Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e2a26cd1-5e1b-3d81-9a0b-c7b93f4b2cbe.roa
File:                     e2a26cd1-5e1b-3d81-9a0b-c7b93f4b2cbe.roa (raw, json)
Hash identifier:          J49EdITHatnhdBuowQSut5lYwnqgvtAmZeHktQcgzhY=
Subject key identifier:   E4:E2:B3:10:1D:47:99:23:E6:CE:11:35:6E:9B:E4:F9:80:F6:86:5B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB32524EF62A87D6CA1CC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e2a26cd1-5e1b-3d81-9a0b-c7b93f4b2cbe.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14065
IP address blocks:        65.185.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:32:52:4e:f6:2a:87:d6:ca:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=fae5c751-a3ba-490d-a39f-5fff16d57ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:27:11:5d:c5:f5:e2:e2:fe:b4:fc:d6:74:
                    b1:58:52:cb:b5:27:89:ac:1a:0f:d6:d0:39:e4:dc:
                    53:18:28:30:ce:94:46:2d:98:1f:9c:ee:b1:24:c0:
                    49:a7:86:17:c9:95:2f:ed:b8:ff:a3:06:5f:42:8e:
                    53:4f:a4:c5:90:b1:f3:10:fb:1c:71:b4:ad:cf:79:
                    bb:c3:22:f4:b3:26:45:b5:a6:9c:0f:9d:54:22:70:
                    f4:2f:67:8b:50:34:73:00:e2:ce:15:bc:ed:04:55:
                    62:3d:f4:fb:71:51:33:3f:e9:e1:18:f9:4b:4f:b4:
                    53:5a:ae:12:37:d1:99:01:3c:8e:17:5b:26:ee:13:
                    5b:01:ea:96:d3:5a:0e:70:47:16:b8:07:40:10:2e:
                    2f:66:03:43:fc:02:3d:4e:eb:89:72:d5:c9:e2:34:
                    67:9c:f6:f4:2e:9c:8b:38:9b:d2:55:de:6d:10:19:
                    a9:f2:24:cc:57:f2:3e:e8:d9:8f:f8:b7:d5:e0:29:
                    de:65:c2:64:63:c0:c2:9c:eb:e7:9f:09:fe:1a:70:
                    de:e0:1c:19:03:4e:7f:b7:ea:dd:e4:1a:bf:d9:57:
                    5b:bb:36:a5:02:ab:08:97:47:2b:71:6c:56:79:20:
                    ef:16:ff:f1:f8:01:be:41:18:6c:50:d9:44:2c:cd:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:B3:10:1D:47:99:23:E6:CE:11:35:6E:9B:E4:F9:80:F6:86:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e2a26cd1-5e1b-3d81-9a0b-c7b93f4b2cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.185.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6c:2b:b1:5d:93:80:5d:03:f2:c4:47:bd:7e:a7:ff:7e:a2:
         cb:59:b8:91:f6:23:8d:be:ba:89:0d:49:94:84:d3:af:75:98:
         cf:0c:b2:1e:31:58:d0:92:86:ce:87:be:93:8e:d6:8c:e6:98:
         f3:52:1e:ff:bb:07:3f:d6:bc:ac:20:6d:31:8e:d6:0b:b8:29:
         5e:d5:aa:b3:1d:b8:2c:6c:b8:b4:ef:ef:15:7c:f3:e8:a6:bf:
         54:e6:87:8b:a1:f2:b9:68:92:b9:a8:57:55:13:cc:c2:73:d6:
         34:7d:15:0d:fe:19:48:30:49:9a:bd:6e:a6:0e:28:be:90:36:
         62:d0:c7:7a:6c:5e:94:38:ce:bf:08:22:90:b2:63:08:e8:17:
         26:87:d6:a4:a7:30:29:f9:77:1e:74:f3:d6:56:2a:a9:fb:55:
         54:33:1d:fd:e4:8f:ac:ec:01:7c:d3:81:c0:91:76:c8:28:e1:
         c3:46:bb:6d:d0:c8:1e:dc:ab:41:5d:ce:be:fa:79:e2:86:7c:
         30:e9:ed:76:db:8d:23:a9:4a:a1:c2:a9:1e:25:7b:20:51:52:
         76:07:d1:71:69:61:1c:f4:12:66:43:16:29:fe:fa:67:b5:7b:
         40:d7:79:49:57:c7:0c:7a:a0:f7:e9:4d:47:c0:0a:54:1c:a7:
         a4:31:b3:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyzJSTvYqh9bKHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ZmFlNWM3NTEtYTNiYS00OTBkLWEzOWYtNWZmZjE2ZDU3ZWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHknEV3F9eLi/rT81nSxWFLLtSeJrBoP1tA5
5NxTGCgwzpRGLZgfnO6xJMBJp4YXyZUv7bj/owZfQo5TT6TFkLHzEPsccbStz3m7
wyL0syZFtaacD51UInD0L2eLUDRzAOLOFbztBFViPfT7cVEzP+nhGPlLT7RTWq4S
N9GZATyOF1sm7hNbAeqW01oOcEcWuAdAEC4vZgND/AI9TuuJctXJ4jRnnPb0LpyL
OJvSVd5tEBmp8iTMV/I+6NmP+LfV4CneZcJkY8DCnOvnnwn+GnDe4BwZA05/t+rd
5Bq/2VdbuzalAqsIl0crcWxWeSDvFv/x+AG+QRhsUNlELM2PKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTisxAdR5kj5s4RNW6b5PmA9oZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZTJhMjZjZDEtNWUxYi0z
ZDgxLTlhMGItYzdiOTNmNGIyY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbnzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdsK7Fdk4BdA/LER71+p/9+ostZuJH2I42+uokNSZSE0691mM8Msh4x
WNCShs6HvpOO1ozmmPNSHv+7Bz/WvKwgbTGO1gu4KV7VqrMduCxsuLTv7xV88+im
v1Tmh4uh8rlokrmoV1UTzMJz1jR9FQ3+GUgwSZq9bqYOKL6QNmLQx3psXpQ4zr8I
IpCyYwjoFyaH1qSnMCn5dx5089ZWKqn7VVQzHf3kj6zsAXzTgcCRdsgo4cNGu23Q
yB7cq0Fdzr76eeKGfDDp7XbbjSOpSqHCqR4leyBRUnYH0XFpYRz0EmZDFin++me1
e0DXeUlXxwx6oPfpTUfAClQcp6Qxs/g=
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:31 2026 by rpki-client