Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
File:                     df61bb8b-6c75-397e-84df-0353bf3e6294.roa (raw, json)
Hash identifier:          7b5ZF4SE3a2/y+Dsj0nezDg5oJ6FclShk23lq4oJj00=
Subject key identifier:   B2:72:63:53:36:2A:48:F9:88:E2:49:39:34:3C:93:DB:9F:F1:BF:CA
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584D07AD009383E18DC58F04F600
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     63267
IP address blocks:        104.171.216.0/24 maxlen: 24
                          104.171.217.0/24 maxlen: 24
                          104.171.218.0/24 maxlen: 24
                          104.171.219.0/24 maxlen: 24
                          104.171.220.0/24 maxlen: 24
                          104.171.221.0/24 maxlen: 24
                          104.171.222.0/24 maxlen: 24
                          104.171.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:00:93:83:e1:8d:c5:8f:04:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=79fe57c1-0637-407c-87b5-e0b60542ed95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:25:1d:20:27:d9:3e:17:3b:8d:1a:91:12:20:
                    eb:f7:83:d5:f1:de:d0:3e:d9:f0:66:79:35:7f:7a:
                    73:2e:29:36:18:94:c4:94:c2:9d:1d:70:67:4f:c5:
                    b0:a6:3f:9e:35:72:1e:06:ad:ce:15:8c:bf:f3:e6:
                    56:0b:17:95:3a:1d:ea:77:00:cd:6c:2f:c9:58:2f:
                    e1:48:6c:0c:9b:fc:58:e0:31:11:f1:fa:8b:1e:dc:
                    fb:13:04:c0:67:70:29:28:95:99:c0:a2:f1:d3:f2:
                    d0:e7:38:95:88:d7:c4:9e:7c:26:58:8d:6a:a3:b8:
                    72:e3:5c:b2:c8:f0:7a:75:d8:da:8f:7e:94:b3:65:
                    f0:50:73:38:ff:7c:3e:96:70:9a:62:6e:c4:e5:06:
                    a1:bc:24:19:6b:9b:68:99:49:1e:13:00:1c:15:f7:
                    da:ea:6a:e2:5b:42:b6:c0:8d:ea:78:24:0e:53:a2:
                    04:5e:e5:a2:5c:13:b9:e7:d8:05:79:f4:83:f5:bc:
                    35:a4:f1:5a:cc:ce:ad:ea:04:7f:8e:17:0d:b6:52:
                    7e:9d:a1:ee:93:59:5a:08:c6:d3:24:86:68:f8:88:
                    02:d6:35:d9:2b:a5:f4:fa:dc:8b:03:8e:b3:da:a6:
                    a8:a0:7e:db:8d:4b:a7:be:a4:39:4e:6d:b8:fc:97:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:72:63:53:36:2A:48:F9:88:E2:49:39:34:3C:93:DB:9F:F1:BF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:73:0a:fa:f4:27:19:89:5b:25:df:fa:64:9a:31:1c:93:
         df:b2:42:9e:0f:3a:46:01:52:12:3a:41:0c:ca:02:bf:fb:cb:
         6a:17:84:3a:f0:d5:60:a8:8a:bd:5b:89:4b:d8:76:f3:e2:a8:
         39:8a:58:04:d2:8d:7b:42:73:02:05:89:0b:39:1c:9e:20:20:
         f7:3b:aa:a8:68:27:6d:2e:39:8b:72:e5:f6:5b:d3:90:ae:5a:
         1c:db:99:3d:d3:24:94:b6:03:ea:ed:4c:98:3f:ab:f1:4e:7a:
         3e:69:07:4e:b5:1b:70:cb:19:73:bc:c1:6d:25:81:1b:22:e1:
         e9:8b:44:12:b4:11:e2:70:71:bb:e3:f9:66:d8:84:5c:50:35:
         ac:12:c5:93:a4:78:db:1a:77:da:dd:53:b0:56:64:a6:f2:77:
         8f:56:43:f7:24:d5:4f:42:2e:bb:b8:6c:21:e0:b6:7b:77:0c:
         50:f1:7e:a6:43:48:e0:21:a8:11:ac:e7:31:0c:c6:11:5b:e1:
         89:c0:b0:4b:57:e4:5b:75:54:9b:62:bf:e7:95:00:9d:2f:e3:
         a9:49:57:04:1a:31:ea:f3:27:35:7a:61:7e:49:5c:97:4e:51:
         0d:74:21:8a:3a:04:c9:cb:f8:c0:80:67:b8:45:24:b4:d6:75:
         df:1d:25:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQCTg+GNxY8E9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk
MGM4MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
NzlmZTU3YzEtMDYzNy00MDdjLTg3YjUtZTBiNjA1NDJlZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yUdICfZPhc7jRqREiDr94PV8d7QPtnwZnk1
f3pzLik2GJTElMKdHXBnT8Wwpj+eNXIeBq3OFYy/8+ZWCxeVOh3qdwDNbC/JWC/h
SGwMm/xY4DER8fqLHtz7EwTAZ3ApKJWZwKLx0/LQ5ziViNfEnnwmWI1qo7hy41yy
yPB6ddjaj36Us2XwUHM4/3w+lnCaYm7E5QahvCQZa5tomUkeEwAcFffa6mriW0K2
wI3qeCQOU6IEXuWiXBO559gFefSD9bw1pPFazM6t6gR/jhcNtlJ+naHuk1laCMbT
JIZo+IgC1jXZK6X0+tyLA46z2qaooH7bjUunvqQ5Tm24/JfftQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLJyY1M2Kkj5iOJJOTQ8k9uf8b/KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3
YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvZGY2MWJiOGItNmM3NS0z
OTdlLTg0ZGYtMDM1M2JmM2U2Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk
MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj
ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj
MDA2Y2QwYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaKvYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+3cwr69CcZiVsl3/pkmjEck9+yQp4POkYBUhI6QQzKAr/7y2oXhDrw
1WCoir1biUvYdvPiqDmKWATSjXtCcwIFiQs5HJ4gIPc7qqhoJ20uOYty5fZb05Cu
WhzbmT3TJJS2A+rtTJg/q/FOej5pB061G3DLGXO8wW0lgRsi4emLRBK0EeJwcbvj
+WbYhFxQNawSxZOkeNsad9rdU7BWZKbyd49WQ/ck1U9CLru4bCHgtnt3DFDxfqZD
SOAhqBGs5zEMxhFb4YnAsEtX5Ft1VJtiv+eVAJ0v46lJVwQaMerzJzV6YX5JXJdO
UQ10IYo6BMnL+MCAZ7hFJLTWdd8dJXE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:29 2026 by rpki-client