Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
File:                     53331bc6-138c-3866-b898-40211d5855b6.roa (raw, json)
Hash identifier:          DBmbnJaxdmO6Bu87C80IlBVe1pEyjm7Xt9yA2+YhXm8=
Subject key identifier:   DE:81:B1:E5:D4:68:CD:42:B2:DA:D7:B1:30:16:11:73:B8:26:43:FB
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584D3F64F3C19477CFA6980FBD40
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     5511
IP address blocks:        167.100.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f3:c1:94:77:cf:a6:98:0f:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=e09d1352-5fbd-4508-a732-5887a3e3a8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:08:31:91:ca:a4:ca:fe:84:9e:80:28:40:
                    11:e4:01:58:cf:b8:6a:d6:85:76:6d:7e:f8:e4:77:
                    f9:ad:89:2f:77:82:f8:ed:8f:69:3d:af:bc:3e:57:
                    4a:e4:26:ec:78:67:4e:b2:34:e9:35:be:e9:cc:42:
                    0a:14:1c:93:8f:1a:81:ec:6b:6d:58:ee:ec:e3:2b:
                    b4:2c:14:7e:b6:5d:ad:8c:d6:2b:86:95:90:ba:26:
                    cf:34:82:34:81:68:49:04:75:16:cf:0f:45:13:e6:
                    5c:86:8c:aa:d4:94:8a:c8:38:3c:2e:e3:c8:1a:8e:
                    70:ec:5f:e5:3b:d4:38:a4:41:17:32:ab:40:ef:0a:
                    71:f4:c8:a5:08:3c:1b:ce:5e:88:e7:f6:85:1b:be:
                    ed:a8:5d:3c:d3:85:55:71:96:44:71:0c:ac:22:ff:
                    4b:0f:a6:80:6c:48:f3:ac:a7:bb:14:6c:a4:75:01:
                    bb:77:ab:06:3d:1d:b2:8e:69:cc:4f:4b:88:cd:5c:
                    5c:d4:43:d5:89:3b:89:fb:88:ca:eb:7d:ae:08:4a:
                    92:60:de:12:d7:88:2d:12:d3:43:ed:b4:88:a4:ec:
                    b7:76:91:d6:63:da:2c:5e:b6:b3:44:38:89:99:03:
                    c7:0e:7e:a2:4f:90:1a:19:26:3b:51:e2:cb:ae:2c:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:B1:E5:D4:68:CD:42:B2:DA:D7:B1:30:16:11:73:B8:26:43:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/53331bc6-138c-3866-b898-40211d5855b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.100.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ae:6f:e2:d6:c6:95:38:b1:43:2e:a2:02:4d:39:03:b1:52:
         35:4c:b7:e7:96:69:c3:f1:7a:59:c8:c6:cc:b8:1b:6b:83:f3:
         18:0d:84:68:69:6f:7f:f4:dd:2e:0a:6d:52:d3:55:b6:91:67:
         e3:b5:db:22:38:52:5a:8f:10:14:40:67:c3:6f:92:66:aa:0f:
         ba:6b:5e:d9:33:3f:28:e7:d3:34:81:3d:49:73:49:d4:58:6e:
         b9:37:19:20:b1:66:38:24:84:cf:43:1f:0b:89:c9:98:b4:a5:
         4f:54:13:81:c1:e7:ef:27:4c:63:11:c0:01:2d:d6:b7:8a:00:
         85:68:89:b0:c3:3b:0f:9b:35:38:63:d7:25:70:f2:26:72:dc:
         b7:49:95:27:d9:d9:a1:b6:0a:09:31:14:ad:20:45:36:4c:35:
         6d:ff:86:2d:81:89:54:8d:5f:7c:50:d8:75:6d:8a:63:c1:df:
         1a:24:64:c8:57:99:bd:73:01:85:ba:ef:c4:1e:06:39:55:a6:
         97:2c:8b:42:17:0f:ec:0b:7e:3b:c7:36:71:e0:a8:fc:f0:5e:
         03:4b:4b:f4:16:fe:68:00:23:5b:2d:09:bb:2e:f2:3f:f4:1b:
         aa:0f:47:78:5f:44:34:d9:de:61:ac:11:62:58:8d:a5:36:7e:
         a7:5c:ef:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPPBlHfPppgPvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw
MWIxMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZTA5ZDEzNTItNWZiZC00NTA4LWE3MzItNTg4N2EzZTNhOGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FkIMZHKpMr+hJ6AKEAR5AFYz7hq1oV2bX74
5Hf5rYkvd4L47Y9pPa+8PldK5CbseGdOsjTpNb7pzEIKFByTjxqB7GttWO7s4yu0
LBR+tl2tjNYrhpWQuibPNII0gWhJBHUWzw9FE+Zchoyq1JSKyDg8LuPIGo5w7F/l
O9Q4pEEXMqtA7wpx9MilCDwbzl6I5/aFG77tqF0804VVcZZEcQysIv9LD6aAbEjz
rKe7FGykdQG7d6sGPR2yjmnMT0uIzVxc1EPViTuJ+4jK632uCEqSYN4S14gtEtND
7bSIpOy3dpHWY9osXrazRDiJmQPHDn6iT5AaGSY7UeLLriyE1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6BseXUaM1CstrXsTAWEXO4JkP7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj
NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvNTMzMzFiYzYtMTM4Yy0z
ODY2LWI4OTgtNDAyMTFkNTg1NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3
YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy
MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz
MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp2RhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSub+LWxpU4sUMuogJNOQOxUjVMt+eWacPxelnIxsy4G2uD8xgNhGhp
b3/03S4KbVLTVbaRZ+O12yI4UlqPEBRAZ8NvkmaqD7prXtkzPyjn0zSBPUlzSdRY
brk3GSCxZjgkhM9DHwuJyZi0pU9UE4HB5+8nTGMRwAEt1reKAIVoibDDOw+bNThj
1yVw8iZy3LdJlSfZ2aG2CgkxFK0gRTZMNW3/hi2BiVSNX3xQ2HVtimPB3xokZMhX
mb1zAYW678QeBjlVppcsi0IXD+wLfjvHNnHgqPzwXgNLS/QW/mgAI1stCbsu8j/0
G6oPR3hfRDTZ3mGsEWJYjaU2fqdc7zY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:09:07 2026 by rpki-client