Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ee765048-d093-35b2-a10d-5c2eabc9a4ad.roa
File:                     ee765048-d093-35b2-a10d-5c2eabc9a4ad.roa (raw, json)
Hash identifier:          7GkPk2PjP5/HSxJ87fX5jpgs2QfDC506rt9VXsyLJYA=
Subject key identifier:   EE:31:EC:E0:59:4A:ED:42:7F:B7:C6:B2:BB:A3:B2:E6:56:E9:1B:1D
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584CEA5CD3A907F851469E751780
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ee765048-d093-35b2-a10d-5c2eabc9a4ad.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     14114
IP address blocks:        157.133.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d3:a9:07:f8:51:46:9e:75:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=03fce911-63c7-4766-ab64-ce45a3c87b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:b1:05:d6:78:3c:da:c4:b0:8d:bf:a9:62:
                    60:39:0d:cb:95:31:bd:3b:e4:e5:8a:0a:e0:8f:91:
                    54:12:1f:24:50:c5:41:76:d8:3f:8f:0d:75:01:4d:
                    fc:51:ba:19:71:40:a9:99:4d:68:08:6d:ca:7f:93:
                    0d:01:d6:87:97:dc:bc:57:15:cf:4c:db:0d:87:3c:
                    f7:16:ae:4f:21:f0:4e:e9:84:05:d5:23:75:82:30:
                    3e:fe:94:e6:db:ec:d5:97:d1:ea:6d:98:6d:01:51:
                    34:6c:01:e4:a5:7a:91:c2:bc:bf:8f:6a:9b:83:92:
                    31:55:3a:cc:b8:5d:e0:d5:29:fd:f8:0a:12:14:6a:
                    ee:86:63:23:f6:4c:d2:1f:63:12:38:a8:02:38:e2:
                    af:8b:52:29:23:b3:4d:cc:f8:93:44:5b:97:ff:8a:
                    be:6b:5c:b5:6c:f9:83:fd:32:97:a0:3e:86:a2:01:
                    fa:5a:0d:56:55:1e:98:9a:85:e1:aa:db:c1:28:45:
                    b1:25:36:40:2f:56:60:7b:71:f6:5e:51:0d:d2:a8:
                    1c:b7:35:ea:f0:ff:7b:ac:cd:c5:5f:2a:71:38:14:
                    18:26:0b:d0:67:40:5c:ec:a5:ed:3c:ab:6c:5d:6a:
                    18:c3:b1:91:b1:29:b7:7f:5f:16:82:3a:52:eb:b4:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:31:EC:E0:59:4A:ED:42:7F:B7:C6:B2:BB:A3:B2:E6:56:E9:1B:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ee765048-d093-35b2-a10d-5c2eabc9a4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:00:d5:7f:5b:89:18:ae:32:7d:2c:ca:be:d2:de:52:9c:62:
         0b:35:a1:f8:b1:bc:e8:9b:47:17:a3:fa:1e:fe:f9:f1:89:42:
         55:03:7d:fe:58:11:a4:e4:4c:09:32:25:d4:7c:d8:8f:82:0d:
         b2:8f:4d:82:bb:46:f6:03:8f:1a:41:ad:44:7e:9c:77:dd:d0:
         16:2e:e2:70:8b:4a:6f:3d:c2:d9:75:5b:10:93:a3:8b:9a:86:
         47:d2:3e:01:0e:a8:08:84:11:f3:25:ec:e2:aa:66:5e:a0:61:
         44:dc:c5:a7:9b:a9:d5:3f:2c:10:71:1d:3f:51:a2:1d:8f:1b:
         a9:c4:0d:4d:79:b8:56:b2:ce:16:12:0c:10:de:19:c2:76:db:
         f3:61:c8:e7:d8:bb:e4:6e:4f:1e:7b:db:90:74:09:51:7c:02:
         65:ed:93:5d:33:45:8d:99:af:d1:30:d1:d5:82:e7:f2:78:3c:
         87:c5:5c:89:be:27:43:b5:42:01:3d:f5:66:44:80:1b:b2:d0:
         e1:6b:54:84:98:06:15:ec:0e:03:c4:ff:8d:a6:c3:5a:fd:0c:
         b4:46:60:db:97:fc:ad:b6:04:89:a1:cf:07:c5:89:b6:69:13:
         23:9f:0d:b1:46:2f:81:58:06:79:24:2c:77:b6:4e:f4:0e:92:
         fb:ba:fc:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXNOpB/hRRp51F4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MDNmY2U5MTEtNjNjNy00NzY2LWFiNjQtY2U0NWEzYzg3YjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uOxBdZ4PNrEsI2/qWJgOQ3LlTG9O+Tligrg
j5FUEh8kUMVBdtg/jw11AU38UboZcUCpmU1oCG3Kf5MNAdaHl9y8VxXPTNsNhzz3
Fq5PIfBO6YQF1SN1gjA+/pTm2+zVl9HqbZhtAVE0bAHkpXqRwry/j2qbg5IxVTrM
uF3g1Sn9+AoSFGruhmMj9kzSH2MSOKgCOOKvi1IpI7NNzPiTRFuX/4q+a1y1bPmD
/TKXoD6GogH6Wg1WVR6YmoXhqtvBKEWxJTZAL1Zge3H2XlEN0qgctzXq8P97rM3F
XypxOBQYJgvQZ0Bc7KXtPKtsXWoYw7GRsSm3f18WgjpS67QtSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4x7OBZSu1Cf7fGsrujsuZW6RsdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvZWU3NjUwNDgtZDA5My0z
NWIyLWExMGQtNWMyZWFiYzlhNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA0A1X9biRiuMn0syr7S3lKcYgs1ofixvOibRxej+h7++fGJQlUDff5Y
EaTkTAkyJdR82I+CDbKPTYK7RvYDjxpBrUR+nHfd0BYu4nCLSm89wtl1WxCTo4ua
hkfSPgEOqAiEEfMl7OKqZl6gYUTcxaebqdU/LBBxHT9Roh2PG6nEDU15uFayzhYS
DBDeGcJ22/NhyOfYu+RuTx5725B0CVF8AmXtk10zRY2Zr9Ew0dWC5/J4PIfFXIm+
J0O1QgE99WZEgBuy0OFrVISYBhXsDgPE/42mw1r9DLRGYNuX/K22BImhzwfFibZp
EyOfDbFGL4FYBnkkLHe2TvQOkvu6/EU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:42 2026 by rpki-client