Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa
File:                     bec70105-240d-3338-ac1a-1f6dd61ef242.roa (raw, json)
Hash identifier:          uiV+lMynt4+bgNhvpBH0O1EcJUucboMkUiHFG5exItU=
Subject key identifier:   59:7D:BD:D5:C0:6E:0D:BF:4B:6F:0D:26:69:CA:E9:E4:7B:CC:E0:3E
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F4328584CCFD738A2DA539FC1DE4ED300
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     395222
IP address blocks:        142.249.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:38:a2:da:53:9f:c1:de:4e:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=365ac593-43bc-464c-aac3-b6a18bcdcfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:bc:f3:15:5d:64:ef:14:da:65:96:ff:7c:
                    a7:35:68:dc:77:0e:57:fa:bd:8a:01:fc:c6:65:03:
                    19:25:2e:37:a9:7a:53:6c:c6:7f:f8:4b:a0:a9:9f:
                    8d:f7:e3:32:3d:e8:4f:fc:f1:d9:ef:39:c2:1e:25:
                    09:1c:2a:d6:cd:58:08:81:96:8d:2e:24:5f:99:e1:
                    e6:94:f1:56:00:e0:ef:13:ad:9d:f3:ce:04:17:0e:
                    a1:de:44:1a:ee:c5:ef:6b:6e:9c:da:b0:35:e1:0d:
                    32:5f:27:29:4b:54:31:21:c2:52:d2:5b:e6:d9:06:
                    2c:ac:37:cb:15:5b:1a:a7:15:c9:a7:41:93:4a:ed:
                    8b:d2:8b:db:04:a2:c5:74:50:72:39:e8:76:b4:33:
                    7e:f4:76:8a:af:9b:6f:d6:a1:23:04:c9:a6:2f:8c:
                    80:b6:d0:b6:5a:9b:9b:96:8d:25:a7:4b:81:69:f5:
                    20:81:4b:5b:71:b3:4c:3a:93:d3:df:73:1d:17:41:
                    bf:3b:6d:15:4a:88:94:b5:8a:24:6b:8f:4d:10:68:
                    3f:ec:ac:49:a3:e4:65:3e:13:aa:ad:b6:27:5a:b5:
                    54:19:1d:4d:13:fe:31:43:1c:a3:06:52:8f:96:da:
                    8a:88:b2:0d:73:3a:8e:02:3b:bc:2c:95:da:14:df:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7D:BD:D5:C0:6E:0D:BF:4B:6F:0D:26:69:CA:E9:E4:7B:CC:E0:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/bec70105-240d-3338-ac1a-1f6dd61ef242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:96:34:62:55:36:fd:c5:44:24:5b:b7:60:5e:00:ed:8c:
         eb:0d:eb:cd:63:74:fc:cb:8f:e1:18:0f:fe:16:63:c0:08:55:
         26:bb:11:03:4c:75:32:1b:ce:44:e0:51:4c:b7:4a:bd:2e:dc:
         5b:b2:6e:70:4a:2c:56:8e:3d:77:56:2f:99:5c:39:95:61:13:
         4a:e8:73:a7:fb:c2:e1:ec:15:73:1b:70:dc:b6:f6:9e:a1:ee:
         e2:00:6a:0f:a3:c8:bf:0c:6b:36:f8:23:05:9e:80:d0:2f:d4:
         80:71:76:5c:e9:87:40:b1:d9:8c:e2:54:37:c1:e7:1f:4b:ba:
         68:5f:9e:22:1a:11:94:41:71:3e:fa:42:fd:4b:45:e5:f7:c9:
         59:9f:89:98:87:88:7a:b1:47:06:e6:be:a9:3c:aa:28:a2:d3:
         a8:c6:68:23:b9:9d:e9:17:a8:cf:50:f4:1e:ff:90:dc:f6:84:
         8e:9a:f7:81:2c:e7:10:c5:b2:85:d7:1f:48:d8:cf:ac:5a:0c:
         f1:9c:a7:36:71:e8:9b:70:4c:76:89:51:6a:43:2f:36:32:3e:
         10:69:a2:88:5c:ec:81:bd:37:37:17:26:41:63:32:1e:6f:eb:
         20:a6:9d:df:1e:c9:90:d8:9b:a7:06:cf:98:10:52:ff:71:08:
         ac:b1:75:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1zii2lOfwd5O0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4
Yjg0MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk
MzY1YWM1OTMtNDNiYy00NjRjLWFhYzMtYjZhMThiY2RjZmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwy88xVdZO8U2mWW/3ynNWjcdw5X+r2KAfzG
ZQMZJS43qXpTbMZ/+EugqZ+N9+MyPehP/PHZ7znCHiUJHCrWzVgIgZaNLiRfmeHm
lPFWAODvE62d884EFw6h3kQa7sXva26c2rA14Q0yXycpS1QxIcJS0lvm2QYsrDfL
FVsapxXJp0GTSu2L0ovbBKLFdFByOeh2tDN+9HaKr5tv1qEjBMmmL4yAttC2Wpub
lo0lp0uBafUggUtbcbNMOpPT33MdF0G/O20VSoiUtYoka49NEGg/7KxJo+RlPhOq
rbYnWrVUGR1NE/4xQxyjBlKPltqKiLINczqOAju8LJXaFN86+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFl9vdXAbg2/S28NJmnK6eR7zOA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk
MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYmVjNzAxMDUtMjQwZC0z
MzM4LWFjMWEtMWY2ZGQ2MWVmMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy
ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4
OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw
OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvkYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABL3ljRiVTb9xUQkW7dgXgDtjOsN681jdPzLj+EYD/4WY8AIVSa7EQNM
dTIbzkTgUUy3Sr0u3FuybnBKLFaOPXdWL5lcOZVhE0roc6f7wuHsFXMbcNy29p6h
7uIAag+jyL8Mazb4IwWegNAv1IBxdlzph0Cx2YziVDfB5x9LumhfniIaEZRBcT76
Qv1LReX3yVmfiZiHiHqxRwbmvqk8qiii06jGaCO5nekXqM9Q9B7/kNz2hI6a94Es
5xDFsoXXH0jYz6xaDPGcpzZx6JtwTHaJUWpDLzYyPhBpoohc7IG9NzcXJkFjMh5v
6yCmnd8eyZDYm6cGz5gQUv9xCKyxdbY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:53 2026 by rpki-client