Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/1b1fd264-769c-382f-ab67-f7702b440cd7.roa
File:                     1b1fd264-769c-382f-ab67-f7702b440cd7.roa (raw, json)
Hash identifier:          YAEH5B1pcoNW5TF56RxFpuO0RsgkCh8Lfr+LsBLl1QI=
Subject key identifier:   26:48:08:C0:0D:B6:DC:BE:00:D9:BE:B4:E6:D0:75:EA:E6:D4:BF:23
Certificate issuer:       /CN=c3821293-eea8-46fe-8eaf-ca46323c5e8b
Certificate serial:       010D0C9F4328584EA5AA7075876D0A6240730C80
Authority key identifier: BD:B9:87:F5:10:82:35:D2:BC:A9:95:94:6A:29:F2:F1:DE:1D:46:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/1b1fd264-769c-382f-ab67-f7702b440cd7.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     394781
IP address blocks:        67.199.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:70:75:87:6d:0a:62:40:73:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3821293-eea8-46fe-8eaf-ca46323c5e8b
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=fd9947c3-3bc1-4b13-8dd4-505c22ab264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:2b:53:9c:3d:29:88:5f:f4:f8:37:ac:4e:
                    e2:e0:c4:e0:44:3d:cd:66:74:2f:c2:ff:87:27:c7:
                    89:70:c2:a2:2d:9a:9e:ff:b0:29:96:84:2a:f5:e5:
                    b8:64:b6:ea:ae:1e:77:41:f6:d9:6b:99:c6:39:9d:
                    ac:b6:0e:5d:7e:d8:0c:88:ef:e3:f9:a8:7f:0d:28:
                    f3:db:c2:f8:b9:4d:9c:1a:0c:df:f9:f9:22:60:d3:
                    bb:59:2f:4f:64:47:1a:32:14:b6:fd:ca:08:d8:0e:
                    91:56:a9:68:db:c8:db:fb:b0:76:11:e7:dd:52:e7:
                    1a:6c:3b:b1:20:1c:21:9c:6a:97:8a:51:b3:95:f6:
                    34:39:05:fd:6a:ba:bb:79:cb:8d:6f:68:14:7b:ea:
                    cb:82:1d:9e:7f:26:31:6b:25:6e:b8:a4:c8:75:f2:
                    bf:a2:da:29:6a:10:93:46:2d:c7:7c:31:22:67:35:
                    ff:c8:5b:0f:92:79:35:9c:e3:e4:b9:ad:30:b3:78:
                    15:cd:f1:82:ab:1c:f0:9b:20:d9:5b:20:b4:f4:4e:
                    c4:4f:da:3a:09:f8:20:64:25:82:ba:ac:ea:0e:2a:
                    f9:e9:03:49:99:88:35:1d:a3:b6:ca:f6:3b:50:32:
                    84:32:a6:e6:ee:e5:fe:b4:ba:a1:7d:e7:40:67:51:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:48:08:C0:0D:B6:DC:BE:00:D9:BE:B4:E6:D0:75:EA:E6:D4:BF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/1b1fd264-769c-382f-ab67-f7702b440cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B9:87:F5:10:82:35:D2:BC:A9:95:94:6A:29:F2:F1:DE:1D:46:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:50:5a:ee:a3:49:c4:67:ce:c7:db:2d:47:4a:4b:4b:4d:
         83:80:de:4d:3d:47:16:79:7b:23:7c:9b:63:5a:77:44:1d:d9:
         11:3a:62:dd:3a:89:77:1a:f7:7c:d3:ae:fe:de:df:76:7b:00:
         0a:fd:c6:60:d9:05:42:c6:51:3d:06:60:34:45:e6:c8:e8:e4:
         5a:3d:48:f8:5a:83:57:a4:32:11:ad:49:01:75:b5:80:35:24:
         cc:ea:91:b2:6f:cc:5c:22:ac:2c:7a:07:85:0d:8c:f5:e1:e5:
         22:6b:ae:e0:b8:56:68:b1:74:d3:12:9a:d9:9d:00:5d:a5:e1:
         b4:87:cb:8a:19:62:c4:54:07:a2:f8:a7:c4:85:bf:b6:86:07:
         04:a5:44:b9:bc:49:67:04:22:35:ac:33:eb:da:86:4b:b2:e5:
         31:79:3f:98:7c:08:00:67:ba:70:ba:c7:16:e1:fa:66:00:66:
         6c:a5:72:4e:77:83:50:f6:d8:31:eb:df:54:30:9a:24:72:7f:
         81:35:51:33:62:a1:88:9c:79:07:ad:94:85:bc:cc:09:3d:77:
         b7:74:e9:a4:24:d2:6a:3b:c6:ae:3d:1f:9e:14:f6:70:9b:72:
         ca:9b:a6:d1:7a:88:5c:96:68:68:af:41:a0:5e:79:96:91:6a:
         84:ab:f8:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnB1h20KYkBzDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM4MjEyOTMtZWVhOC00NmZlLThlYWYtY2E0NjMyM2M1
ZThiMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
ZmQ5OTQ3YzMtM2JjMS00YjEzLThkZDQtNTA1YzIyYWIyNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXYrU5w9KYhf9Pg3rE7i4MTgRD3NZnQvwv+H
J8eJcMKiLZqe/7AploQq9eW4ZLbqrh53QfbZa5nGOZ2stg5dftgMiO/j+ah/DSjz
28L4uU2cGgzf+fkiYNO7WS9PZEcaMhS2/coI2A6RVqlo28jb+7B2EefdUucabDux
IBwhnGqXilGzlfY0OQX9arq7ecuNb2gUe+rLgh2efyYxayVuuKTIdfK/otopahCT
Ri3HfDEiZzX/yFsPknk1nOPkua0ws3gVzfGCqxzwmyDZWyC09E7ET9o6CfggZCWC
uqzqDir56QNJmYg1HaO2yvY7UDKEMqbm7uX+tLqhfedAZ1HAeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZICMANtty+ANm+tObQderm1L8jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMzgy
MTI5My1lZWE4LTQ2ZmUtOGVhZi1jYTQ2MzIzYzVlOGIvMWIxZmQyNjQtNzY5Yy0z
ODJmLWFiNjctZjc3MDJiNDQwY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzM4MjEyOTMtZWVhOC00NmZlLThl
YWYtY2E0NjMyM2M1ZThiL2MzODIxMjkzLWVlYTgtNDZmZS04ZWFmLWNhNDYzMjNj
NWU4Yi5jcmwwHwYDVR0jBBgwFoAUvbmH9RCCNdK8qZWUainy8d4dRiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMzgyMTI5My1lZWE4LTQ2ZmUtOGVhZi1jYTQ2
MzIzYzVlOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8f7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiKUFruo0nEZ87H2y1HSktLTYOA3k09RxZ5eyN8m2Nad0Qd2RE6Yt06
iXca93zTrv7e33Z7AAr9xmDZBULGUT0GYDRF5sjo5Fo9SPhag1ekMhGtSQF1tYA1
JMzqkbJvzFwirCx6B4UNjPXh5SJrruC4VmixdNMSmtmdAF2l4bSHy4oZYsRUB6L4
p8SFv7aGBwSlRLm8SWcEIjWsM+vahkuy5TF5P5h8CABnunC6xxbh+mYAZmylck53
g1D22DHr31QwmiRyf4E1UTNioYiceQetlIW8zAk9d7d06aQk0mo7xq49H54U9nCb
csqbptF6iFyWaGivQaBeeZaRaoSr+KQ=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:55:56 2026 by rpki-client