Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f2ef46b4-3c23-3e44-8f62-ce2ef19a56f6.roa
File:                     f2ef46b4-3c23-3e44-8f62-ce2ef19a56f6.roa (raw, json)
Hash identifier:          gfW1i8rgiIuiffjOaqMgqMY4GV5ExZ87Y8OScC1keJI=
Subject key identifier:   53:6B:03:5E:C5:02:60:EF:D7:88:A8:AD:9D:3E:89:BC:A6:2E:F8:B5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB2150B6D4963DD585FD00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f2ef46b4-3c23-3e44-8f62-ce2ef19a56f6.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11351
IP address blocks:        71.65.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:21:50:b6:d4:96:3d:d5:85:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=681b399c-20d0-4bc7-817d-9101791cb2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:be:45:79:b7:9b:7f:da:9e:57:33:60:b6:
                    62:f1:c9:03:71:28:0f:04:b6:1b:e9:d1:f3:c3:11:
                    5c:54:3c:95:a1:6c:ad:4e:f9:be:fc:8b:33:8b:41:
                    d1:e4:7e:df:28:3c:c7:fc:0d:b5:dd:c6:d4:63:49:
                    7b:2b:12:fc:85:c1:3e:9e:1a:46:71:ad:bd:dc:2c:
                    11:9a:4f:7a:4b:b7:3c:89:8f:90:39:e1:b3:3b:ad:
                    ae:54:7f:55:08:b7:cd:99:d6:8c:02:97:e5:43:74:
                    cd:ef:ed:f0:5a:c6:91:da:1f:7e:a7:ea:78:24:95:
                    e3:29:3d:b5:62:ca:e9:6d:08:1f:f7:25:ce:01:da:
                    8c:09:8e:d9:57:3c:3f:e2:8d:20:02:f6:cf:39:79:
                    00:99:60:53:d5:70:69:ee:a4:df:0d:e0:e5:9f:cb:
                    e0:9a:6b:ee:84:d8:d7:73:32:60:0c:6e:b6:24:2f:
                    78:33:99:3b:60:2a:a8:d2:66:8c:e2:c0:0b:a2:d6:
                    78:a5:00:b1:28:97:b6:8c:80:a2:ee:e4:51:20:08:
                    49:70:57:ee:3b:b8:f9:40:ba:71:1a:fe:22:d6:46:
                    4c:6c:68:3c:d5:3b:d2:ae:e4:30:86:37:f1:d4:5a:
                    ab:d7:2e:74:8a:0f:e6:f2:30:43:2a:c5:3f:f0:3a:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:03:5E:C5:02:60:EF:D7:88:A8:AD:9D:3E:89:BC:A6:2E:F8:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f2ef46b4-3c23-3e44-8f62-ce2ef19a56f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.65.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:a1:e7:de:02:0b:35:6c:00:e0:b5:41:b8:a7:c2:a1:ba:
         0f:cd:16:01:48:ea:a5:2d:99:f0:9f:dc:b8:24:37:31:da:6e:
         93:c3:02:03:5c:7f:0c:dd:9c:2a:81:d5:18:90:64:e2:0a:7d:
         95:47:c9:23:56:9c:9e:4f:ca:d0:04:bc:fd:0c:b2:cb:a7:a9:
         0e:c4:0b:79:3a:70:c9:ea:c8:e3:fe:2e:ed:27:b3:d9:e7:e2:
         12:9e:7d:9e:65:51:9e:ab:c4:c1:2d:fb:d6:ee:6b:ab:7b:d5:
         16:f2:5e:a2:4a:a2:2d:df:12:1a:3c:7d:f2:5f:95:27:5d:94:
         6f:d0:fb:19:29:54:a1:f1:1e:95:17:b0:81:6a:7e:b2:64:5b:
         9d:9a:fc:36:09:a7:14:53:64:06:41:ed:d5:09:fd:99:bf:12:
         94:a9:77:b2:2a:08:1e:57:ee:fc:55:6f:91:5a:17:68:99:d9:
         85:e9:8b:eb:b6:b3:70:67:ed:92:5b:a2:2e:9b:1a:01:cc:aa:
         42:fa:7e:d9:da:e5:17:57:46:97:88:95:02:a1:41:3c:78:5c:
         4c:19:dd:75:45:f0:3e:4e:5c:47:e7:76:de:a0:92:09:fc:5b:
         26:ad:93:3c:64:2b:08:50:3d:61:28:6b:fb:e8:51:99:a4:ed:
         95:d2:ef:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyyFQttSWPdWF/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
NjgxYjM5OWMtMjBkMC00YmM3LTgxN2QtOTEwMTc5MWNiMmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmO+RXm3m3/anlczYLZi8ckDcSgPBLYb6dHz
wxFcVDyVoWytTvm+/Iszi0HR5H7fKDzH/A213cbUY0l7KxL8hcE+nhpGca293CwR
mk96S7c8iY+QOeGzO62uVH9VCLfNmdaMApflQ3TN7+3wWsaR2h9+p+p4JJXjKT21
YsrpbQgf9yXOAdqMCY7ZVzw/4o0gAvbPOXkAmWBT1XBp7qTfDeDln8vgmmvuhNjX
czJgDG62JC94M5k7YCqo0maM4sALotZ4pQCxKJe2jICi7uRRIAhJcFfuO7j5QLpx
Gv4i1kZMbGg81TvSruQwhjfx1Fqr1y50ig/m8jBDKsU/8Dqr4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNrA17FAmDv14iorZ0+ibymLvi1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjJlZjQ2YjQtM2MyMy0z
ZTQ0LThmNjItY2UyZWYxOWE1NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR0EgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfBoefeAgs1bADgtUG4p8Khug/NFgFI6qUtmfCf3LgkNzHabpPDAgNc
fwzdnCqB1RiQZOIKfZVHySNWnJ5PytAEvP0MssunqQ7EC3k6cMnqyOP+Lu0ns9nn
4hKefZ5lUZ6rxMEt+9bua6t71RbyXqJKoi3fEho8ffJflSddlG/Q+xkpVKHxHpUX
sIFqfrJkW52a/DYJpxRTZAZB7dUJ/Zm/EpSpd7IqCB5X7vxVb5FaF2iZ2YXpi+u2
s3Bn7ZJboi6bGgHMqkL6ftna5RdXRpeIlQKhQTx4XEwZ3XVF8D5OXEfndt6gkgn8
WyatkzxkKwhQPWEoa/voUZmk7ZXS7/Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:15 2026 by rpki-client