Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa
File:                     ab844670-ed3c-32c6-85dc-3ed39dee509e.roa (raw, json)
Hash identifier:          qXe+xsXrkVC/SqjNyKjPK2rqI8EH5ti+n47/ws16jx4=
Subject key identifier:   8B:FD:D5:1D:77:C4:5F:5F:0B:BB:FA:75:4B:AF:7D:C6:91:16:15:35
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584D1F4A1396842D81492D4E2480
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     13445
IP address blocks:        144.196.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:13:96:84:2d:81:49:2d:4e:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=fa7aa95a-bf34-49f1-9542-6d433d028ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:4b:82:48:a6:7f:e3:43:e5:1c:8e:b0:bf:
                    76:95:dd:81:6f:eb:42:b9:07:89:0b:9b:14:7e:3e:
                    fe:be:12:14:19:26:ee:77:a3:fb:09:53:43:b7:78:
                    50:72:a1:f3:3f:2c:1d:01:f6:74:dd:e8:10:c4:0a:
                    e7:56:b4:9b:71:62:d0:50:f7:dd:14:ff:29:e1:24:
                    bf:68:bd:18:63:09:9a:d6:8b:2f:0b:79:5d:c9:f1:
                    3e:25:51:4a:4e:8d:43:20:f9:6c:8e:5e:0d:b2:93:
                    9f:c6:70:f9:7d:fb:b3:6f:1e:b5:8d:d8:27:e2:56:
                    14:2c:2c:1a:32:e6:74:7e:c5:c1:40:4c:63:7f:4f:
                    90:f6:9c:54:f1:e9:5a:04:ee:13:d0:41:73:e6:7c:
                    6b:b9:04:68:59:15:ed:83:76:68:dd:c5:dd:82:e7:
                    8b:1b:2c:56:f9:1d:7e:99:5d:1e:19:ef:d4:1b:82:
                    f0:49:22:9f:dd:64:e1:4b:0c:d1:da:30:46:82:97:
                    cb:57:ef:88:82:ad:44:53:b2:a7:18:a9:31:56:07:
                    36:09:ae:da:fb:80:a7:ed:71:a0:28:5d:a7:36:32:
                    42:8d:e9:78:27:4e:06:2d:30:b4:56:57:16:1e:82:
                    47:dd:15:13:bd:ba:75:d4:59:e0:f8:19:96:da:6c:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FD:D5:1D:77:C4:5F:5F:0B:BB:FA:75:4B:AF:7D:C6:91:16:15:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ab844670-ed3c-32c6-85dc-3ed39dee509e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:fc:dd:bf:8b:cd:24:2b:1d:75:75:27:07:c2:b3:dd:a8:7b:
         cf:1b:d2:0d:a0:8d:a4:8d:5a:05:32:9a:e3:f2:cf:80:65:61:
         00:36:16:d1:ad:a5:34:b6:7a:f1:51:25:5a:14:6f:16:67:b8:
         7b:67:ed:ca:69:04:27:bc:01:56:cb:65:fd:89:dc:4d:83:68:
         a8:53:f4:d2:14:27:0d:5f:2e:82:41:34:54:51:23:77:e9:33:
         37:d4:9b:08:e9:09:29:6e:d6:11:05:5a:e1:c5:0f:2d:ac:60:
         96:ee:af:98:7a:48:6e:6a:22:26:a7:da:ec:7e:f5:96:a1:04:
         4d:cc:27:77:9f:67:42:0a:68:53:70:4d:80:9c:38:fc:03:fa:
         57:e9:9a:0a:0b:1e:81:69:af:94:c3:b1:6e:e5:ac:0b:ed:8a:
         2e:a2:12:84:2a:31:39:5a:56:5f:68:61:93:bf:ac:e4:45:c3:
         64:d5:e9:35:a2:d9:39:e3:bd:7b:e5:5f:4f:65:5a:50:84:9d:
         8a:ed:aa:bf:fb:44:bb:c3:39:fc:0a:a9:98:75:3e:24:44:e6:
         86:df:8c:f6:ea:40:3a:b2:ff:a8:ad:48:47:2e:7f:b5:ac:8d:
         25:5b:33:bf:60:d0:c9:b6:28:fd:87:6b:c6:32:1d:17:c7:7d:
         30:6d:41:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShOWhC2BSS1OJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZmE3YWE5NWEtYmYzNC00OWYxLTk1NDItNmQ0MzNkMDI4Y2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD1Lgkimf+ND5RyOsL92ld2Bb+tCuQeJC5sU
fj7+vhIUGSbud6P7CVNDt3hQcqHzPywdAfZ03egQxArnVrSbcWLQUPfdFP8p4SS/
aL0YYwma1osvC3ldyfE+JVFKTo1DIPlsjl4NspOfxnD5ffuzbx61jdgn4lYULCwa
MuZ0fsXBQExjf0+Q9pxU8elaBO4T0EFz5nxruQRoWRXtg3Zo3cXdgueLGyxW+R1+
mV0eGe/UG4LwSSKf3WThSwzR2jBGgpfLV++Igq1EU7KnGKkxVgc2Ca7a+4Cn7XGg
KF2nNjJCjel4J04GLTC0VlcWHoJH3RUTvbp11Fng+BmW2mz6kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIv91R13xF9fC7v6dUuvfcaRFhU1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYWI4NDQ2NzAtZWQzYy0z
MmM2LTg1ZGMtM2VkMzlkZWU1MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkMQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANz83b+LzSQrHXV1JwfCs92oe88b0g2gjaSNWgUymuPyz4BlYQA2FtGt
pTS2evFRJVoUbxZnuHtn7cppBCe8AVbLZf2J3E2DaKhT9NIUJw1fLoJBNFRRI3fp
MzfUmwjpCSlu1hEFWuHFDy2sYJbur5h6SG5qIian2ux+9ZahBE3MJ3efZ0IKaFNw
TYCcOPwD+lfpmgoLHoFpr5TDsW7lrAvtii6iEoQqMTlaVl9oYZO/rORFw2TV6TWi
2TnjvXvlX09lWlCEnYrtqr/7RLvDOfwKqZh1PiRE5obfjPbqQDqy/6itSEcuf7Ws
jSVbM79g0Mm2KP2Ha8YyHRfHfTBtQZg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:02:29 2026 by rpki-client