Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa
File:                     1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa (raw, json)
Hash identifier:          muFVl9bbEkB1HztDB8gbJTmUod/5Mw+sJKAixUeWt+c=
Subject key identifier:   71:81:3A:F6:41:C8:E1:61:8E:15:1B:12:A3:09:A6:84:96:D1:7B:D1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFBB9753337663B0E9A000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        97.69.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:bb:97:53:33:76:63:b0:e9:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c639bde2-5268-45c5-9ff4-ce89a5e5a81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:22:42:dd:26:c1:a5:8c:21:eb:1b:ea:20:
                    7a:bd:66:d6:d5:4c:2f:8e:08:d2:0c:bb:ad:11:9a:
                    d7:35:dd:f4:7b:6b:63:49:f2:8b:1a:d5:78:3d:76:
                    ea:e5:d1:c4:88:80:dc:66:b0:31:2f:59:cd:82:85:
                    ae:e5:06:77:5f:32:ca:84:1f:3f:97:80:65:96:96:
                    f5:4b:59:81:b2:35:25:38:97:45:a5:a8:d7:87:71:
                    ac:c4:bf:55:d1:de:1b:29:1f:45:f0:66:4c:e0:4d:
                    af:1c:f7:0f:2c:e7:c9:d5:c1:34:c4:f7:8a:cb:83:
                    e6:70:06:a2:df:ab:1a:04:e6:be:d7:8e:91:ac:ae:
                    d9:42:2a:b0:77:62:ba:e1:41:cf:4f:26:f5:5c:85:
                    8a:22:2d:c4:a3:9f:45:bf:16:de:e7:dc:6a:ec:20:
                    78:6d:55:b7:8e:f8:77:0e:40:ab:a5:b1:99:15:be:
                    98:b1:22:b1:a9:72:91:36:50:5f:0b:d8:59:80:d0:
                    d5:8b:fb:20:95:c3:02:44:ee:d8:98:c9:14:d2:c8:
                    16:9d:3a:2d:de:75:a6:68:ae:4c:ff:c4:b6:09:d1:
                    e9:53:1c:5a:27:a6:5d:a4:fb:ef:e6:df:31:02:3a:
                    1f:f5:c8:df:ec:ce:63:83:28:aa:f3:7b:86:12:27:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:81:3A:F6:41:C8:E1:61:8E:15:1B:12:A3:09:A6:84:96:D1:7B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0ecdbf-f1dd-321b-a6c3-982ba1bcb467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:e5:74:e3:64:6f:86:42:72:7d:bd:56:aa:56:b4:a1:bd:
         a5:ed:66:94:14:b2:f7:d8:e2:51:71:19:31:54:35:9c:29:15:
         52:36:0a:72:8f:0d:b7:60:8a:d7:9d:f6:14:20:3e:82:4b:e7:
         66:69:cf:7b:b4:08:74:9e:41:0d:b7:22:3d:3d:04:16:77:e4:
         2b:0f:cc:9e:3f:da:0f:ad:e9:f1:51:81:ec:ee:1c:c6:fa:8d:
         b0:61:26:cf:df:5a:69:99:03:3c:8f:05:e8:99:ce:6d:c3:12:
         8f:57:1f:26:d2:36:5f:d6:b0:60:94:12:ba:29:28:a1:2f:6e:
         6b:01:4c:12:28:e4:85:c5:89:fd:a4:d9:ee:67:69:c9:1b:e4:
         2b:4e:03:14:53:e2:4a:ca:f0:68:db:73:ec:c8:0d:18:25:9f:
         75:94:4e:63:40:05:b0:6f:04:63:75:10:ac:93:1d:e6:fe:37:
         04:35:0f:20:74:8b:96:6f:94:a6:92:ec:f2:9a:6c:12:d5:cd:
         5f:41:99:99:8c:4c:81:95:72:83:f2:be:79:2e:61:76:34:f9:
         25:cf:ec:33:8b:47:6c:87:39:e6:f0:91:e1:6c:79:3e:d4:35:
         1b:e6:d0:8e:81:5e:9e:d9:a3:d1:c1:dd:4e:83:ab:54:7c:66:
         8f:e1:56:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7uXUzN2Y7DpoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
YzYzOWJkZTItNTI2OC00NWM1LTlmZjQtY2U4OWE1ZTVhODFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixMiQt0mwaWMIesb6iB6vWbW1UwvjgjSDLut
EZrXNd30e2tjSfKLGtV4PXbq5dHEiIDcZrAxL1nNgoWu5QZ3XzLKhB8/l4Bllpb1
S1mBsjUlOJdFpajXh3GsxL9V0d4bKR9F8GZM4E2vHPcPLOfJ1cE0xPeKy4PmcAai
36saBOa+146RrK7ZQiqwd2K64UHPTyb1XIWKIi3Eo59Fvxbe59xq7CB4bVW3jvh3
DkCrpbGZFb6YsSKxqXKRNlBfC9hZgNDVi/sglcMCRO7YmMkU0sgWnTot3nWmaK5M
/8S2CdHpUxxaJ6ZdpPvv5t8xAjof9cjf7M5jgyiq83uGEid7JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHGBOvZByOFhjhUbEqMJpoSW0XvRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMWMwZWNkYmYtZjFkZC0z
MjFiLWE2YzMtOTgyYmExYmNiNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUW7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHz5XTjZG+GQnJ9vVaqVrShvaXtZpQUsvfY4lFxGTFUNZwpFVI2CnKP
Dbdgited9hQgPoJL52Zpz3u0CHSeQQ23Ij09BBZ35CsPzJ4/2g+t6fFRgezuHMb6
jbBhJs/fWmmZAzyPBeiZzm3DEo9XHybSNl/WsGCUEropKKEvbmsBTBIo5IXFif2k
2e5nackb5CtOAxRT4krK8Gjbc+zIDRgln3WUTmNABbBvBGN1EKyTHeb+NwQ1DyB0
i5ZvlKaS7PKabBLVzV9BmZmMTIGVcoPyvnkuYXY0+SXP7DOLR2yHOebwkeFseT7U
NRvm0I6BXp7Zo9HB3U6Dq1R8Zo/hVq0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:58 2026 by rpki-client