Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa
File:                     4311dda3-f166-334e-9176-878240d2d1dc.roa (raw, json)
Hash identifier:          woHoi6/JgMUZQgJArJAirZ7Hc/RQ/EG7RkQXoUMXFr0=
Subject key identifier:   F4:23:45:C8:AC:56:ED:CE:2E:B0:32:69:8B:CB:E6:A7:BE:A2:DA:0B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D40CA3F3C5A1582DA6E9A4080
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     62610
IP address blocks:        128.1.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:3f:3c:5a:15:82:da:6e:9a:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=31e67629-0c69-4318-b4b1-57c152ad9bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:df:d7:83:6e:fe:cb:1e:c5:55:e5:bd:39:
                    8b:a6:4f:f1:01:59:cb:99:cb:e5:db:f2:fd:c4:6a:
                    78:09:23:53:83:89:8d:82:62:12:32:9c:e5:26:84:
                    cc:27:58:9c:a3:c1:9f:f9:80:b2:5c:8d:eb:60:a3:
                    43:1a:10:22:d5:bd:32:65:ac:01:69:9b:41:40:5c:
                    24:b8:f4:d9:4e:ad:26:aa:0f:a8:c1:a3:b0:05:12:
                    9f:c0:a7:75:62:33:f6:28:b8:fc:fc:6b:76:02:9c:
                    e9:55:bb:2d:ba:7b:30:11:f5:dc:ea:8c:58:60:5e:
                    68:1e:bd:88:80:eb:12:91:60:52:72:d1:f0:66:47:
                    12:34:0c:17:75:ed:f3:e0:68:a8:30:f4:63:f2:d9:
                    3d:22:e9:2f:98:45:b8:0c:8a:d3:75:f2:a0:6a:30:
                    8c:1e:8d:9e:48:b7:df:a1:18:c8:79:1d:5c:13:db:
                    69:f9:a5:fb:d3:15:df:f8:58:31:e9:2a:7c:47:d8:
                    f8:11:9e:f7:39:ec:79:16:da:d8:19:d4:42:90:0c:
                    66:44:4d:96:e8:f1:47:b8:ea:af:ce:19:0a:2a:11:
                    e7:83:0c:fe:61:69:dd:ab:c1:41:b7:94:af:85:e8:
                    9e:3d:68:ef:2c:33:e1:5f:82:91:00:e7:75:83:dd:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:45:C8:AC:56:ED:CE:2E:B0:32:69:8B:CB:E6:A7:BE:A2:DA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4311dda3-f166-334e-9176-878240d2d1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e2:7c:47:85:43:0e:4d:ae:bf:79:bf:e6:26:ef:8f:c0:fe:
         da:cc:91:df:ad:38:b1:a7:6c:3e:64:87:f5:44:c6:94:df:21:
         6e:d9:6a:c4:d5:7f:57:1a:e3:f5:16:6f:d5:fd:a3:04:f9:d4:
         6b:58:98:f1:f5:e9:b2:fd:7f:f4:9e:59:d1:09:72:44:75:e8:
         09:25:f4:90:47:32:be:e7:a1:18:52:14:c6:ab:65:2b:ae:cd:
         e5:01:eb:67:c3:7a:1a:fc:b2:c5:1f:65:b8:be:ea:28:f0:a6:
         61:17:6b:ef:e3:18:7e:d6:ec:a6:31:7d:92:e9:62:ba:17:d4:
         77:04:6c:01:f6:9c:d0:79:f6:8b:65:d1:0d:d3:4e:62:a9:71:
         c7:a5:c5:05:bf:f3:63:5d:36:ad:3b:d5:03:9b:e1:11:55:eb:
         a5:47:10:0a:3e:dc:cf:4b:38:2f:73:a8:50:c7:14:c0:f4:73:
         5b:57:9c:f0:69:ba:5e:cf:f5:17:f6:98:76:06:06:1c:db:2a:
         26:d1:81:2a:a2:71:70:a3:de:59:70:97:1e:f6:32:c6:ee:a6:
         34:df:12:36:5c:5f:92:9a:9a:f7:61:65:01:0c:38:db:0f:fe:
         b4:40:d5:94:00:ba:e3:36:95:ca:0b:f3:4f:60:c3:c2:78:15:
         75:c3:0c:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayj88WhWC2m6aQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
MzFlNjc2MjktMGM2OS00MzE4LWI0YjEtNTdjMTUyYWQ5YmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxDf14Nu/ssexVXlvTmLpk/xAVnLmcvl2/L9
xGp4CSNTg4mNgmISMpzlJoTMJ1ico8Gf+YCyXI3rYKNDGhAi1b0yZawBaZtBQFwk
uPTZTq0mqg+owaOwBRKfwKd1YjP2KLj8/Gt2ApzpVbstunswEfXc6oxYYF5oHr2I
gOsSkWBSctHwZkcSNAwXde3z4GioMPRj8tk9IukvmEW4DIrTdfKgajCMHo2eSLff
oRjIeR1cE9tp+aX70xXf+Fgx6Sp8R9j4EZ73Oex5FtrYGdRCkAxmRE2W6PFHuOqv
zhkKKhHngwz+YWndq8FBt5SvheiePWjvLDPhX4KRAOd1g93F/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQjRcisVu3OLrAyaYvL5qe+otoLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNDMxMWRkYTMtZjE2Ni0z
MzRlLTkxNzYtODc4MjQwZDJkMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLifEeFQw5Nrr95v+Ym74/A/trMkd+tOLGnbD5kh/VExpTfIW7ZasTV
f1ca4/UWb9X9owT51GtYmPH16bL9f/SeWdEJckR16Akl9JBHMr7noRhSFMarZSuu
zeUB62fDehr8ssUfZbi+6ijwpmEXa+/jGH7W7KYxfZLpYroX1HcEbAH2nNB59otl
0Q3TTmKpccelxQW/82NdNq071QOb4RFV66VHEAo+3M9LOC9zqFDHFMD0c1tXnPBp
ul7P9Rf2mHYGBhzbKibRgSqicXCj3llwlx72MsbupjTfEjZcX5KamvdhZQEMONsP
/rRA1ZQAuuM2lcoL809gw8J4FXXDDL4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:47 2026 by rpki-client