Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa
File:                     89861158-9396-32bd-afbf-2ac552550fd7.roa (raw, json)
Hash identifier:          gO2+I9CwkWZtMgdEfhXauXJNv925eMrHfGjoknziHgM=
Subject key identifier:   4E:5D:B8:09:20:48:BE:FD:8B:64:98:ED:70:D4:22:FD:13:0F:B1:05
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584CED278B53DE287DF45089BAD0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     25697
IP address blocks:        209.50.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:8b:53:de:28:7d:f4:50:89:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ae3f82dd-dd8b-4681-b754-cc5c9e3b791c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:be:77:8a:3d:ad:03:20:16:fc:44:20:56:
                    28:1b:a6:48:93:99:5f:84:37:ba:bb:02:ec:bb:a6:
                    ab:07:6b:87:0d:ff:31:c9:11:cc:f9:02:59:06:3a:
                    2b:af:69:5d:2c:a7:7c:9b:64:d8:b0:1b:73:f5:ba:
                    e1:8d:ea:01:3b:ed:60:ba:62:45:4a:e0:3e:4f:74:
                    be:71:bd:bd:95:f5:43:ac:90:35:93:34:82:34:4a:
                    21:0a:f1:6a:9b:ed:21:ff:c4:4d:b1:63:d4:9a:62:
                    27:66:1e:4b:ef:0a:b2:e2:29:09:87:90:b8:b7:d4:
                    2d:d4:09:b7:c7:c6:17:88:83:a8:b4:1f:66:b3:43:
                    49:9b:6b:9c:9e:d8:26:35:05:cd:9d:7b:52:54:6c:
                    70:fe:b9:d4:17:f1:6c:a2:81:8d:e9:33:7b:ab:32:
                    59:48:00:b0:28:90:e1:ff:ce:13:1a:b8:5e:e3:36:
                    19:4b:95:c3:b6:51:44:24:0a:4e:c5:b8:86:ae:51:
                    a6:62:fb:97:17:0e:96:31:70:02:01:18:80:b9:91:
                    e8:52:26:40:4d:ef:b6:03:8a:20:e5:6a:1d:f0:bc:
                    91:97:dd:0a:33:1c:a6:3f:55:f9:0b:d5:8c:fa:9b:
                    c9:36:54:28:e7:87:0c:9f:62:88:7e:58:08:ca:f7:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:B8:09:20:48:BE:FD:8B:64:98:ED:70:D4:22:FD:13:0F:B1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/89861158-9396-32bd-afbf-2ac552550fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.50.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:61:7e:6d:a1:57:ad:38:d5:0f:d1:40:f8:4d:13:06:6f:
         92:37:40:1b:37:a9:56:af:23:78:83:8b:0c:bf:63:d9:d6:f8:
         01:77:ff:9d:e0:2d:71:f6:fb:7e:07:b8:a7:20:cc:84:55:3e:
         dd:37:fd:fe:c7:fe:89:10:4e:fd:1e:cc:57:32:70:35:ff:2b:
         81:56:dd:9d:5f:fd:d9:3d:bd:fc:e7:f6:44:52:ae:bd:55:7d:
         5c:14:ff:1c:b2:45:17:d0:55:72:dd:bb:0d:7e:0b:26:88:51:
         38:98:7a:41:f4:d5:c2:3c:c1:c5:fe:45:4e:f5:e6:63:7e:5e:
         46:45:0a:44:52:bf:1c:7c:a6:27:7a:2b:40:a0:85:ba:a3:ed:
         76:c1:11:be:af:65:b3:26:ff:a7:d6:55:b0:01:40:24:d0:e3:
         61:db:37:d7:b1:56:57:a1:22:16:ce:00:54:dc:6d:17:01:9e:
         d4:42:3d:de:81:fe:a6:e5:87:b3:11:b0:a9:8c:fe:ed:3a:a9:
         fc:60:b3:76:4e:5a:82:de:34:23:fb:88:90:7b:94:f7:12:8e:
         46:94:a1:08:89:0a:62:4f:af:9d:55:dd:3f:8d:37:5a:64:d0:
         01:17:90:b0:f0:35:44:a6:d0:67:05:87:4b:c3:38:4f:ba:7d:
         a3:5a:17:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4tT3ih99FCJutAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx
MzExMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
YWUzZjgyZGQtZGQ4Yi00NjgxLWI3NTQtY2M1YzllM2I3OTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc6+d4o9rQMgFvxEIFYoG6ZIk5lfhDe6uwLs
u6arB2uHDf8xyRHM+QJZBjorr2ldLKd8m2TYsBtz9brhjeoBO+1gumJFSuA+T3S+
cb29lfVDrJA1kzSCNEohCvFqm+0h/8RNsWPUmmInZh5L7wqy4ikJh5C4t9Qt1Am3
x8YXiIOotB9ms0NJm2ucntgmNQXNnXtSVGxw/rnUF/FsooGN6TN7qzJZSACwKJDh
/84TGrhe4zYZS5XDtlFEJApOxbiGrlGmYvuXFw6WMXACARiAuZHoUiZATe+2A4og
5Wod8LyRl90KMxymP1X5C9WM+pvJNlQo54cMn2KIflgIyveMuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5duAkgSL79i2SY7XDUIv0TD7EFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi
YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvODk4NjExNTgtOTM5Ni0z
MmJkLWFmYmYtMmFjNTUyNTUwZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl
NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2
MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy
Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0TIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0wYX5toVetONUP0UD4TRMGb5I3QBs3qVavI3iDiwy/Y9nW+AF3/53g
LXH2+34HuKcgzIRVPt03/f7H/okQTv0ezFcycDX/K4FW3Z1f/dk9vfzn9kRSrr1V
fVwU/xyyRRfQVXLduw1+CyaIUTiYekH01cI8wcX+RU715mN+XkZFCkRSvxx8pid6
K0Cghbqj7XbBEb6vZbMm/6fWVbABQCTQ42HbN9exVlehIhbOAFTcbRcBntRCPd6B
/qblh7MRsKmM/u06qfxgs3ZOWoLeNCP7iJB7lPcSjkaUoQiJCmJPr51V3T+NN1pk
0AEXkLDwNUSm0GcFh0vDOE+6faNaF84=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:38 2026 by rpki-client