Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa
File:                     a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa (raw, json)
Hash identifier:          dX75d6YGEHyLFnZtwRrd8BbESSpCgjyIV6gLX6yy7tE=
Subject key identifier:   63:5C:E6:2F:25:00:AD:95:BF:93:85:33:9E:26:CA:FF:26:6E:8A:58
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584D037D1897EDDF4B14C4862AD8
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     33548
IP address blocks:        206.162.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:18:97:ed:df:4b:14:c4:86:2a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=49b7f17c-ddf9-4e52-a545-1ad810a0ac4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:ae:c7:c5:ba:8b:2c:c5:f5:6f:06:f3:cf:
                    d2:e6:83:00:a7:54:f5:ff:47:c3:5b:1c:e8:3a:77:
                    b5:c8:e9:dd:bd:7e:50:a5:de:6f:35:74:9f:11:ba:
                    98:cf:9a:ee:0a:44:ac:78:2a:fb:a6:d8:b3:1e:4c:
                    d8:0c:29:2c:2d:11:b1:7c:e9:fd:e5:76:92:99:0d:
                    3e:cc:6f:97:db:5c:1c:17:e8:dc:50:f5:56:aa:01:
                    d6:73:67:bb:67:d8:ee:30:10:8f:25:aa:c3:9d:cb:
                    b5:68:22:13:79:cd:2c:7d:63:bb:cb:08:c6:43:1d:
                    c4:bb:80:ba:43:4d:87:a2:9a:11:71:89:61:44:a0:
                    6b:cf:2d:99:d6:8c:71:3c:54:cb:a0:0c:44:11:d4:
                    63:01:ce:17:29:a9:e4:54:68:7a:9d:f2:9a:08:ad:
                    0c:f4:45:f3:bc:cf:e6:34:29:7c:9c:e2:2d:25:aa:
                    a1:e6:2a:79:72:b4:ed:a8:18:66:b2:54:45:f6:d4:
                    8e:f7:87:77:f5:fc:40:3e:05:2d:a0:6d:54:a5:65:
                    69:f8:71:b2:d9:07:4c:20:78:68:2a:7e:78:34:2c:
                    3e:9b:62:21:b9:8f:7b:77:b7:63:a0:d4:86:1f:4d:
                    cb:bd:50:58:98:db:d1:ce:23:44:c1:64:64:d4:7e:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5C:E6:2F:25:00:AD:95:BF:93:85:33:9E:26:CA:FF:26:6E:8A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/a7f7373c-f50c-38d5-97db-f1a0ba3600db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:65:df:1f:94:2f:6a:22:83:5d:e5:b7:b0:57:12:26:50:04:
         e0:60:7f:92:6f:52:66:af:1f:6b:fa:cb:f4:f5:3a:61:a8:25:
         cb:7f:4f:89:28:25:ad:44:e0:7f:3f:32:7a:88:17:62:b5:18:
         b5:ce:8c:2f:9c:75:32:b8:67:ec:27:3f:b8:1f:ee:7c:ea:91:
         15:6d:ae:3c:fa:25:a5:1b:4d:12:66:fb:1c:67:8a:c4:5e:97:
         6f:67:ff:70:d3:2e:a8:30:b3:f9:5e:3f:15:86:96:08:94:f4:
         9a:b3:21:71:18:f1:7d:16:a1:13:a6:80:ec:7b:04:e7:7a:e9:
         0a:79:12:29:f8:a9:56:a9:2b:a1:fe:1e:13:6f:79:eb:f1:06:
         07:56:09:e8:07:70:ad:d9:af:05:34:75:62:06:c5:63:ae:48:
         a0:5e:44:12:52:38:da:62:82:26:23:8a:ee:80:64:27:2b:5d:
         5d:75:9f:4e:72:37:23:96:47:ef:75:c2:1b:72:f3:9e:3e:f5:
         42:07:fd:26:0d:19:c3:06:ca:b7:58:a3:29:b0:cc:91:d5:d6:
         fe:46:2c:b6:35:21:8e:28:fb:0e:48:14:76:3c:1d:d0:b0:82:
         98:e7:0a:6d:c6:b6:94:ea:78:1d:21:5f:78:6f:b9:b7:de:76:
         4c:ee:87:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRiX7d9LFMSGKtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi
MDU2MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NDliN2YxN2MtZGRmOS00ZTUyLWE1NDUtMWFkODEwYTBhYzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9mux8W6iyzF9W8G88/S5oMAp1T1/0fDWxzo
One1yOndvX5Qpd5vNXSfEbqYz5ruCkSseCr7ptizHkzYDCksLRGxfOn95XaSmQ0+
zG+X21wcF+jcUPVWqgHWc2e7Z9juMBCPJarDncu1aCITec0sfWO7ywjGQx3Eu4C6
Q02HopoRcYlhRKBrzy2Z1oxxPFTLoAxEEdRjAc4XKankVGh6nfKaCK0M9EXzvM/m
NCl8nOItJaqh5ip5crTtqBhmslRF9tSO94d39fxAPgUtoG1UpWVp+HGy2QdMIHho
Kn54NCw+m2IhuY97d7djoNSGH03LvVBYmNvRziNEwWRk1H6gCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGNc5i8lAK2Vv5OFM54myv8mbopYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3
ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvYTdmNzM3M2MtZjUwYy0z
OGQ1LTk3ZGItZjFhMGJhMzYwMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh
YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2
YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5
OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzqLgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhl3x+UL2oig13lt7BXEiZQBOBgf5JvUmavH2v6y/T1OmGoJct/T4ko
Ja1E4H8/MnqIF2K1GLXOjC+cdTK4Z+wnP7gf7nzqkRVtrjz6JaUbTRJm+xxnisRe
l29n/3DTLqgws/lePxWGlgiU9JqzIXEY8X0WoROmgOx7BOd66Qp5Ein4qVapK6H+
HhNveevxBgdWCegHcK3ZrwU0dWIGxWOuSKBeRBJSONpigiYjiu6AZCcrXV11n05y
NyOWR+91whty854+9UIH/SYNGcMGyrdYoymwzJHV1v5GLLY1IY4o+w5IFHY8HdCw
gpjnCm3GtpTqeB0hX3hvubfedkzuh6o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:07 2026 by rpki-client