Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/2fa74220-df52-396f-8607-128d55c8fabb.roa
File:                     2fa74220-df52-396f-8607-128d55c8fabb.roa (raw, json)
Hash identifier:          APUyAtPMrbra5Ze/SuYHgtM31o3ji+QFiplhOxDhVsg=
Subject key identifier:   D9:FD:61:72:E1:A8:8C:2D:92:B8:E6:35:0E:1D:6E:32:7C:51:69:9B
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584D2A74E850C2DBDFDB2D80FCE0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/2fa74220-df52-396f-8607-128d55c8fabb.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     55293
IP address blocks:        170.81.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e8:50:c2:db:df:db:2d:80:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=25bbb552-4fc2-4738-a650-94c8aad90728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:c0:d7:91:3a:c3:37:13:3b:90:23:7f:8a:
                    b4:7e:d0:ef:47:80:46:1b:93:9b:a5:3a:1c:de:86:
                    d3:58:60:cd:a8:cb:66:80:e5:d0:d0:77:49:d3:af:
                    2a:12:8a:21:99:30:e3:e8:e4:91:bf:b6:bf:ce:5d:
                    5f:01:22:45:58:fa:33:68:77:18:45:ac:98:3f:7c:
                    6a:3c:7e:fb:eb:0a:c6:25:eb:79:cb:2f:b9:ea:f3:
                    a8:fd:c9:cb:84:ce:18:93:ea:0f:69:e4:33:c3:e6:
                    ec:cf:c5:08:70:ff:be:da:cd:90:df:38:f1:5a:75:
                    02:3f:fe:f6:18:5d:eb:5c:c1:16:b7:3f:96:88:f6:
                    90:a1:e5:e3:ba:8a:23:d1:7d:71:e2:45:ee:0c:ca:
                    3a:37:3f:2a:5d:3a:07:1a:42:50:9d:f2:85:3d:57:
                    06:7f:f0:14:a4:78:f8:ff:2c:85:26:48:20:f8:3f:
                    c2:26:47:19:46:ff:18:a6:6f:fa:45:43:45:53:8c:
                    81:a3:62:ba:45:e5:00:54:c8:dc:c3:14:98:f6:19:
                    d1:cb:15:aa:ff:ff:bb:db:f3:f5:63:15:a3:88:46:
                    0c:6d:4c:4e:35:47:16:b6:23:ba:99:c4:63:ce:fb:
                    48:dd:82:a9:ca:0a:cf:12:e7:90:f0:bf:47:e1:a5:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:61:72:E1:A8:8C:2D:92:B8:E6:35:0E:1D:6E:32:7C:51:69:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/2fa74220-df52-396f-8607-128d55c8fabb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:31:81:98:25:c1:a7:2f:ef:f5:26:32:a8:f9:dd:b4:e6:ae:
         e2:6c:f2:1a:de:42:af:44:47:23:c7:ee:ce:50:cf:19:ef:87:
         96:75:07:ad:4e:e1:82:5e:89:88:e9:59:04:61:23:36:eb:2c:
         d1:41:21:27:4e:55:a2:85:af:05:22:15:43:21:01:95:82:df:
         23:03:e5:3e:f3:bd:3c:f2:a9:52:9c:dd:36:61:bb:22:1d:61:
         39:86:72:8f:db:6f:06:40:d2:5c:66:6f:80:eb:5a:87:b3:3c:
         13:4d:7d:ae:35:ad:fa:7b:f3:52:d6:49:e1:61:c2:d9:43:40:
         ee:87:5a:26:7d:72:15:16:96:f1:fb:86:72:15:b6:34:92:11:
         72:50:c6:ca:38:9a:62:0d:41:25:c2:3b:25:7a:31:5b:4e:57:
         4f:3c:c7:76:93:5b:b1:06:53:f2:27:1d:59:3d:ab:38:e8:d3:
         15:47:36:3d:f2:a8:b8:54:0a:19:93:f5:e9:d5:46:f3:d3:3b:
         7c:35:03:96:15:3f:c5:f3:a0:60:5d:19:21:44:33:07:a1:92:
         8a:9c:96:71:49:6f:a7:9a:05:1d:dc:d9:f1:e8:f2:97:0b:af:
         99:fb:fd:e2:e3:3f:9c:b3:7d:92:eb:1a:bc:20:07:ae:1c:95:
         18:9e:c4:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOhQwtvf2y2A/OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
MjViYmI1NTItNGZjMi00NzM4LWE2NTAtOTRjOGFhZDkwNzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGTA15E6wzcTO5Ajf4q0ftDvR4BGG5ObpToc
3obTWGDNqMtmgOXQ0HdJ068qEoohmTDj6OSRv7a/zl1fASJFWPozaHcYRayYP3xq
PH776wrGJet5yy+56vOo/cnLhM4Yk+oPaeQzw+bsz8UIcP++2s2Q3zjxWnUCP/72
GF3rXMEWtz+WiPaQoeXjuooj0X1x4kXuDMo6Nz8qXToHGkJQnfKFPVcGf/AUpHj4
/yyFJkgg+D/CJkcZRv8Ypm/6RUNFU4yBo2K6ReUAVMjcwxSY9hnRyxWq//+72/P1
YxWjiEYMbUxONUcWtiO6mcRjzvtI3YKpygrPEueQ8L9H4aUfvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNn9YXLhqIwtkrjmNQ4dbjJ8UWmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvMmZhNzQyMjAtZGY1Mi0z
OTZmLTg2MDctMTI4ZDU1YzhmYWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlF8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFExgZglwacv7/UmMqj53bTmruJs8hreQq9ERyPH7s5Qzxnvh5Z1B61O
4YJeiYjpWQRhIzbrLNFBISdOVaKFrwUiFUMhAZWC3yMD5T7zvTzyqVKc3TZhuyId
YTmGco/bbwZA0lxmb4DrWoezPBNNfa41rfp781LWSeFhwtlDQO6HWiZ9chUWlvH7
hnIVtjSSEXJQxso4mmINQSXCOyV6MVtOV088x3aTW7EGU/InHVk9qzjo0xVHNj3y
qLhUChmT9enVRvPTO3w1A5YVP8XzoGBdGSFEMwehkoqclnFJb6eaBR3c2fHo8pcL
r5n7/eLjP5yzfZLrGrwgB64clRiexKA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:53 2026 by rpki-client