:aa:
         df:89:92:f9:8a:7b:64:1c:f1:8b:41:8f:d4:b1:c2:74:ac:27:
         2f:a3:10:71:de:27:9b:44:a8:8e:bb:a8:14:8b:aa:4b:9d:b1:
         3a:5b:79:96:86:57:79:b9:ee:ee:38:a6:18:ac:25:15:7a:db:
         bc:c0:a1:18:53:af:2e:e9:4f:c7:bf:dd:13:a0:4f:e5:67:d4:
         68:21:1e:5a:11:90:6d:1a:71:e4:2b:10:1f:60:9c:c6:12:f0:
         7a:49:20:bb:eb:79:5e:b3:c4:bb:0e:1b:37:e1:14:d6:58:3c:
         e6:0b:0b:81:64:a7:1e:ab:20:0e:88:3f:17:1e:7c:ee:f4:56:
         a2:fa:5e:08:46:25:9d:13:82:33:ba:c4:b0:b7:9c:cf:ad:69:
         db:5f:34:88:56:cf:7f:38:0f:6e:5a:e3:46:70:33:02:5a:e9:
         8a:c6:04:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbZHBqVveubI5XwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDMwNjE1MzgzMVoXDTI2MDYwNDE0MzgzMVowLzEtMCsGA1UEAxMk
NDUyYzAyZGItMWMyYy00M2MzLWIxMzQtOWZlYTAyNjVlMDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjByd6nsIXNsFtu9+0BdvHbtHg75/4eo777fu
dv7t776NJLjfCxHE4g0VzxU6NR4J6bn0ZLQOU90U/gRtRAO+6H37LvG8LPcpvhAZ
zd3MEPJAZrlE8aDGA2wr/Pi4Ev0FqkqVvxBY4VoIm+a5kFacLT+fiM4Vgftcesd7
mASJbsTvVW4Jt7BKkNat2elrYnjAH/DXxWtShGTgMX32INbVWkqds9yvLbvyDUX5
hGKAt4rHI43tNB+0hZuMhqKxG50qc27s6UWg+kj8cL4zt6jLFk0KaHo3au0ks55R
ctIoqbH/F7kM4o9cGfXrX7CsD93AOdPvjOBmFwtNRjvyq5Oq8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMALEI7ccQMRFzJ5CLoZQsG0luZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjNjNGRhOWQtMjQwMy0z
NTM1LTg3ZDctNDdmODhjY2Q3YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFTuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACL4fI6AxhJDh0bBG9hZAy0HN9tGUnh0vmrrHO8uznRAvtKXlbjs8n79
sezPjlK4ekx265eAB9LbHRLlKnNgcLa5Pn5N/c9yHL3PMdDv5iAMXG5y9crfkvZU
qt+JkvmKe2Qc8YtBj9SxwnSsJy+jEHHeJ5tEqI67qBSLqkudsTpbeZaGV3m57u44
phisJRV627zAoRhTry7pT8e/3ROgT+Vn1GghHloRkG0aceQrEB9gnMYS8HpJILvr
eV6zxLsOGzfhFNZYPOYLC4Fkpx6rIA6IPxcefO70VqL6XghGJZ0TgjO6xLC3nM+t
adtfNIhWz384D25a40ZwMwJa6YrGBBY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:47:06 2026 by rpki-client