Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/76603453-bcdb-307d-8e72-dcf97f376c2e.roa
File:                     76603453-bcdb-307d-8e72-dcf97f376c2e.roa (raw, json)
Hash identifier:          JA/FgRnq5J31EuXoNYNl3uqEgpH3dUjSO9L2Pji2/NI=
Subject key identifier:   22:DA:FD:1D:C5:94:9B:96:BF:C2:28:D0:AF:9C:6A:0E:56:DB:BE:C2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D15A265747ADB9F0326FD9F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/76603453-bcdb-307d-8e72-dcf97f376c2e.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     54103
IP address blocks:        67.203.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:65:74:7a:db:9f:03:26:fd:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=b64004b1-4fc3-4aed-bd24-1ab7f977dc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:2f:19:90:c6:a7:7f:42:83:86:49:75:e6:
                    af:2a:4a:55:88:73:58:6f:d0:40:46:27:04:d4:7a:
                    1e:3a:61:ba:cd:0a:a4:90:3f:15:a6:c3:9f:7b:ea:
                    52:99:21:83:46:4a:8c:0b:40:42:ee:d6:92:e1:5c:
                    dd:2f:31:d9:35:89:7c:da:a9:3d:ab:92:36:ee:1e:
                    be:97:5c:b0:d8:12:f7:00:72:2b:b5:c1:22:47:6a:
                    25:50:ec:de:61:95:48:db:3c:97:51:7e:f1:dc:48:
                    93:fa:8a:8f:5f:a3:4b:70:84:15:57:48:19:a8:9e:
                    3b:3b:10:b9:9d:99:e3:bf:19:5a:0e:c5:18:bf:bd:
                    2a:a7:8d:22:95:90:e9:ab:44:bd:66:8e:0b:33:44:
                    de:5d:1a:fb:67:f8:78:e4:b4:da:f2:42:30:6a:16:
                    41:a3:b0:a2:0a:94:1e:3d:0e:89:af:be:cf:32:3b:
                    a1:24:6d:e5:37:e2:ec:0f:fe:fb:f0:ca:04:c7:67:
                    a4:53:57:45:4a:9a:47:09:91:74:ea:69:d9:6b:a7:
                    07:cb:ba:ea:4c:5b:87:25:32:b4:27:96:de:15:07:
                    54:b8:a8:dc:82:8d:e6:ea:8a:fa:f6:47:ec:c0:b4:
                    c6:dd:8c:ff:f4:57:59:b1:db:5d:2d:cd:2f:33:3d:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:FD:1D:C5:94:9B:96:BF:C2:28:D0:AF:9C:6A:0E:56:DB:BE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/76603453-bcdb-307d-8e72-dcf97f376c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c6:cf:6f:ae:53:d9:61:1c:fa:2e:72:23:c0:cb:a8:57:b1:
         b0:be:95:e6:3e:d3:67:88:42:52:1b:0c:15:7f:23:86:99:70:
         49:41:5f:db:01:16:d1:c9:c1:ce:49:18:8d:b0:80:fe:15:a2:
         6d:f0:3d:1d:41:8f:96:84:16:0e:5f:16:bf:e0:49:85:d8:f6:
         3a:55:cf:84:0f:d6:67:b8:02:62:e8:a7:e8:30:96:84:05:5f:
         37:4c:d1:89:f1:85:6b:ef:8f:cf:1f:36:d7:b7:eb:cc:30:10:
         cb:9d:63:15:09:40:5c:ba:64:e3:05:57:77:36:ec:ac:de:3f:
         00:42:c7:73:ab:3b:f5:9a:a1:7a:e1:e0:2b:39:b3:9a:3d:33:
         4c:4b:18:58:9e:a8:cc:bc:cd:23:f0:66:2b:f7:ff:b4:d8:b2:
         c6:30:d6:f6:bb:70:8a:aa:46:3e:76:a9:61:8b:23:44:44:47:
         5d:e5:91:63:2e:49:cb:fd:a4:1f:a5:80:de:56:13:ab:f2:ce:
         9c:be:d1:90:40:8f:5c:a9:ba:b7:2a:ce:fc:cd:23:b3:aa:db:
         65:cd:d5:c4:72:bb:73:1c:d0:18:72:26:3d:64:5d:e4:d1:82:
         09:61:cf:be:77:e4:fa:3f:04:2b:ee:9c:81:3f:a5:70:a4:b7:
         db:93:5a:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomV0etufAyb9n4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
YjY0MDA0YjEtNGZjMy00YWVkLWJkMjQtMWFiN2Y5NzdkYzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10cvGZDGp39Cg4ZJdeavKkpViHNYb9BARicE
1HoeOmG6zQqkkD8VpsOfe+pSmSGDRkqMC0BC7taS4VzdLzHZNYl82qk9q5I27h6+
l1yw2BL3AHIrtcEiR2olUOzeYZVI2zyXUX7x3EiT+oqPX6NLcIQVV0gZqJ47OxC5
nZnjvxlaDsUYv70qp40ilZDpq0S9Zo4LM0TeXRr7Z/h45LTa8kIwahZBo7CiCpQe
PQ6Jr77PMjuhJG3lN+LsD/778MoEx2ekU1dFSppHCZF06mnZa6cHy7rqTFuHJTK0
J5beFQdUuKjcgo3m6or69kfswLTG3Yz/9FdZsdtdLc0vMz1xUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLa/R3FlJuWv8Io0K+cag5W277CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzY2MDM0NTMtYmNkYi0z
MDdkLThlNzItZGNmOTdmMzc2YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8sSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALnGz2+uU9lhHPouciPAy6hXsbC+leY+02eIQlIbDBV/I4aZcElBX9sB
FtHJwc5JGI2wgP4Vom3wPR1Bj5aEFg5fFr/gSYXY9jpVz4QP1me4AmLop+gwloQF
XzdM0YnxhWvvj88fNte368wwEMudYxUJQFy6ZOMFV3c27KzePwBCx3OrO/WaoXrh
4Cs5s5o9M0xLGFieqMy8zSPwZiv3/7TYssYw1va7cIqqRj52qWGLI0RER13lkWMu
Scv9pB+lgN5WE6vyzpy+0ZBAj1ypurcqzvzNI7Oq22XN1cRyu3Mc0BhyJj1kXeTR
gglhz7535Po/BCvunIE/pXCkt9uTWog=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:59 2026 by rpki-client