Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa
File:                     0420671e-3982-3344-9b47-51bea31f38a2.roa (raw, json)
Hash identifier:          zxkD0taT180a5Sh8lC/ZEJASvIU4UJKGta/gboy/UMU=
Subject key identifier:   14:01:0D:C2:A1:EA:C9:38:5F:77:6D:AD:2F:87:E2:54:21:1C:91:FE
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584D037D181CEBB49DE2985DE780
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     33548
IP address blocks:        104.200.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:18:1c:eb:b4:9d:e2:98:5d:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=255935e6-6d64-4cc9-a768-243a911062e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:38:90:d5:44:79:92:66:51:25:fd:dc:65:f6:
                    18:fa:26:a5:c2:aa:30:c5:25:f9:76:28:77:42:d2:
                    f9:45:90:be:ab:01:2e:75:95:0c:2b:99:dd:5a:42:
                    2b:50:20:95:cf:a1:aa:cb:85:44:a6:c7:05:2c:4f:
                    ef:e9:2c:50:68:d4:61:c2:e3:52:58:ae:da:37:49:
                    cd:7a:49:e7:fb:22:46:dc:04:99:14:7e:8c:2d:e9:
                    23:40:0e:cf:91:fd:e3:d4:dd:08:d4:20:db:e7:02:
                    78:f5:11:17:e9:9f:84:1e:45:74:2e:60:f0:ea:47:
                    17:68:d0:55:9b:39:1f:e1:ae:60:da:63:7d:2a:81:
                    21:29:d4:ad:49:c8:f5:22:77:15:5b:b8:5d:32:96:
                    47:18:e1:e2:74:0f:af:1e:a0:60:30:a7:6a:ce:c3:
                    b1:43:e6:9d:ef:01:84:3d:a1:f6:aa:65:49:6e:e0:
                    25:99:0f:93:83:d3:11:55:11:ed:2e:5f:e9:76:44:
                    07:aa:f4:f4:91:e8:74:22:67:47:b1:84:55:6a:11:
                    dc:4b:50:68:81:5e:05:a2:bc:52:49:db:e2:4c:b7:
                    0f:3c:ae:05:09:c4:3d:6d:3e:6e:08:71:68:01:33:
                    e6:c8:7a:0d:2e:4a:76:36:7a:09:3e:3c:5d:0e:c5:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:0D:C2:A1:EA:C9:38:5F:77:6D:AD:2F:87:E2:54:21:1C:91:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/0420671e-3982-3344-9b47-51bea31f38a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:66:59:86:93:db:80:98:85:99:78:7f:c8:0f:cc:1c:05:e0:
         da:c3:80:d2:05:a6:7a:a4:70:56:d8:e5:1c:ea:5b:2f:9f:82:
         0e:a2:0f:db:96:18:ae:5e:fc:ac:ba:54:85:a6:28:00:34:8e:
         6d:6a:27:2f:39:c6:0c:da:a9:73:fb:89:ec:e1:f4:1b:4d:42:
         e2:4b:f3:b0:91:be:ea:bb:99:62:b6:67:47:65:8d:1f:26:04:
         0c:10:18:6a:fb:da:36:a0:05:fd:12:93:e4:41:05:b4:c6:da:
         1c:50:43:15:af:ac:f9:95:0e:b2:65:89:97:c1:14:dd:e1:31:
         d7:32:28:5c:b3:c7:7c:05:37:a7:29:c9:2d:8f:48:1b:ea:87:
         ea:3e:96:29:c3:12:fa:52:1b:bf:88:b7:75:4e:20:73:ec:37:
         19:2c:90:22:46:2b:91:86:df:9d:37:5f:54:b0:5f:29:64:f0:
         9d:a9:da:b2:73:63:a2:b4:14:fa:67:b2:bc:7f:ab:b1:9c:c1:
         f4:44:25:2e:60:7a:80:b5:7d:b0:47:04:5f:b3:f2:82:a8:42:
         17:a9:4a:ed:0e:cf:f0:cb:ee:d2:07:72:fc:7e:92:e2:ef:44:
         b6:e6:64:40:5a:a1:bb:8e:5e:e9:76:55:09:68:78:10:d9:e6:
         8d:23:a7:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRgc67Sd4phd54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi
MDU2MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MjU1OTM1ZTYtNmQ2NC00Y2M5LWE3NjgtMjQzYTkxMTA2MmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ziQ1UR5kmZRJf3cZfYY+ialwqowxSX5dih3
QtL5RZC+qwEudZUMK5ndWkIrUCCVz6Gqy4VEpscFLE/v6SxQaNRhwuNSWK7aN0nN
eknn+yJG3ASZFH6MLekjQA7Pkf3j1N0I1CDb5wJ49REX6Z+EHkV0LmDw6kcXaNBV
mzkf4a5g2mN9KoEhKdStScj1IncVW7hdMpZHGOHidA+vHqBgMKdqzsOxQ+ad7wGE
PaH2qmVJbuAlmQ+Tg9MRVRHtLl/pdkQHqvT0keh0ImdHsYRVahHcS1BogV4ForxS
SdviTLcPPK4FCcQ9bT5uCHFoATPmyHoNLkp2NnoJPjxdDsVzMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQBDcKh6sk4X3dtrS+H4lQhHJH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3
ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvMDQyMDY3MWUtMzk4Mi0z
MzQ0LTliNDctNTFiZWEzMWYzOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh
YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2
YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5
OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRmWYaT24CYhZl4f8gPzBwF4NrDgNIFpnqkcFbY5RzqWy+fgg6iD9uW
GK5e/Ky6VIWmKAA0jm1qJy85xgzaqXP7iezh9BtNQuJL87CRvuq7mWK2Z0dljR8m
BAwQGGr72jagBf0Sk+RBBbTG2hxQQxWvrPmVDrJliZfBFN3hMdcyKFyzx3wFN6cp
yS2PSBvqh+o+linDEvpSG7+It3VOIHPsNxkskCJGK5GG3503X1SwXylk8J2p2rJz
Y6K0FPpnsrx/q7GcwfREJS5geoC1fbBHBF+z8oKoQhepSu0Oz/DL7tIHcvx+kuLv
RLbmZEBaobuOXul2VQloeBDZ5o0jp1U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:26 2026 by rpki-client