Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa
File:                     68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa (raw, json)
Hash identifier:          ykTkMgntV6SORZ3HyVkLGLnA0YGQufmlG9VaVS1stiE=
Subject key identifier:   E3:A2:F8:42:23:16:02:77:A1:E0:84:90:D8:CB:E9:7A:89:D8:29:0F
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584CE62CB64973DB484AD16449C0
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     34774
IP address blocks:        199.64.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:b6:49:73:db:48:4a:d1:64:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=b8fb395c-05d2-4f4b-a2a3-c75aefdcfc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:58:cd:47:52:fc:1e:07:1d:3f:15:d3:55:
                    65:5e:e1:d6:a5:15:e5:bf:df:19:ce:ea:81:ac:a3:
                    e9:51:da:6f:52:29:b3:ce:97:8e:81:76:fc:2b:76:
                    e3:3d:cc:d2:be:70:26:73:b9:5d:1a:b7:80:f8:3a:
                    0a:cc:ef:6e:a1:e2:be:a5:76:e1:f2:77:3f:dc:db:
                    fd:d7:53:28:20:8c:0f:2c:ab:cb:1b:e3:a2:dd:ad:
                    91:98:10:36:a2:65:e9:46:cb:2d:94:32:b0:94:5f:
                    a1:58:46:2d:c8:e0:96:f2:e7:5a:53:ad:5f:ac:5f:
                    c4:57:5a:4f:08:f6:96:ae:4b:7a:3b:88:a7:d3:5b:
                    5b:a6:0b:97:b7:e0:a6:2d:5e:62:28:72:c1:c1:08:
                    75:1d:e3:9b:9e:14:af:d1:c6:c2:d2:c3:0e:f6:41:
                    0d:57:b8:c1:37:f4:1d:12:2f:fc:1d:f5:b6:9c:72:
                    7d:91:c2:bb:fb:bf:78:2b:d6:05:e0:ed:8d:f5:0b:
                    a5:f3:b2:59:a6:b8:65:db:b6:f8:83:c2:b6:fc:09:
                    e3:b1:78:61:7d:44:94:f8:5a:d3:08:89:ca:82:c5:
                    77:7a:df:b4:a9:6e:32:7a:39:8f:e0:41:b5:23:f0:
                    75:98:fd:39:4c:1a:cc:6d:e3:52:e4:f9:ee:85:31:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:F8:42:23:16:02:77:A1:E0:84:90:D8:CB:E9:7A:89:D8:29:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/68fbf46a-6030-3eb9-a1a5-72060a5e7097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:f8:13:79:9e:98:c8:85:d4:1b:b8:5f:d9:7a:ad:0b:a7:
         3f:dc:64:b0:43:2e:36:bb:90:68:8f:66:11:81:36:38:4c:28:
         66:a4:3a:19:f0:cf:17:28:06:ac:dd:aa:d8:8b:cc:b9:48:f1:
         59:90:77:94:e7:09:a0:88:94:d6:8e:05:16:9c:d0:68:7d:8c:
         20:d1:cb:b1:7c:1e:bf:13:a1:9f:2b:61:18:5d:01:17:28:c2:
         f6:53:dd:b0:5e:de:37:a1:83:bf:0c:07:36:02:39:97:53:6c:
         f2:c0:06:0c:7c:00:c5:21:5d:62:1a:60:4c:0e:5a:cc:75:1b:
         f3:f1:1e:26:d2:65:b9:50:be:7c:03:1d:fd:a5:d1:b9:50:f7:
         9c:e8:69:ff:fc:ab:91:0f:11:8b:fc:6b:e5:b7:72:4b:1c:5a:
         7d:5a:30:3e:39:07:1a:c7:48:26:78:51:f3:6a:10:9f:53:ea:
         be:8a:34:9f:25:ce:ae:84:b0:45:11:6f:cf:b9:bf:d1:66:39:
         1b:0b:12:c1:e3:29:60:d3:eb:4c:36:55:86:98:6f:e1:64:60:
         28:06:89:53:83:80:c7:02:68:94:5f:9b:2f:dd:3d:b9:5b:f6:
         84:21:11:1a:74:28:85:b7:68:b1:54:c4:b3:43:cb:83:b4:ee:
         89:ac:f2:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLLZJc9tIStFkScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk
YjhmYjM5NWMtMDVkMi00ZjRiLWEyYTMtYzc1YWVmZGNmYzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdYzUdS/B4HHT8V01VlXuHWpRXlv98ZzuqB
rKPpUdpvUimzzpeOgXb8K3bjPczSvnAmc7ldGreA+DoKzO9uoeK+pXbh8nc/3Nv9
11MoIIwPLKvLG+Oi3a2RmBA2omXpRsstlDKwlF+hWEYtyOCW8udaU61frF/EV1pP
CPaWrkt6O4in01tbpguXt+CmLV5iKHLBwQh1HeObnhSv0cbC0sMO9kENV7jBN/Qd
Ei/8HfW2nHJ9kcK7+794K9YF4O2N9Qul87JZprhl27b4g8K2/AnjsXhhfUSU+FrT
CInKgsV3et+0qW4yejmP4EG1I/B1mP05TBrMbeNS5PnuhTG8NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOi+EIjFgJ3oeCEkNjL6XqJ2CkPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvNjhmYmY0NmEtNjAzMC0z
ZWI5LWExYTUtNzIwNjBhNWU3MDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0BUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGj2+BN5npjIhdQbuF/Zeq0Lpz/cZLBDLja7kGiPZhGBNjhMKGakOhnw
zxcoBqzdqtiLzLlI8VmQd5TnCaCIlNaOBRac0Gh9jCDRy7F8Hr8ToZ8rYRhdARco
wvZT3bBe3jehg78MBzYCOZdTbPLABgx8AMUhXWIaYEwOWsx1G/PxHibSZblQvnwD
Hf2l0blQ95zoaf/8q5EPEYv8a+W3ckscWn1aMD45BxrHSCZ4UfNqEJ9T6r6KNJ8l
zq6EsEURb8+5v9FmORsLEsHjKWDT60w2VYaYb+FkYCgGiVODgMcCaJRfmy/dPblb
9oQhERp0KIW3aLFUxLNDy4O07oms8r4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:37 2026 by rpki-client