Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/4978b259-6c2e-3fb5-89e5-a27115f3bfef.roa
File:                     4978b259-6c2e-3fb5-89e5-a27115f3bfef.roa (raw, json)
Hash identifier:          /Om5jIupmXZj5Qv8hNVfketBLPX1mr4aiQBo2Hy6fk0=
Subject key identifier:   8E:6D:A9:F3:0E:1E:DC:30:2A:3B:B4:88:22:62:83:4F:B1:92:B0:9D
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584D3F64CE0ABEE4A269E02D34C0
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/4978b259-6c2e-3fb5-89e5-a27115f3bfef.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     62943
IP address blocks:        104.192.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:ce:0a:be:e4:a2:69:e0:2d:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=2e55b68d-1d95-4878-9031-090f3e787cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:c3:4e:d8:b4:7c:bf:d9:3f:74:f5:ff:5a:
                    e6:f9:84:e9:48:0c:cc:f8:a2:96:f6:30:7d:f0:56:
                    78:e2:14:30:09:3f:c1:d2:45:c2:3e:b6:3b:f6:41:
                    0f:09:74:be:d7:df:bb:f3:23:29:70:9d:d9:42:3e:
                    ac:12:c3:fb:38:48:a5:ba:7d:07:8f:19:b7:bd:1e:
                    0b:50:d5:9e:db:3b:ee:ef:64:95:8e:b0:c0:19:7f:
                    da:65:da:da:17:6e:12:5a:d3:67:67:a1:4a:29:51:
                    4c:72:9c:e6:b9:90:cc:85:3e:74:52:2f:48:a4:51:
                    24:de:8a:54:09:a9:39:a6:f0:97:3b:e7:36:f5:ea:
                    0f:83:92:4d:3e:d2:bf:ae:1e:f0:65:42:78:be:60:
                    2a:06:a9:ec:dd:82:4f:ba:b6:98:31:93:24:f9:59:
                    73:cb:95:29:f5:dc:42:5d:17:f1:e7:38:a3:e4:a3:
                    43:bb:ec:ff:b9:bc:18:e1:50:ab:63:0e:2b:aa:81:
                    b9:10:ac:86:38:30:69:9d:19:7d:1f:e5:6a:3b:e8:
                    db:a9:b6:a9:8e:fe:50:89:aa:b6:4a:1f:77:0b:43:
                    3d:1e:e1:61:7a:99:b5:4b:63:85:f8:c1:04:3d:00:
                    fe:fd:b0:14:f4:51:b9:ac:ce:8b:b3:cc:72:29:4e:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6D:A9:F3:0E:1E:DC:30:2A:3B:B4:88:22:62:83:4F:B1:92:B0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/4978b259-6c2e-3fb5-89e5-a27115f3bfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:17:ca:05:62:4c:f3:09:03:7f:e5:db:1a:92:2e:0b:90:0c:
         fc:d9:a2:56:dd:c5:ff:f1:78:72:7d:05:7b:f8:07:f3:7f:c8:
         43:b4:64:86:38:49:4a:a2:6c:c7:70:bd:b9:0a:6b:91:00:28:
         c5:04:5d:25:99:19:5f:6b:6a:ea:fe:03:dc:50:ac:ae:df:c3:
         fe:0b:26:ad:f0:08:5d:c4:3e:a3:ad:72:67:89:e9:f8:1b:ad:
         91:60:2e:6d:28:4e:4a:f3:6a:d2:e7:e4:63:e3:41:f9:dd:bd:
         aa:64:38:84:4a:98:e4:09:8f:3a:78:d5:a4:b5:2a:2b:4f:14:
         76:54:a2:42:d8:b8:df:cd:76:18:87:b0:57:2a:83:e5:f4:fe:
         01:b4:e7:75:11:0a:26:62:6a:2f:18:e2:0e:26:92:fb:89:c8:
         e0:e6:53:6a:fb:cf:21:53:7b:a8:1f:ff:b6:a1:8a:cd:2d:7a:
         4b:51:84:b1:7d:1c:85:60:20:8a:19:5f:f9:93:89:95:ba:fa:
         c1:03:b8:db:17:d6:f4:75:ff:76:67:4c:ad:d7:c7:15:36:6b:
         04:5d:ee:b5:39:25:65:57:ab:ca:2f:1a:ac:e9:ad:32:0c:0b:
         25:8b:e1:1b:56:29:b4:c4:86:62:b7:f1:1d:41:b7:96:cb:23:
         b5:00:81:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZM4KvuSiaeAtNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy
YWQyMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
MmU1NWI2OGQtMWQ5NS00ODc4LTkwMzEtMDkwZjNlNzg3Y2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBXDTti0fL/ZP3T1/1rm+YTpSAzM+KKW9jB9
8FZ44hQwCT/B0kXCPrY79kEPCXS+19+78yMpcJ3ZQj6sEsP7OEilun0Hjxm3vR4L
UNWe2zvu72SVjrDAGX/aZdraF24SWtNnZ6FKKVFMcpzmuZDMhT50Ui9IpFEk3opU
Cak5pvCXO+c29eoPg5JNPtK/rh7wZUJ4vmAqBqns3YJPuraYMZMk+Vlzy5Up9dxC
XRfx5zij5KNDu+z/ubwY4VCrYw4rqoG5EKyGODBpnRl9H+VqO+jbqbapjv5Qiaq2
Sh93C0M9HuFhepm1S2OF+MEEPQD+/bAU9FG5rM6Ls8xyKU6EDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5tqfMOHtwwKju0iCJig0+xkrCdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0
MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvNDk3OGIyNTktNmMyZS0z
ZmI1LTg5ZTUtYTI3MTE1ZjNiZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4
NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm
MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0
MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcXygViTPMJA3/l2xqSLguQDPzZolbdxf/xeHJ9BXv4B/N/yEO0ZIY4
SUqibMdwvbkKa5EAKMUEXSWZGV9raur+A9xQrK7fw/4LJq3wCF3EPqOtcmeJ6fgb
rZFgLm0oTkrzatLn5GPjQfndvapkOIRKmOQJjzp41aS1KitPFHZUokLYuN/NdhiH
sFcqg+X0/gG053URCiZiai8Y4g4mkvuJyODmU2r7zyFTe6gf/7ahis0tektRhLF9
HIVgIIoZX/mTiZW6+sEDuNsX1vR1/3ZnTK3XxxU2awRd7rU5JWVXq8ovGqzprTIM
CyWL4RtWKbTEhmK38R1Bt5bLI7UAgXc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:41:52 2026 by rpki-client