Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/fb161303-4ec6-3426-a89e-6a2911a5b88d.roa
File:                     fb161303-4ec6-3426-a89e-6a2911a5b88d.roa (raw, json)
Hash identifier:          n0yLv8HSjZBXnuQnsVYM3kwZch9nWb2m9xt44oAA90Y=
Subject key identifier:   BE:6B:06:1D:F0:99:5F:EF:32:04:11:5D:88:B5:78:26:8B:B7:12:1B
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F4328584CB981D5FAF5C01E504D91C400
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/fb161303-4ec6-3426-a89e-6a2911a5b88d.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     393227
IP address blocks:        64.28.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d5:fa:f5:c0:1e:50:4d:91:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=4bc166b4-febb-49d9-a59a-7eb5ba0405c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:92:83:ea:53:ec:8f:c4:5b:67:84:11:2e:
                    37:fb:95:5c:be:ab:04:ba:3d:b7:2a:9d:fc:a7:0b:
                    7b:a5:32:2f:25:de:f3:7d:96:9c:b5:68:64:2e:d5:
                    b2:ad:39:d8:d3:78:96:b8:d8:a0:e6:ed:c1:4e:bc:
                    fa:fb:41:61:fb:e4:4f:f0:3a:7d:be:f9:4b:d4:4d:
                    6d:ec:b0:df:0d:50:77:0b:51:5e:4f:ed:2e:4c:12:
                    e3:d8:19:9e:98:f5:ed:3a:47:d6:64:c2:30:19:5b:
                    fa:e6:7d:03:f8:54:56:35:a9:eb:ab:84:ad:28:72:
                    26:bf:11:38:fe:02:89:dd:6c:9a:88:6a:eb:85:99:
                    e4:1b:91:16:d6:0c:85:a8:81:d6:29:7a:f9:94:c4:
                    22:4b:a5:af:8a:79:61:8d:be:c7:23:32:6f:b4:46:
                    e0:bf:4d:20:e7:15:1c:3f:8e:34:1a:09:99:12:bd:
                    47:93:98:5c:4e:d8:ba:09:89:95:4f:44:e9:ee:dd:
                    28:09:d5:e0:38:c9:42:04:08:5a:cc:44:a2:a2:bf:
                    0f:63:03:ca:39:84:0a:c5:b4:15:75:52:95:73:a4:
                    d6:68:79:e6:05:3f:68:e5:db:ca:46:f5:c0:a4:03:
                    ec:52:33:2a:1e:46:67:d6:f3:17:e8:c9:12:c0:8c:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6B:06:1D:F0:99:5F:EF:32:04:11:5D:88:B5:78:26:8B:B7:12:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/fb161303-4ec6-3426-a89e-6a2911a5b88d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:2b:ff:13:a1:88:12:75:24:9f:0b:73:40:99:59:65:52:94:
         27:83:f8:59:c5:5a:de:e0:aa:6b:99:4d:69:ec:ea:d3:c8:d5:
         2c:82:03:1e:95:ce:5f:85:ab:3e:04:f2:d7:60:6b:12:21:bc:
         be:40:ed:43:98:fa:09:c5:9e:1d:27:46:75:5d:87:b5:d3:9b:
         ea:b6:6e:09:e7:79:49:09:41:7b:49:27:03:58:e6:ce:9f:70:
         d8:1a:e6:4d:29:72:df:bf:21:79:49:e6:77:0b:55:8b:48:6b:
         25:8f:15:e4:2f:37:39:5c:03:f5:1d:00:18:6e:18:89:8e:5a:
         8c:4c:62:90:25:10:4d:62:6c:6d:62:86:d5:8d:6b:2d:3b:af:
         65:21:96:44:c9:ab:39:23:c3:20:49:72:33:01:20:c6:6f:ba:
         22:3b:48:6f:5b:22:0b:ca:22:90:bf:a7:86:98:75:f5:26:e5:
         77:96:22:cc:bc:f4:d3:4b:1a:f0:93:9d:a2:ca:85:f2:be:f6:
         f3:2b:b0:a2:66:19:72:c2:34:4c:7f:f8:aa:da:a6:8d:fb:24:
         de:d9:17:5d:b3:f1:33:d1:b1:24:b8:c3:00:3d:c9:b1:db:54:
         ee:d0:51:fa:da:04:6e:b6:d8:56:12:52:f4:00:aa:ff:cb:18:
         7e:28:67:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdX69cAeUE2RxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWViODE4MzgtNmNmNy00YzFmLWJmNzMtZWVlYzA4N2U0
NzFhMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk
NGJjMTY2YjQtZmViYi00OWQ5LWE1OWEtN2ViNWJhMDQwNWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFSSg+pT7I/EW2eEES43+5VcvqsEuj23Kp38
pwt7pTIvJd7zfZactWhkLtWyrTnY03iWuNig5u3BTrz6+0Fh++RP8Dp9vvlL1E1t
7LDfDVB3C1FeT+0uTBLj2BmemPXtOkfWZMIwGVv65n0D+FRWNanrq4StKHImvxE4
/gKJ3WyaiGrrhZnkG5EW1gyFqIHWKXr5lMQiS6Wvinlhjb7HIzJvtEbgv00g5xUc
P440GgmZEr1Hk5hcTti6CYmVT0Tp7t0oCdXgOMlCBAhazESior8PYwPKOYQKxbQV
dVKVc6TWaHnmBT9o5dvKRvXApAPsUjMqHkZn1vMX6MkSwIxWkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5rBh3wmV/vMgQRXYi1eCaLtxIbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWI4
MTgzOC02Y2Y3LTRjMWYtYmY3My1lZWVjMDg3ZTQ3MWEvZmIxNjEzMDMtNGVjNi0z
NDI2LWE4OWUtNmEyOTExYTViODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWViODE4MzgtNmNmNy00YzFmLWJm
NzMtZWVlYzA4N2U0NzFhLzVlYjgxODM4LTZjZjctNGMxZi1iZjczLWVlZWMwODdl
NDcxYS5jcmwwHwYDVR0jBBgwFoAUXXiWJsqY+fRZDdHZ2roQHD/+t/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWI4MTgzOC02Y2Y3LTRjMWYtYmY3My1lZWVj
MDg3ZTQ3MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQBwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMcr/xOhiBJ1JJ8Lc0CZWWVSlCeD+FnFWt7gqmuZTWns6tPI1SyCAx6V
zl+Fqz4E8tdgaxIhvL5A7UOY+gnFnh0nRnVdh7XTm+q2bgnneUkJQXtJJwNY5s6f
cNga5k0pct+/IXlJ5ncLVYtIayWPFeQvNzlcA/UdABhuGImOWoxMYpAlEE1ibG1i
htWNay07r2UhlkTJqzkjwyBJcjMBIMZvuiI7SG9bIgvKIpC/p4aYdfUm5XeWIsy8
9NNLGvCTnaLKhfK+9vMrsKJmGXLCNEx/+Krapo37JN7ZF12z8TPRsSS4wwA9ybHb
VO7QUfraBG622FYSUvQAqv/LGH4oZ6I=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:46 2026 by rpki-client