Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa
File:                     bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa (raw, json)
Hash identifier:          uwAS47zlrLFCToWcWunR1czGQivSs9OpSJjk3QeUOmY=
Subject key identifier:   F3:AD:FC:56:21:39:C0:0D:33:6D:83:2C:60:3E:D3:FB:29:3E:8C:14
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0A77BE030AA5E4DB975C55E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     6984
IP address blocks:        63.26.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:be:03:0a:a5:e4:db:97:5c:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=8a6eca85-bcb1-4d35-bac2-1be7423dd7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:e7:a9:67:f1:6a:ec:a0:57:b9:fb:c3:17:
                    89:73:79:2c:43:b4:08:4b:39:1a:65:75:4f:55:0a:
                    f0:aa:9d:0b:ed:5a:8a:3a:ac:e1:9b:e7:23:dd:ab:
                    ec:b3:45:e5:4f:98:d7:0a:46:10:d3:14:09:e8:4d:
                    a2:40:d6:48:fa:98:a4:62:db:76:11:00:e6:f4:1c:
                    49:da:a6:8d:54:01:fc:fb:94:d5:49:03:f5:ac:9f:
                    09:c0:08:10:4d:b9:d0:2c:04:80:3e:2f:ec:00:8b:
                    73:dc:ad:9f:65:8e:a8:5d:b7:f4:74:3a:b7:78:bc:
                    f9:f6:7e:08:01:bb:94:49:5f:27:7f:d0:3b:b8:f7:
                    a7:7b:76:29:55:2f:e6:ee:df:6e:4c:93:f8:2e:93:
                    91:cd:17:7f:b9:40:0d:7c:65:b6:61:9c:eb:ca:83:
                    05:14:2c:bf:60:bf:be:12:29:e7:01:25:1f:23:b7:
                    b3:ef:e6:41:87:76:19:22:4a:9c:0a:f1:ec:b7:81:
                    6c:01:c5:67:b3:dc:d2:fb:da:30:b0:71:90:a3:b6:
                    14:df:38:f2:3d:45:62:12:e2:6c:be:f6:40:b7:32:
                    e3:1d:c4:6b:63:f7:a2:fb:39:72:7b:b1:29:f7:f7:
                    97:ff:68:3a:3b:a4:cf:44:44:62:b2:c2:00:5f:96:
                    57:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:FC:56:21:39:C0:0D:33:6D:83:2C:60:3E:D3:FB:29:3E:8C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8f:16:6d:cf:23:21:9d:45:11:42:be:ae:ba:89:8e:a2:18:
         c0:fa:54:d2:18:97:a4:dd:21:07:79:13:32:43:a0:1b:36:dd:
         4e:b7:8c:29:99:ef:01:b3:41:74:39:9e:74:c2:4a:ed:33:7a:
         bd:0c:b1:ee:e6:8a:f0:d8:42:bd:38:6b:76:dd:b6:5b:48:5f:
         19:75:4d:1c:d5:c0:ac:ac:45:4a:a1:cd:64:25:71:30:0d:ae:
         cd:27:33:8d:4e:cb:7a:32:a9:78:d0:23:f7:61:4d:4f:4f:fa:
         c4:fb:9d:e9:15:10:b4:fb:6e:70:b4:1a:3a:be:6d:a2:fa:91:
         a9:42:c9:c1:42:5b:49:b8:37:39:d9:24:eb:fe:17:35:b7:b1:
         d0:8e:7b:00:d4:82:7a:46:87:6a:d6:d3:9a:2e:9f:b2:e8:8c:
         cb:9a:ce:21:28:47:2a:ec:cf:2d:54:c2:93:74:21:fb:64:5e:
         f4:cf:4b:b0:53:ec:df:cb:e0:71:6a:2f:e2:21:95:17:e9:91:
         bd:89:9b:e9:dc:f4:09:cf:78:19:36:b7:a5:b8:17:7e:ef:3a:
         7b:a0:0b:7d:3d:5d:b9:f5:34:81:19:c9:a6:5a:45:21:99:72:
         8f:d3:a3:3c:ad:12:2b:09:e3:57:b5:5a:14:f3:f4:ec:1d:de:
         9d:ed:fc:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd74DCqXk25dcVeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
OGE2ZWNhODUtYmNiMS00ZDM1LWJhYzItMWJlNzQyM2RkN2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ELnqWfxauygV7n7wxeJc3ksQ7QISzkaZXVP
VQrwqp0L7VqKOqzhm+cj3avss0XlT5jXCkYQ0xQJ6E2iQNZI+pikYtt2EQDm9BxJ
2qaNVAH8+5TVSQP1rJ8JwAgQTbnQLASAPi/sAItz3K2fZY6oXbf0dDq3eLz59n4I
AbuUSV8nf9A7uPene3YpVS/m7t9uTJP4LpORzRd/uUANfGW2YZzryoMFFCy/YL++
EinnASUfI7ez7+ZBh3YZIkqcCvHst4FsAcVns9zS+9owsHGQo7YU3zjyPUViEuJs
vvZAtzLjHcRrY/ei+zlye7Ep9/eX/2g6O6TPRERissIAX5ZXUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOt/FYhOcANM22DLGA+0/spPowUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmJiMmQzMTMtYzJjMS0z
OTQ1LTliNWItZTlhMjk5M2NmZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPxoFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2PFm3PIyGdRRFCvq66iY6iGMD6VNIYl6TdIQd5EzJDoBs23U63jCmZ
7wGzQXQ5nnTCSu0zer0Mse7mivDYQr04a3bdtltIXxl1TRzVwKysRUqhzWQlcTAN
rs0nM41Oy3oyqXjQI/dhTU9P+sT7nekVELT7bnC0Gjq+baL6kalCycFCW0m4NznZ
JOv+FzW3sdCOewDUgnpGh2rW05oun7LojMuaziEoRyrszy1UwpN0IftkXvTPS7BT
7N/L4HFqL+IhlRfpkb2Jm+nc9AnPeBk2t6W4F37vOnugC309Xbn1NIEZyaZaRSGZ
co/TozytEisJ41e1WhTz9Owd3p3t/Fk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:03 2026 by rpki-client