Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
File:                     1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa (raw, json)
Hash identifier:          rcfPKb44YGSG7N9+maabcG7m7eDhcKaHuQIIxXgx/Lg=
Subject key identifier:   1E:80:37:D0:9A:1A:94:B6:9C:C8:3D:30:11:72:3A:C0:7F:5D:3F:87
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D359FDA74D4F61E60A8A92400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     64267
IP address blocks:        192.171.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:da:74:d4:f6:1e:60:a8:a9:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=e171279a-436e-4426-8361-4b7fc32b14f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2b:01:54:d3:65:94:0a:35:6c:3c:47:1f:e7:
                    1d:d4:41:ed:74:3e:36:ad:83:a4:a6:16:e5:3b:0b:
                    67:12:9d:12:f2:aa:5c:20:08:1a:87:93:19:b3:76:
                    37:3e:27:10:20:f0:00:dd:e6:bd:58:ad:7e:cf:6b:
                    ae:83:8d:3c:5b:87:75:7c:d6:bf:97:87:fa:c4:ae:
                    ed:09:3d:29:6d:3e:c7:75:04:38:09:d1:ff:cb:64:
                    05:08:9a:cd:58:ee:03:fe:5d:fb:ca:a5:0d:09:be:
                    b9:ac:e8:aa:e6:4d:10:75:20:31:c5:47:da:4c:df:
                    57:33:be:e6:9b:8a:a2:e5:a7:7a:06:e7:52:fb:3a:
                    9b:ce:0d:dd:05:89:e1:54:5e:31:19:98:8d:5b:be:
                    c9:a2:3a:12:13:55:4a:37:95:59:2d:8b:4a:9e:cc:
                    3d:a7:07:f3:70:10:e8:e8:7e:c0:55:1f:75:35:1c:
                    8f:05:09:e8:47:af:48:60:01:94:5a:e1:52:5f:d3:
                    68:59:00:ba:dc:b9:63:01:ff:de:b1:c2:e3:e4:ec:
                    8a:31:3a:b1:4b:f0:3f:d4:77:7a:13:96:28:13:d5:
                    5b:3d:6b:22:c2:04:28:6a:e7:7b:87:57:4a:ad:23:
                    c0:fb:da:33:5a:c9:d7:b9:72:d2:08:29:7a:ad:65:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:37:D0:9A:1A:94:B6:9C:C8:3D:30:11:72:3A:C0:7F:5D:3F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1b6d170b-dd1f-3d5f-934e-d7c7cd19008c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:4c:1b:88:96:67:c2:9c:67:99:a3:ae:35:51:c2:8b:06:
         2c:05:5d:79:17:90:79:e2:fd:c7:c8:fb:05:e9:79:c2:ad:d4:
         8f:ad:15:4b:08:3a:03:18:8e:1d:b7:c7:8d:03:da:e0:d6:7d:
         ea:a9:d5:f4:0c:ce:f5:7a:e1:cc:9c:1b:cf:e6:0e:97:42:77:
         79:96:7e:01:d5:0d:fa:b0:cb:0b:e5:cf:25:52:8b:00:16:bf:
         d2:7d:02:79:3c:7a:3d:f8:a2:6b:da:cf:0b:5a:e3:56:f1:90:
         d0:57:8d:06:ab:4d:40:68:ba:1b:f3:d4:d8:d2:c0:4a:9d:09:
         6f:23:8c:ab:0b:56:dc:19:76:be:05:94:9d:ab:4b:f5:b3:8e:
         2c:2f:de:d3:1b:65:2b:97:12:21:cc:02:3d:d6:cd:31:03:8c:
         b7:8d:2e:19:b6:a3:95:3b:5d:cd:31:3b:ac:78:1b:91:80:01:
         cc:58:03:fd:b2:bc:99:d9:65:ec:8c:19:97:d4:24:a8:97:b6:
         6e:7c:8c:f5:c0:cb:f8:e7:14:d1:61:69:6d:a6:02:f3:48:1e:
         ed:26:fd:78:32:aa:6e:aa:ca:2e:0b:5d:98:79:f8:f9:bf:80:
         79:69:08:fc:83:fc:e5:77:8c:b6:04:18:ef:eb:3b:d8:a6:7b:
         65:91:7c:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9p01PYeYKipJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ZTE3MTI3OWEtNDM2ZS00NDI2LTgzNjEtNGI3ZmMzMmIxNGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SsBVNNllAo1bDxHH+cd1EHtdD42rYOkphbl
OwtnEp0S8qpcIAgah5MZs3Y3PicQIPAA3ea9WK1+z2uug408W4d1fNa/l4f6xK7t
CT0pbT7HdQQ4CdH/y2QFCJrNWO4D/l37yqUNCb65rOiq5k0QdSAxxUfaTN9XM77m
m4qi5ad6BudS+zqbzg3dBYnhVF4xGZiNW77JojoSE1VKN5VZLYtKnsw9pwfzcBDo
6H7AVR91NRyPBQnoR69IYAGUWuFSX9NoWQC63LljAf/escLj5OyKMTqxS/A/1Hd6
E5YoE9VbPWsiwgQoaud7h1dKrSPA+9ozWsnXuXLSCCl6rWWiiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6AN9CaGpS2nMg9MBFyOsB/XT+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWI2ZDE3MGItZGQxZi0z
ZDVmLTkzNGUtZDdjN2NkMTkwMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKtQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnxTBuIlmfCnGeZo641UcKLBiwFXXkXkHni/cfI+wXpecKt1I+tFUsI
OgMYjh23x40D2uDWfeqp1fQMzvV64cycG8/mDpdCd3mWfgHVDfqwywvlzyVSiwAW
v9J9Ank8ej34omvazwta41bxkNBXjQarTUBouhvz1NjSwEqdCW8jjKsLVtwZdr4F
lJ2rS/Wzjiwv3tMbZSuXEiHMAj3WzTEDjLeNLhm2o5U7Xc0xO6x4G5GAAcxYA/2y
vJnZZeyMGZfUJKiXtm58jPXAy/jnFNFhaW2mAvNIHu0m/Xgyqm6qyi4LXZh5+Pm/
gHlpCPyD/OV3jLYEGO/rO9ime2WRfHE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:51:57 2026 by rpki-client