Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d0f135-126c-345c-a4d7-9a12a92d5439.roa
File:                     24d0f135-126c-345c-a4d7-9a12a92d5439.roa (raw, json)
Hash identifier:          SM5w6M2w8TIk9laeTejSpo2c/fj5cISPJE0Br4MB6Mw=
Subject key identifier:   77:13:A1:CC:A0:A1:E0:89:36:83:9E:36:49:93:33:77:E3:1C:CA:23
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D3704BE731B3458569542B300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d0f135-126c-345c-a4d7-9a12a92d5439.roa
Signing time:             Thu 19 Mar 2026 01:00:31 +0000
ROA not before:           Thu 19 Mar 2026 01:00:31 +0000
ROA not after:            Wed 17 Jun 2026 01:00:31 +0000
asID:                     208972
IP address blocks:        149.34.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:04:be:73:1b:34:58:56:95:42:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 19 01:00:31 2026 GMT
            Not After : Jun 17 01:00:31 2026 GMT
        Subject: CN=da6ee6e8-642e-477f-9d52-9058ace06f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:93:2e:84:b4:ac:a3:3d:4e:2f:f2:51:40:
                    85:99:c0:ec:0f:ff:64:c8:f9:68:a5:d2:4d:da:61:
                    f3:f5:b9:ee:0e:d5:43:a6:88:b8:51:1a:96:47:15:
                    a5:66:82:20:90:f9:a9:97:86:f6:84:9e:09:8a:9f:
                    b8:f8:fd:f4:6f:fe:03:04:d7:79:7c:87:a6:c3:4a:
                    03:a3:26:c2:e2:a3:d7:2a:4f:bb:4d:03:9f:0f:5c:
                    4f:55:26:d8:c0:82:50:56:69:14:48:bd:62:70:13:
                    85:96:4f:27:85:65:35:fa:38:28:ee:01:f7:78:8e:
                    11:21:92:bc:f6:b4:24:e0:c6:2a:18:62:46:c3:89:
                    0c:80:5c:a4:5b:78:77:3e:de:27:86:1b:83:f8:00:
                    5d:68:8b:6c:e8:21:85:f4:8a:6c:de:e3:09:90:11:
                    0f:d4:b9:47:0b:03:3e:4d:50:eb:15:df:62:51:3d:
                    0a:5a:1d:d8:ef:20:ff:dc:55:14:0e:71:60:9c:56:
                    dd:16:fe:75:eb:fd:d6:ff:55:8c:53:b2:ef:1e:50:
                    24:48:07:25:c9:4b:bb:2c:6e:93:6d:01:d6:61:d3:
                    64:0f:4a:ae:36:24:94:f6:2d:77:fd:d3:27:fe:e6:
                    47:81:90:bc:82:4b:7f:23:1a:b6:70:58:9a:9b:0c:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:13:A1:CC:A0:A1:E0:89:36:83:9E:36:49:93:33:77:E3:1C:CA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/24d0f135-126c-345c-a4d7-9a12a92d5439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.34.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:36:83:05:80:e7:e3:29:9d:69:cf:5b:b7:db:1c:98:5d:
         fa:f6:49:be:28:0e:5c:3a:29:b3:a3:6d:83:2e:ef:13:1d:2a:
         eb:d9:4e:2d:ee:24:07:38:0d:37:ba:04:d1:11:b2:2e:94:b2:
         5b:05:7e:14:f2:58:6d:f0:1e:3b:5e:ee:59:24:30:89:58:82:
         9f:46:6b:73:bd:ff:f1:da:66:26:7d:ab:31:3f:1a:59:fa:7d:
         58:f3:12:d0:bb:2e:52:61:5e:34:f9:25:f4:db:34:ba:04:22:
         bf:f3:8c:52:f9:66:7d:6b:83:1e:3a:ab:fe:87:dc:89:03:7c:
         eb:58:c1:50:0e:c4:6c:a2:8d:7f:f7:fd:80:2e:37:51:2e:cf:
         27:cc:4d:9d:3e:2f:6c:aa:88:a0:20:e7:02:fb:d8:c1:cb:b2:
         84:7c:5c:ea:08:25:87:37:64:55:f0:1e:39:17:80:25:b3:94:
         eb:4a:fd:61:12:7f:95:aa:b5:c2:bc:66:d0:3a:39:3f:76:39:
         db:68:3c:28:1f:5e:92:20:40:51:15:32:3f:37:f6:e1:82:60:
         ce:c9:0f:47:f9:93:2a:1a:d2:33:dc:45:f2:5a:2b:3a:70:10:
         61:20:c1:8e:38:6d:34:65:57:1d:c3:77:c0:0d:00:a6:d3:2e:
         ce:a1:e8:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BL5zGzRYVpVCswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk
ZGE2ZWU2ZTgtNjQyZS00NzdmLTlkNTItOTA1OGFjZTA2ZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiWTLoS0rKM9Ti/yUUCFmcDsD/9kyPlopdJN
2mHz9bnuDtVDpoi4URqWRxWlZoIgkPmpl4b2hJ4Jip+4+P30b/4DBNd5fIemw0oD
oybC4qPXKk+7TQOfD1xPVSbYwIJQVmkUSL1icBOFlk8nhWU1+jgo7gH3eI4RIZK8
9rQk4MYqGGJGw4kMgFykW3h3Pt4nhhuD+ABdaIts6CGF9Ips3uMJkBEP1LlHCwM+
TVDrFd9iUT0KWh3Y7yD/3FUUDnFgnFbdFv516/3W/1WMU7LvHlAkSAclyUu7LG6T
bQHWYdNkD0quNiSU9i13/dMn/uZHgZC8gkt/Ixq2cFiamwykbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHcTocygoeCJNoOeNkmTM3fjHMojMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjRkMGYxMzUtMTI2Yy0z
NDVjLWE0ZDctOWExMmE5MmQ1NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlSLAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzeNoMFgOfjKZ1pz1u32xyYXfr2Sb4oDlw6KbOjbYMu7xMdKuvZTi3u
JAc4DTe6BNERsi6UslsFfhTyWG3wHjte7lkkMIlYgp9Ga3O9//HaZiZ9qzE/Gln6
fVjzEtC7LlJhXjT5JfTbNLoEIr/zjFL5Zn1rgx46q/6H3IkDfOtYwVAOxGyijX/3
/YAuN1EuzyfMTZ0+L2yqiKAg5wL72MHLsoR8XOoIJYc3ZFXwHjkXgCWzlOtK/WES
f5WqtcK8ZtA6OT92OdtoPCgfXpIgQFEVMj839uGCYM7JD0f5kyoa0jPcRfJaKzpw
EGEgwY44bTRlVx3Dd8ANAKbTLs6h6Go=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:21 2026 by rpki-client