Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/548ba591-56d3-32f4-a6e4-5c6c22751d07.roa
File:                     548ba591-56d3-32f4-a6e4-5c6c22751d07.roa (raw, json)
Hash identifier:          YaVBU4vd9quQr8KXwSja6W/Lf5lUfXGoCbMUDzUNo8k=
Subject key identifier:   5E:95:AB:E0:BE:C3:CD:42:C3:5C:CE:02:3E:67:CC:D5:70:DE:15:DE
Certificate issuer:       /CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Certificate serial:       010D0C9F4328584D465F94BC7669D38AE7A91000
Authority key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/548ba591-56d3-32f4-a6e4-5c6c22751d07.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     21807
IP address blocks:        142.248.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:94:bc:76:69:d3:8a:e7:a9:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d32729-3efa-4a4c-a5ce-85790b40d100
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=02c7ebf5-b1d8-4a83-b2bf-b631ef3bd49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:18:50:69:af:c0:91:4d:d0:10:85:93:f1:
                    f7:8a:ff:4b:f0:8c:a1:63:7f:82:c9:b0:1d:f7:79:
                    af:82:c1:61:01:89:82:3f:e9:ef:a6:f6:3c:88:28:
                    69:d3:24:3b:69:ee:b0:ba:c9:be:69:2c:fb:73:ae:
                    d4:d0:c7:c4:6c:bd:17:f2:e9:2c:ca:22:82:15:0b:
                    f7:70:f0:73:81:7e:a0:1a:aa:ec:37:f1:e2:3d:df:
                    1b:65:0b:c1:29:8b:84:82:33:05:35:36:bf:35:a4:
                    e3:02:56:b8:75:a6:f6:39:f3:f8:25:12:f8:e1:58:
                    21:40:2a:49:cb:9c:f6:3f:88:a9:fa:23:36:c8:ab:
                    7e:cc:b7:8a:e2:f3:8f:5e:8a:6c:d8:8f:06:f4:d0:
                    28:30:f1:d3:2f:a9:27:56:c9:36:2b:88:4c:16:f9:
                    f4:29:59:79:b9:43:1f:35:40:bb:c9:82:95:d9:f1:
                    ae:3f:28:3a:9c:5f:7a:bd:80:33:c5:99:52:66:11:
                    fa:5d:79:7f:d3:2d:0b:97:fa:47:cc:0b:40:e4:62:
                    99:6d:8a:39:52:f0:0e:ba:e2:ee:3d:26:1b:eb:4d:
                    87:ac:b9:77:6c:57:2f:69:d8:85:14:3a:18:b2:7b:
                    02:ea:b8:00:59:cf:78:c0:8e:24:70:f9:a7:9b:34:
                    e6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:95:AB:E0:BE:C3:CD:42:C3:5C:CE:02:3E:67:CC:D5:70:DE:15:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/548ba591-56d3-32f4-a6e4-5c6c22751d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:36:41:4a:a4:a1:23:f9:45:a8:18:fa:3e:57:f0:82:57:a3:
         9f:00:47:67:d7:51:ec:4b:24:a1:5f:c2:84:5e:7f:f8:bd:03:
         91:50:6b:5d:8e:52:8c:86:24:8c:a4:c5:04:2e:e9:f8:6b:ff:
         e9:4d:40:c3:db:fb:e6:0d:64:53:b2:e6:8f:f1:cc:8e:70:6c:
         af:ec:fe:f8:18:d9:31:89:f9:77:17:f9:66:8b:20:d7:dc:50:
         53:15:5b:c4:ec:da:c9:a9:03:c7:c1:34:45:e6:92:78:19:cb:
         ac:83:76:a1:f7:53:58:5b:c2:ed:69:18:1d:4a:f8:5e:f5:98:
         95:6a:e1:eb:bc:be:e9:8f:15:eb:3f:3e:b2:64:ce:43:93:0c:
         45:aa:af:e9:7e:e6:76:5f:a2:6c:78:8f:c7:55:19:30:bf:0f:
         ad:32:25:27:13:a6:28:c4:91:da:1d:3a:e1:02:7e:ae:10:1a:
         c0:64:79:cd:a1:eb:8e:0a:d4:d3:aa:36:76:ec:d6:c4:40:fc:
         2b:2b:e9:14:86:80:b0:15:1d:70:a5:b3:e5:66:77:7e:52:df:
         51:8a:b7:83:c8:db:89:2b:84:1c:a4:f2:b8:55:82:03:a9:e2:
         7b:62:1f:c9:9f:7c:f6:eb:9d:af:e1:44:55:38:1d:e4:a1:47:
         27:29:96:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5S8dmnTiuepEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNkMzI3MjktM2VmYS00YTRjLWE1Y2UtODU3OTBiNDBk
MTAwMB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk
MDJjN2ViZjUtYjFkOC00YTgzLWIyYmYtYjYzMWVmM2JkNDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgUYUGmvwJFN0BCFk/H3iv9L8IyhY3+CybAd
93mvgsFhAYmCP+nvpvY8iChp0yQ7ae6wusm+aSz7c67U0MfEbL0X8uksyiKCFQv3
cPBzgX6gGqrsN/HiPd8bZQvBKYuEgjMFNTa/NaTjAla4dab2OfP4JRL44VghQCpJ
y5z2P4ip+iM2yKt+zLeK4vOPXops2I8G9NAoMPHTL6knVsk2K4hMFvn0KVl5uUMf
NUC7yYKV2fGuPyg6nF96vYAzxZlSZhH6XXl/0y0Ll/pHzAtA5GKZbYo5UvAOuuLu
PSYb602HrLl3bFcvadiFFDoYsnsC6rgAWc94wI4kcPmnmzTm6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6Vq+C+w81Cw1zOAj5nzNVw3hXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83M2Qz
MjcyOS0zZWZhLTRhNGMtYTVjZS04NTc5MGI0MGQxMDAvNTQ4YmE1OTEtNTZkMy0z
MmY0LWE2ZTQtNWM2YzIyNzUxZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzNkMzI3MjktM2VmYS00YTRjLWE1
Y2UtODU3OTBiNDBkMTAwLzczZDMyNzI5LTNlZmEtNGE0Yy1hNWNlLTg1NzkwYjQw
ZDEwMC5jcmwwHwYDVR0jBBgwFoAU3uRXGJqsayhuJqAU4ItM8ym5jokwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83M2QzMjcyOS0zZWZhLTRhNGMtYTVjZS04NTc5
MGI0MGQxMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACg2QUqkoSP5RagY+j5X8IJXo58AR2fXUexLJKFfwoRef/i9A5FQa12O
UoyGJIykxQQu6fhr/+lNQMPb++YNZFOy5o/xzI5wbK/s/vgY2TGJ+XcX+WaLINfc
UFMVW8Ts2smpA8fBNEXmkngZy6yDdqH3U1hbwu1pGB1K+F71mJVq4eu8vumPFes/
PrJkzkOTDEWqr+l+5nZfomx4j8dVGTC/D60yJScTpijEkdodOuECfq4QGsBkec2h
644K1NOqNnbs1sRA/Csr6RSGgLAVHXCls+Vmd35S31GKt4PI24krhByk8rhVggOp
4ntiH8mffPbrna/hRFU4HeShRycplrs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:49 2026 by rpki-client