Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
File:                     303511ae-00e0-3ae9-9384-2797153592ac.roa (raw, json)
Hash identifier:          GLVM+q3S/BjB13iOFyChRGZszRG4VfiOm2J9FC4zvus=
Subject key identifier:   22:EC:2F:90:31:78:69:F8:97:4F:0A:B6:A8:14:AB:9E:4C:8C:CE:1E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584CB551F0920BB74447C8E3DD80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     212238
IP address blocks:        104.243.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:f0:92:0b:b7:44:47:c8:e3:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=c3d76bfa-0aad-4732-a5e6-1a50f0b7ecd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:75:a9:20:3f:c9:07:aa:6c:01:08:48:e9:
                    71:e9:f8:c5:4f:0c:40:d5:ae:66:3a:5d:44:68:e5:
                    06:92:6a:29:16:af:42:f5:50:ef:a1:67:f9:19:65:
                    91:c8:40:bf:0f:ae:af:d5:59:8d:dc:d4:ad:de:41:
                    df:02:ff:92:bb:ba:93:4e:f0:7a:2a:a4:df:d2:c2:
                    38:5b:f7:0a:2a:1a:7e:9b:1c:d7:b8:a3:55:32:3d:
                    3d:fe:65:99:4b:b8:75:59:32:95:f7:c9:56:c2:f6:
                    72:49:89:72:d0:5b:ac:68:6e:fe:02:93:90:bd:c8:
                    51:07:3b:41:7b:3a:7f:ac:d0:96:8c:25:ee:dd:fa:
                    55:81:5a:ef:1f:fa:15:a9:a7:0f:46:2e:2a:98:9a:
                    67:fb:d3:9d:63:78:1c:a0:4b:a9:d0:0e:b1:77:3a:
                    cb:e4:3d:f3:db:7c:14:cd:59:21:d4:4c:d9:cd:2e:
                    f9:d9:c6:66:cd:ae:29:c6:95:ce:d7:2d:e6:dc:6d:
                    e4:c2:7e:68:86:a9:a5:23:a1:26:44:ea:e3:10:4b:
                    7f:35:50:64:b9:8a:4d:84:f7:dc:4d:81:c9:86:55:
                    24:82:69:3b:a1:b3:84:e1:7b:54:c9:93:89:e9:f8:
                    42:4d:34:17:e2:86:a6:96:dc:73:d5:be:80:9f:60:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EC:2F:90:31:78:69:F8:97:4F:0A:B6:A8:14:AB:9E:4C:8C:CE:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:5a:67:7a:64:99:69:8b:11:6f:d0:2e:ae:19:8d:3c:af:
         a6:57:2e:46:6d:ac:88:01:12:d0:21:df:0c:b6:e7:5b:38:21:
         4e:6f:d0:33:52:bd:87:f1:0f:ba:43:18:f7:a8:7d:94:3b:4c:
         24:69:6a:6c:fc:82:1a:be:77:a1:0e:5a:5a:03:1c:0d:44:3f:
         b5:66:f9:10:ee:da:f7:0c:c0:a4:be:eb:33:26:8d:d2:13:da:
         a9:45:fb:71:a9:74:98:49:f7:39:67:38:ba:ca:75:43:03:77:
         34:2c:d5:75:20:bf:f5:83:7e:ca:d3:ae:1c:ff:19:69:d9:54:
         e1:38:ee:47:9e:d5:88:81:cc:53:ae:a3:43:c6:36:f3:7c:e7:
         59:36:4e:e4:b0:e5:15:9f:a3:70:35:4f:77:00:87:38:e2:5f:
         4c:05:a2:32:ce:0f:82:f9:8a:dc:a1:ca:49:42:71:76:30:be:
         f7:a9:68:db:7f:a5:bc:de:bc:45:1d:41:4e:cd:f6:14:fc:0c:
         9c:98:71:ae:9d:55:4b:1e:00:10:af:56:2f:47:2e:fa:c2:bd:
         25:9f:b6:ea:de:97:55:9d:0f:2a:35:f5:60:14:f0:a9:93:cb:
         11:0b:aa:94:e5:52:b1:22:6d:1e:ad:69:5f:12:f9:c1:d3:dd:
         3b:60:45:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfCSC7dER8jj3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
YzNkNzZiZmEtMGFhZC00NzMyLWE1ZTYtMWE1MGYwYjdlY2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRh1qSA/yQeqbAEISOlx6fjFTwxA1a5mOl1E
aOUGkmopFq9C9VDvoWf5GWWRyEC/D66v1VmN3NSt3kHfAv+Su7qTTvB6KqTf0sI4
W/cKKhp+mxzXuKNVMj09/mWZS7h1WTKV98lWwvZySYly0FusaG7+ApOQvchRBztB
ezp/rNCWjCXu3fpVgVrvH/oVqacPRi4qmJpn+9OdY3gcoEup0A6xdzrL5D3z23wU
zVkh1EzZzS752cZmza4pxpXO1y3m3G3kwn5ohqmlI6EmROrjEEt/NVBkuYpNhPfc
TYHJhlUkgmk7obOE4XtUyZOJ6fhCTTQX4oamltxz1b6An2AsMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLsL5AxeGn4l08KtqgUq55MjM4eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzAzNTExYWUtMDBlMC0z
YWU5LTkzODQtMjc5NzE1MzU5MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+hWmd6ZJlpixFv0C6uGY08r6ZXLkZtrIgBEtAh3wy251s4IU5v0DNS
vYfxD7pDGPeofZQ7TCRpamz8ghq+d6EOWloDHA1EP7Vm+RDu2vcMwKS+6zMmjdIT
2qlF+3GpdJhJ9zlnOLrKdUMDdzQs1XUgv/WDfsrTrhz/GWnZVOE47kee1YiBzFOu
o0PGNvN851k2TuSw5RWfo3A1T3cAhzjiX0wFojLOD4L5ityhyklCcXYwvvepaNt/
pbzevEUdQU7N9hT8DJyYca6dVUseABCvVi9HLvrCvSWfturel1WdDyo19WAU8KmT
yxELqpTlUrEibR6taV8S+cHT3TtgRZo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:29 2026 by rpki-client