Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
File:                     8bc8986a-ac26-339e-8cf9-423e085dee63.roa (raw, json)
Hash identifier:          DsniubO+mX0AtPzg9L42IdrEhcCqezHoPJdsdM6xk8o=
Subject key identifier:   63:27:53:5D:9A:81:01:14:F3:55:E4:79:B9:A6:64:A2:B6:4C:7E:8F
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584D90428CC5B17B1A27BC50EEE0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
Signing time:             Mon 20 Apr 2026 00:12:04 +0000
ROA not before:           Mon 20 Apr 2026 00:12:04 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     4913
IP address blocks:        64.49.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:42:8c:c5:b1:7b:1a:27:bc:50:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 20 00:12:04 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=8f288d85-11d2-4d23-9bec-bf82e2c4c2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:66:58:81:2a:e2:98:b9:b3:6e:3f:4d:29:
                    3d:27:01:1f:ab:6a:62:2f:7f:db:66:d8:5d:87:88:
                    2c:e1:f0:42:88:d7:f8:8e:b0:ed:e4:f5:cc:65:f9:
                    d0:4a:44:18:ce:60:27:bc:b1:d7:ab:e0:71:59:6a:
                    df:e4:b3:4b:f0:5f:01:66:09:c0:1e:df:01:30:8d:
                    92:32:ea:68:a6:9d:41:83:3a:85:7f:46:07:31:29:
                    cd:f5:f4:40:8a:f6:f3:92:8e:27:9c:04:2e:e6:c7:
                    99:30:7f:51:fe:7a:d4:14:90:25:ab:47:71:0e:9a:
                    3f:e1:db:67:3b:72:1d:65:c0:18:5b:82:06:1d:96:
                    6a:bd:27:8c:1a:dd:74:32:3f:cd:c5:f1:7b:cf:8b:
                    b2:dd:bb:fe:76:f3:4b:ce:5a:b6:65:33:0e:b0:17:
                    36:81:cd:c9:82:86:5b:63:2f:1d:f0:8d:7e:87:73:
                    a3:57:85:eb:97:74:bf:7e:72:36:bc:be:2a:4d:5e:
                    7a:62:ba:1b:7b:3b:e0:94:0f:ee:06:d7:27:96:54:
                    94:90:11:f8:c9:d3:b9:38:69:d4:68:e9:de:db:97:
                    d0:87:7f:e0:d8:5a:1d:bb:11:b6:ab:d4:5f:d6:9d:
                    c6:f0:2c:03:9b:7e:62:ec:9e:ce:7a:11:46:38:09:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:53:5D:9A:81:01:14:F3:55:E4:79:B9:A6:64:A2:B6:4C:7E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:35:01:c8:ed:e5:c8:8f:6d:a5:72:71:77:a2:24:96:2d:8b:
         6e:9d:b7:c7:7a:e3:3e:3a:16:3a:ef:97:a4:a0:77:4f:c2:9c:
         3d:72:41:1b:89:c3:50:5d:13:aa:79:59:44:58:c1:4f:4c:19:
         bd:02:9d:04:a2:34:4c:81:f6:97:b2:32:95:21:86:93:f9:94:
         52:72:ff:85:1f:db:14:5d:bb:2c:0d:3d:68:f7:02:3e:1e:d8:
         6f:db:06:9a:27:35:ae:17:73:4a:09:88:39:c8:df:5f:e0:56:
         50:d7:f3:22:0e:57:a1:96:a6:07:c9:ac:e5:a7:c2:00:aa:18:
         0d:17:95:37:2d:90:87:b2:c8:e0:b9:c5:e5:d2:ab:9d:da:88:
         98:55:86:26:d9:3c:87:b5:c5:86:03:85:e8:00:c9:47:8b:4c:
         82:ff:6c:af:64:5f:3f:88:12:95:72:1a:5d:9a:7a:6d:7e:64:
         31:ee:5b:6e:67:92:cd:28:a4:56:df:de:33:cf:8a:2f:13:21:
         2b:2f:46:00:93:21:66:7a:0e:f4:f8:92:0b:65:b7:94:d8:c8:
         e8:ae:27:75:66:f2:c0:da:8d:4b:5d:69:11:c8:57:50:00:c3:
         ca:e0:ef:07:07:4d:45:ca:5e:fe:f4:4f:4e:73:57:1d:cf:1e:
         12:dc:1b:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QQozFsXsaJ7xQ7uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx
OGUzMB4XDTI2MDQyMDAwMTIwNFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
OGYyODhkODUtMTFkMi00ZDIzLTliZWMtYmY4MmUyYzRjMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNRmWIEq4pi5s24/TSk9JwEfq2piL3/bZthd
h4gs4fBCiNf4jrDt5PXMZfnQSkQYzmAnvLHXq+BxWWrf5LNL8F8BZgnAHt8BMI2S
Mupopp1BgzqFf0YHMSnN9fRAivbzko4nnAQu5seZMH9R/nrUFJAlq0dxDpo/4dtn
O3IdZcAYW4IGHZZqvSeMGt10Mj/NxfF7z4uy3bv+dvNLzlq2ZTMOsBc2gc3JgoZb
Yy8d8I1+h3OjV4Xrl3S/fnI2vL4qTV56YrobezvglA/uBtcnllSUkBH4ydO5OGnU
aOne25fQh3/g2FoduxG2q9Rf1p3G8CwDm35i7J7OehFGOAkrmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGMnU12agQEU81XkebmmZKK2TH6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx
MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvOGJjODk4NmEtYWMyNi0z
MzllLThjZjktNDIzZTA4NWRlZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk
YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj
MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4
MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGg1Acjt5ciPbaVycXeiJJYti26dt8d64z46Fjrvl6Sgd0/CnD1yQRuJ
w1BdE6p5WURYwU9MGb0CnQSiNEyB9peyMpUhhpP5lFJy/4Uf2xRduywNPWj3Aj4e
2G/bBponNa4Xc0oJiDnI31/gVlDX8yIOV6GWpgfJrOWnwgCqGA0XlTctkIeyyOC5
xeXSq53aiJhVhibZPIe1xYYDhegAyUeLTIL/bK9kXz+IEpVyGl2aem1+ZDHuW25n
ks0opFbf3jPPii8TISsvRgCTIWZ6DvT4kgtlt5TYyOiuJ3Vm8sDajUtdaRHIV1AA
w8rg7wcHTUXKXv70T05zVx3PHhLcG+4=
-----END CERTIFICATE-----
Generated at Wed May 13 19:07:21 2026 by rpki-client