Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa
File:                     dfae5420-d488-32e7-b34e-b98d0d26ba88.roa (raw, json)
Hash identifier:          INsQ//6vgpf48dP9+WtmGkYTK3WqbgxhmU+AK114Dn4=
Subject key identifier:   0A:2F:C4:62:00:E6:77:6B:F5:E6:43:7E:5C:BC:F3:BD:CC:12:83:C3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D09126BB039BFA7BE0CE06180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        170.114.65.0/24 maxlen: 24
                          170.114.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6b:b0:39:bf:a7:be:0c:e0:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=04ce5a54-f81d-4ff0-ae26-0100ac373690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:3b:86:ca:ea:f1:e8:64:b9:ac:f4:55:76:
                    53:bb:97:04:a4:d9:c4:af:49:52:35:7d:25:15:31:
                    6d:9e:c9:26:d3:81:61:95:07:fe:b1:19:b4:af:c8:
                    6d:78:42:fa:6d:b5:c3:d3:46:93:f2:63:d5:0c:a1:
                    65:7d:ec:86:a0:2b:2a:fd:bb:53:6c:d6:cd:ab:f2:
                    7f:6c:56:c6:8b:a8:6d:c8:49:a2:24:a9:d1:bf:67:
                    b9:b2:bc:d3:33:3e:04:e9:6b:a4:b7:40:bf:1e:e5:
                    32:20:7f:84:42:15:45:fa:c4:ec:4b:84:79:ab:e0:
                    4c:7d:38:2d:de:3f:ea:fe:66:3d:0a:3d:81:5f:19:
                    f5:a5:65:fc:18:f9:4f:1f:92:c2:8f:0d:37:45:8f:
                    1c:0f:66:44:ca:bb:aa:38:e0:56:f9:7b:de:62:72:
                    14:f5:95:02:16:a9:77:91:16:9a:de:0d:cf:7b:a7:
                    31:a8:bb:cd:14:6d:c2:2d:4d:57:fa:94:98:4b:6f:
                    92:a7:09:a3:d6:77:77:e6:34:71:02:94:49:ec:f6:
                    b3:29:0f:29:b1:8e:fb:f2:fc:21:ef:af:d6:84:ab:
                    a0:5f:8b:79:db:b6:c2:87:dd:b8:97:8b:c7:de:47:
                    27:ce:32:90:a1:5a:66:b8:a2:68:93:dd:cc:60:38:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:C4:62:00:E6:77:6B:F5:E6:43:7E:5C:BC:F3:BD:CC:12:83:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.65.0-170.114.66.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:61:d8:81:47:a8:b7:c6:92:ef:11:ee:de:f6:86:a4:9a:
         ba:1a:75:ca:f0:5a:46:d6:cb:1c:8a:31:56:1a:f1:0f:e1:30:
         f5:da:83:cc:74:c7:6d:7a:cc:a6:7c:63:9a:65:1f:22:7c:6e:
         95:da:24:af:80:48:03:d1:16:48:ef:e1:f3:ca:a2:56:00:96:
         a8:53:4a:f1:1d:96:c7:13:cb:93:da:5d:70:25:cc:27:5f:49:
         98:bc:6d:be:ee:06:52:02:8e:b9:18:1e:90:db:93:70:df:f5:
         75:69:f4:db:0f:c7:57:ef:1c:f1:f2:29:5b:60:e8:6e:8b:50:
         a1:f7:eb:19:6a:c3:b8:aa:81:63:52:f0:04:4b:33:b2:3f:2d:
         c3:51:b5:0e:13:5c:de:dc:f1:38:77:30:79:48:8d:01:86:05:
         d6:f6:1d:f5:32:09:c7:d2:40:3a:80:22:a9:30:e4:14:ab:0e:
         53:bc:33:d8:f2:83:d0:d5:93:7d:02:3f:70:3f:b9:12:dc:8c:
         ce:31:9b:59:2b:63:e7:16:20:05:c8:13:11:fd:0e:fe:a6:bc:
         31:87:37:c0:4f:44:db:1e:7e:1c:ef:78:1a:62:0c:56:e4:b6:
         36:dc:6b:9c:58:6b:7c:c9:b0:22:06:1d:64:c3:fe:75:6b:cb:
         d5:8f:50:81
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0JEmuwOb+nvgzgYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MDRjZTVhNTQtZjgxZC00ZmYwLWFlMjYtMDEwMGFjMzczNjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaU7hsrq8ehkuaz0VXZTu5cEpNnEr0lSNX0l
FTFtnskm04FhlQf+sRm0r8hteEL6bbXD00aT8mPVDKFlfeyGoCsq/btTbNbNq/J/
bFbGi6htyEmiJKnRv2e5srzTMz4E6Wukt0C/HuUyIH+EQhVF+sTsS4R5q+BMfTgt
3j/q/mY9Cj2BXxn1pWX8GPlPH5LCjw03RY8cD2ZEyruqOOBW+XveYnIU9ZUCFql3
kRaa3g3Pe6cxqLvNFG3CLU1X+pSYS2+Spwmj1nd35jRxApRJ7PazKQ8psY778vwh
76/WhKugX4t527bCh924l4vH3kcnzjKQoVpmuKJok93MYDjruwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFAovxGIA5ndr9eZDfly8873MEoPDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZGZhZTU0MjAtZDQ4OC0z
MmU3LWIzNGUtYjk4ZDBkMjZiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACqckED
BACqckIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEARzth2IFHqLfGku8R7t72hqSauhp1yvBaRtbLHIoxVhrx
D+Ew9dqDzHTHbXrMpnxjmmUfInxuldokr4BIA9EWSO/h88qiVgCWqFNK8R2WxxPL
k9pdcCXMJ19JmLxtvu4GUgKOuRgekNuTcN/1dWn02w/HV+8c8fIpW2DobotQoffr
GWrDuKqBY1LwBEszsj8tw1G1DhNc3tzxOHcweUiNAYYF1vYd9TIJx9JAOoAiqTDk
FKsOU7wz2PKD0NWTfQI/cD+5EtyMzjGbWStj5xYgBcgTEf0O/qa8MYc3wE9E2x5+
HO94GmIMVuS2NtxrnFhrfMmwIgYdZMP+dWvL1Y9QgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:12 2026 by rpki-client