Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/389e26cb-8bee-3d88-adae-204250bb9f93.roa
File:                     389e26cb-8bee-3d88-adae-204250bb9f93.roa (raw, json)
Hash identifier:          JKMqzTFp0lbAVbNMB4Gqp1YHZETvLelHXi50qUU3XIs=
Subject key identifier:   57:FD:25:88:40:A8:78:A2:54:EA:5C:8B:00:6C:D6:DD:2F:C0:4F:A1
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D4ABBC8865E11A799049C7B00
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/389e26cb-8bee-3d88-adae-204250bb9f93.roa
Signing time:             Thu 26 Mar 2026 02:29:45 +0000
ROA not before:           Thu 26 Mar 2026 02:29:45 +0000
ROA not after:            Wed 24 Jun 2026 02:29:45 +0000
asID:                     12025
IP address blocks:        104.153.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:bb:c8:86:5e:11:a7:99:04:9c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 26 02:29:45 2026 GMT
            Not After : Jun 24 02:29:45 2026 GMT
        Subject: CN=44af5337-b73f-43ef-ae80-3b47ba32def8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:1c:27:38:5d:86:69:ed:e7:10:4f:be:e9:
                    a6:e6:73:ac:d6:60:b8:9a:55:75:1e:29:c7:7e:3e:
                    54:b5:c3:bf:2c:56:2e:8e:41:44:62:68:eb:45:a4:
                    41:48:a1:16:81:de:a1:67:6f:2f:5f:be:a3:d7:3f:
                    36:ef:46:ea:46:32:bf:aa:2f:bc:ff:66:02:63:92:
                    16:4b:d2:db:76:dd:80:36:0f:9f:7e:cd:32:6e:c9:
                    5f:b1:05:52:88:50:10:1f:97:40:7e:4f:8a:b2:44:
                    1f:df:23:c5:c4:0b:bb:af:e0:c3:cf:db:46:3d:ab:
                    ae:39:b3:a6:d4:05:26:4c:72:82:d2:16:00:cb:12:
                    d9:b5:ab:d2:e9:b0:df:8a:82:27:58:a5:0b:58:19:
                    a6:e8:f7:c0:65:8a:96:d4:b1:b1:72:53:65:f7:a8:
                    be:09:04:8f:76:8c:e4:1c:70:a2:78:35:69:0f:ab:
                    d1:cc:15:80:1d:64:00:29:41:18:51:28:18:b6:fb:
                    08:ec:80:40:ed:58:9d:e0:46:d3:09:d5:4f:a5:53:
                    69:0f:8f:94:3d:5a:1c:8e:6a:68:2a:d2:df:a1:cd:
                    8c:2b:4f:b2:4f:cc:ad:33:d5:c3:1d:5b:50:89:10:
                    5e:1d:7d:0f:d4:32:fd:a4:8f:de:13:60:54:a1:1f:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:25:88:40:A8:78:A2:54:EA:5C:8B:00:6C:D6:DD:2F:C0:4F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/389e26cb-8bee-3d88-adae-204250bb9f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:48:b5:10:03:22:e4:84:b1:15:96:fd:cc:c6:82:26:6b:
         b7:2e:5e:79:d0:b2:4d:32:fe:b4:9d:3f:17:1c:9a:01:3c:c2:
         4c:e6:ef:94:0b:17:d1:e1:31:86:b3:67:d5:4c:ec:98:63:82:
         2c:3a:68:94:f8:fb:9b:7a:13:87:a0:b6:ed:d0:04:9e:49:66:
         67:a2:6a:32:20:92:77:e2:a0:0f:d5:ab:af:f3:46:6f:82:6a:
         a3:bf:9a:80:98:88:51:91:39:61:87:c4:ac:56:c7:38:cc:57:
         4b:9b:42:78:5b:98:5e:48:09:09:d3:11:dd:e5:d0:76:2e:18:
         23:ce:a3:f0:90:da:3d:6e:7c:e6:24:30:13:1f:87:de:bd:ef:
         c5:dc:d5:fd:c2:5a:70:79:61:3a:70:1f:39:65:51:18:d6:fc:
         03:a4:a7:46:67:49:90:27:01:28:72:fc:8c:c2:c0:f4:3f:34:
         40:5a:55:9b:5b:bd:86:f8:ab:79:c7:2f:32:d8:59:d0:3f:c3:
         04:f6:36:58:90:e6:a8:bd:08:48:d1:56:29:a7:01:00:c1:2d:
         58:fd:0d:2b:f2:ea:a2:f8:5d:ae:fa:02:0f:c4:f0:07:06:50:
         07:b9:e4:59:98:ec:29:87:fd:ae:f7:a4:a6:4c:3a:0d:b0:64:
         1b:92:23:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ku8iGXhGnmQScewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU1OWMxMzctMDYxOS00MDdiLTg3Y2UtOGE0ZTA4ZGQ2
YzYzMB4XDTI2MDMyNjAyMjk0NVoXDTI2MDYyNDAyMjk0NVowLzEtMCsGA1UEAxMk
NDRhZjUzMzctYjczZi00M2VmLWFlODAtM2I0N2JhMzJkZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBIcJzhdhmnt5xBPvumm5nOs1mC4mlV1HinH
fj5UtcO/LFYujkFEYmjrRaRBSKEWgd6hZ28vX76j1z8270bqRjK/qi+8/2YCY5IW
S9Lbdt2ANg+ffs0ybslfsQVSiFAQH5dAfk+KskQf3yPFxAu7r+DDz9tGPauuObOm
1AUmTHKC0hYAyxLZtavS6bDfioInWKULWBmm6PfAZYqW1LGxclNl96i+CQSPdozk
HHCieDVpD6vRzBWAHWQAKUEYUSgYtvsI7IBA7Vid4EbTCdVPpVNpD4+UPVocjmpo
KtLfoc2MK0+yT8ytM9XDHVtQiRBeHX0P1DL9pI/eE2BUoR+7jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFf9JYhAqHiiVOpciwBs1t0vwE+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5
YzEzNy0wNjE5LTQwN2ItODdjZS04YTRlMDhkZDZjNjMvMzg5ZTI2Y2ItOGJlZS0z
ZDg4LWFkYWUtMjA0MjUwYmI5ZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGU1OWMxMzctMDYxOS00MDdiLTg3
Y2UtOGE0ZTA4ZGQ2YzYzLzBlNTljMTM3LTA2MTktNDA3Yi04N2NlLThhNGUwOGRk
NmM2My5jcmwwHwYDVR0jBBgwFoAUhK/fZENn+KWm3VRabKVzFb4wW8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZTU5YzEzNy0wNjE5LTQwN2ItODdjZS04YTRl
MDhkZDZjNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJm/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0YSLUQAyLkhLEVlv3MxoIma7cuXnnQsk0y/rSdPxccmgE8wkzm75QL
F9HhMYazZ9VM7Jhjgiw6aJT4+5t6E4egtu3QBJ5JZmeiajIgknfioA/Vq6/zRm+C
aqO/moCYiFGROWGHxKxWxzjMV0ubQnhbmF5ICQnTEd3l0HYuGCPOo/CQ2j1ufOYk
MBMfh96978Xc1f3CWnB5YTpwHzllURjW/AOkp0ZnSZAnAShy/IzCwPQ/NEBaVZtb
vYb4q3nHLzLYWdA/wwT2NliQ5qi9CEjRVimnAQDBLVj9DSvy6qL4Xa76Ag/E8AcG
UAe55FmY7CmH/a73pKZMOg2wZBuSI3c=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:09:15 2026 by rpki-client