Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa
File:                     440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa (raw, json)
Hash identifier:          ZmlNhNczL8kTz/FwUy2vuaJlQGmuMvZtthHm0BAM7Bk=
Subject key identifier:   AC:34:A4:B9:65:4A:BA:68:75:82:B3:7E:22:7E:8C:E8:D3:ED:F6:49
Certificate issuer:       /CN=3daec053-17f8-47be-a17c-d2007ce5700c
Certificate serial:       010D0C9F4328584D571FB812C86ECD9331187180
Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     7018
IP address blocks:        167.253.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b8:12:c8:6e:cd:93:31:18:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=59ab4508-9a3b-451c-bf1c-688aed9e690c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2a:f0:39:7d:d1:7d:fa:0c:db:64:77:fe:02:
                    13:b5:89:de:4e:64:b4:b7:00:29:f4:08:f6:9d:15:
                    bf:1d:a6:85:6f:99:4b:7c:be:9d:f4:d7:5e:85:cc:
                    6c:20:ce:52:4f:fe:01:1f:be:5b:37:04:ce:1c:33:
                    6b:37:cd:7a:18:ec:90:01:4d:8d:a4:74:f6:25:ed:
                    94:18:a0:0c:10:57:e1:7e:54:36:e2:21:b2:19:bc:
                    c5:91:72:3d:e7:ef:4f:87:eb:40:e4:7b:12:68:42:
                    31:b1:9b:3b:d7:9c:43:5a:f7:a8:df:76:2e:8a:0b:
                    02:af:e8:27:a1:42:d1:e5:0f:83:50:71:19:50:d8:
                    a8:ba:13:06:91:bb:c4:37:de:4b:0e:2b:8b:d8:4c:
                    af:e4:73:1b:cd:0f:b0:09:e8:4f:2b:10:df:33:82:
                    1f:67:b8:14:99:67:a0:9a:e6:05:64:00:1d:9f:79:
                    fe:ca:3b:f8:b2:4e:db:1c:de:76:b7:e6:bc:d4:70:
                    38:6a:72:aa:a3:e8:25:bb:64:6d:31:4d:0c:b0:a9:
                    97:70:22:ff:81:7d:94:46:c1:db:22:06:e5:4e:38:
                    8c:80:77:52:84:a1:25:47:9d:e6:b3:3b:62:9c:de:
                    eb:54:c1:88:3c:30:3b:4b:17:e7:cf:3c:3e:3b:46:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:A4:B9:65:4A:BA:68:75:82:B3:7E:22:7E:8C:E8:D3:ED:F6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/440c4a6b-1343-3af2-8e2a-d0443ba7d322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:69:a6:4d:7b:1c:bf:c8:1f:7d:c0:7c:80:e7:b7:48:ca:
         fd:e0:78:0e:05:4c:ad:f6:7d:e0:fc:ed:17:e9:ae:4e:37:64:
         f1:20:32:9b:6a:c9:e7:71:f6:00:3f:6c:47:f5:1a:0c:8b:90:
         f6:97:04:8d:06:25:84:55:3a:4b:b8:bb:97:9b:ab:59:8a:66:
         be:29:44:82:5f:ec:0f:24:7a:89:f5:f3:e6:16:9e:5c:75:b2:
         b7:6e:71:d5:d1:7c:30:0e:0f:60:8e:26:e2:87:f8:c4:d5:4a:
         e6:5e:ac:89:72:3d:a2:c9:e6:83:4f:83:8f:29:c7:9a:a1:dc:
         94:db:fa:6c:6f:92:78:51:5c:e3:e5:53:22:7b:15:82:4e:59:
         bb:89:ab:72:2f:68:a5:ac:5c:18:f9:52:f9:dd:fa:4c:25:4b:
         97:04:6b:80:0b:ac:6e:4a:31:a9:28:4c:ba:aa:27:bd:77:e3:
         fe:b4:d0:80:e3:d7:47:51:e2:a4:98:79:35:19:33:cc:72:bd:
         53:94:0b:e8:1e:22:df:8b:78:59:5d:d3:c1:c7:77:35:b3:d0:
         9c:a6:b8:31:87:6a:f8:d7:a1:ca:18:19:c7:b4:e8:33:30:99:
         9d:f1:22:dd:76:2f:d0:51:69:2b:43:1f:cb:c4:46:26:33:3a:
         89:bb:82:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7gSyG7NkzEYcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3
MDBjMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
NTlhYjQ1MDgtOWEzYi00NTFjLWJmMWMtNjg4YWVkOWU2OTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CrwOX3RffoM22R3/gITtYneTmS0twAp9Aj2
nRW/HaaFb5lLfL6d9NdehcxsIM5ST/4BH75bNwTOHDNrN816GOyQAU2NpHT2Je2U
GKAMEFfhflQ24iGyGbzFkXI95+9Ph+tA5HsSaEIxsZs715xDWveo33YuigsCr+gn
oULR5Q+DUHEZUNiouhMGkbvEN95LDiuL2Eyv5HMbzQ+wCehPKxDfM4IfZ7gUmWeg
muYFZAAdn3n+yjv4sk7bHN52t+a81HA4anKqo+glu2RtMU0MsKmXcCL/gX2URsHb
IgblTjiMgHdShKElR53msztinN7rVMGIPDA7Sxfnzzw+O0ZrfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw0pLllSrpodYKzfiJ+jOjT7fZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl
YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvNDQwYzRhNmItMTM0My0z
YWYyLThlMmEtZDA0NDNiYTdkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx
N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1
NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw
N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQbaaZNexy/yB99wHyA57dIyv3geA4FTK32feD87Rfprk43ZPEgMptq
yedx9gA/bEf1GgyLkPaXBI0GJYRVOku4u5ebq1mKZr4pRIJf7A8keon18+YWnlx1
srducdXRfDAOD2COJuKH+MTVSuZerIlyPaLJ5oNPg48px5qh3JTb+mxvknhRXOPl
UyJ7FYJOWbuJq3IvaKWsXBj5Uvnd+kwlS5cEa4ALrG5KMakoTLqqJ7134/600IDj
10dR4qSYeTUZM8xyvVOUC+geIt+LeFld08HHdzWz0JymuDGHavjXocoYGce06DMw
mZ3xIt12L9BRaStDH8vERiYzOom7gvI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:36 2026 by rpki-client