Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa
File:                     c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa (raw, json)
Hash identifier:          UVJOYumB2F/ZKZRbmS5gB3wALw8ro70opMr6glUsxU8=
Subject key identifier:   FD:25:F9:EB:D2:BC:5C:8D:D2:72:CE:AB:00:0D:96:75:88:2B:3D:38
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584D703FE64044C96396E5FD7F60
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     17012
IP address blocks:        192.160.215.0/24 maxlen: 24
                          198.54.216.0/23 maxlen: 24
                          198.199.247.0/24 maxlen: 24
                          205.189.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e6:40:44:c9:63:96:e5:fd:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=8abf58a6-7b66-4e19-b56e-9086855fb406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:d2:b7:51:dc:c7:58:0b:93:a5:c0:95:8f:
                    9b:69:f5:4e:a7:be:5c:5f:22:4f:1f:b0:00:bc:7e:
                    07:79:fd:26:52:ff:00:fc:bc:f3:50:40:2d:7d:6b:
                    3c:14:57:c5:3a:71:64:e3:45:64:9d:24:23:93:4c:
                    1b:73:ff:25:7c:0a:b9:94:5e:4b:6e:36:51:77:f1:
                    0d:89:23:a3:7e:37:79:3b:2a:f9:ae:16:34:7e:8f:
                    6c:3b:ad:85:d5:08:18:2a:43:c1:b5:34:9a:ef:41:
                    a8:01:75:d8:81:72:9a:9d:83:25:01:02:a8:c8:67:
                    bb:fb:12:7c:dc:aa:9d:c1:3a:66:e4:17:99:2a:48:
                    12:11:dc:6d:58:d0:ef:47:42:f1:ae:b1:6f:13:ad:
                    36:d6:8a:49:3a:6a:91:2d:5d:df:3d:59:d1:f3:aa:
                    7b:bc:09:50:2e:56:8b:88:47:8c:75:33:07:b9:fe:
                    b5:4e:f4:5e:1b:8f:37:49:1f:79:48:f2:96:78:8c:
                    39:b9:8b:de:d8:bc:02:85:93:35:e5:7b:c8:26:2d:
                    df:34:14:06:00:0d:ed:4d:a8:71:6a:70:9f:57:da:
                    a5:68:46:27:87:05:2e:6b:4c:eb:e4:6f:0d:a4:c7:
                    8b:4c:b1:84:1e:a4:84:db:8b:a5:5a:63:6b:21:ed:
                    63:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:25:F9:EB:D2:BC:5C:8D:D2:72:CE:AB:00:0D:96:75:88:2B:3D:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/c6e465b1-bc77-3ef2-b067-2b36fc2a5eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.215.0/24
                  198.54.216.0/23
                  198.199.247.0/24
                  205.189.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:bb:57:59:62:7d:14:ff:fd:f0:50:1b:bd:1b:70:c6:7f:
         33:fa:26:74:64:d0:c3:22:8e:da:42:2e:ba:f4:a2:7c:ea:3d:
         c6:ea:3b:ea:af:bb:88:3f:80:e8:63:8b:a3:74:63:bc:24:59:
         42:e7:e4:b8:44:34:ff:b0:1a:62:a4:99:9d:5d:cd:80:a6:81:
         a1:ef:ac:ea:20:19:29:65:a4:40:52:ce:a4:32:55:de:2c:80:
         1b:ac:36:93:79:2f:40:54:ef:64:97:19:99:4c:eb:48:2a:61:
         32:a0:3d:2d:86:70:7a:15:ad:e4:ab:cc:8e:2b:ae:8b:11:fe:
         cd:a7:c2:b0:a4:54:ae:99:d8:ec:2b:cc:37:1b:3f:c0:fe:b0:
         34:c8:01:eb:40:67:2d:7b:9c:2b:bb:f7:54:e4:68:dd:76:1c:
         3b:f1:62:5e:2e:66:d2:9c:98:01:75:35:72:d1:86:9b:4f:6f:
         35:ba:21:6e:9f:bf:14:84:93:46:27:cc:3b:90:2e:66:3f:9e:
         de:e3:5b:79:4e:86:a1:4e:a8:f1:7e:8b:21:66:48:4c:3c:12:
         f5:31:11:dc:6c:f2:7d:0e:f3:6d:79:a5:5c:c9:5e:7a:25:b0:
         c1:cd:0c:85:3b:c3:ea:af:e9:65:54:7c:6d:a9:69:2b:43:95:
         c8:d8:6f:9a
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE1wP+ZARMljluX9f2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
OGFiZjU4YTYtN2I2Ni00ZTE5LWI1NmUtOTA4Njg1NWZiNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM3St1Hcx1gLk6XAlY+bafVOp75cXyJPH7AA
vH4Hef0mUv8A/LzzUEAtfWs8FFfFOnFk40VknSQjk0wbc/8lfAq5lF5LbjZRd/EN
iSOjfjd5Oyr5rhY0fo9sO62F1QgYKkPBtTSa70GoAXXYgXKanYMlAQKoyGe7+xJ8
3KqdwTpm5BeZKkgSEdxtWNDvR0LxrrFvE6021opJOmqRLV3fPVnR86p7vAlQLlaL
iEeMdTMHuf61TvReG483SR95SPKWeIw5uYve2LwChZM15XvIJi3fNBQGAA3tTahx
anCfV9qlaEYnhwUua0zr5G8NpMeLTLGEHqSE24ulWmNrIe1jwQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFP0l+evSvFyN0nLOqwANlnWIKz04MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYzZlNDY1YjEtYmM3Ny0z
ZWYyLWIwNjctMmIzNmZjMmE1ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwKDXAwQB
xjbYAwQAxsf3AwQBzb1mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGbtu1dZYn0U//3wUBu9G3DGfzP6JnRk
0MMijtpCLrr0onzqPcbqO+qvu4g/gOhji6N0Y7wkWULn5LhENP+wGmKkmZ1dzYCm
gaHvrOogGSllpEBSzqQyVd4sgBusNpN5L0BU72SXGZlM60gqYTKgPS2GcHoVreSr
zI4rrosR/s2nwrCkVK6Z2OwrzDcbP8D+sDTIAetAZy17nCu791TkaN12HDvxYl4u
ZtKcmAF1NXLRhptPbzW6IW6fvxSEk0YnzDuQLmY/nt7jW3lOhqFOqPF+iyFmSEw8
EvUxEdxs8n0O8215pVzJXnolsMHNDIU7w+qv6WVUfG2paStDlcjYb5o=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:45 2026 by rpki-client