Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa
File:                     148fac5b-db30-374b-a428-f9d9c8a85496.roa (raw, json)
Hash identifier:          bnMtWr3l8x1qsT/rzQdoYkzlwg/QqNREvFAePpjXPHI=
Subject key identifier:   1D:B3:5F:FB:BD:15:D6:15:A1:1D:F3:1F:3B:87:78:3A:38:A2:DD:95
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584D773A818B08CE09D86AE70D08
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        69.42.213.0/24 maxlen: 24
                          186.190.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:81:8b:08:ce:09:d8:6a:e7:0d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=03f793bc-f327-4cb3-a21e-9b4e4a5cffb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:e0:a4:0d:56:d6:cc:4e:98:61:1f:95:b2:
                    73:d1:fc:34:ed:54:da:51:78:24:f5:a7:20:3c:23:
                    a9:18:09:bb:04:a2:32:8a:ab:04:64:bf:f7:ac:9a:
                    3c:72:14:6d:0c:fb:3b:ea:f3:53:f4:94:12:54:87:
                    dd:ff:33:25:a5:b3:66:5a:ef:c3:85:b0:2b:01:fa:
                    5a:74:a2:44:3a:5e:3e:77:7c:95:9d:ae:06:b1:99:
                    ca:35:1c:41:94:bf:46:91:bf:e2:fa:e7:b0:d8:e5:
                    37:52:e9:03:16:c9:2b:b8:2f:e3:55:f5:78:f0:40:
                    bd:48:52:95:0d:c7:49:8d:9b:c0:ec:62:85:6f:e4:
                    fa:78:d7:4f:66:c7:a6:0c:64:ff:c3:9c:8e:61:62:
                    9b:b3:55:40:6a:95:56:e1:51:4d:f3:cf:2d:85:17:
                    73:49:39:d2:88:7a:b0:bc:d4:c7:ee:53:71:8c:ae:
                    d5:7e:ef:08:c4:4f:bc:32:fc:3b:40:16:99:e6:2c:
                    00:f0:10:df:39:48:40:18:e4:fb:69:3e:43:be:a8:
                    d4:b4:1a:4d:ab:2b:a8:57:4e:62:e6:9d:b3:23:73:
                    cb:0c:b3:ee:a0:d6:1d:41:78:08:e8:0c:c0:35:92:
                    aa:60:1f:72:11:9d:d3:9f:ec:fd:1f:47:0e:a9:73:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B3:5F:FB:BD:15:D6:15:A1:1D:F3:1F:3B:87:78:3A:38:A2:DD:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.213.0/24
                  186.190.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:84:48:0b:cb:d3:6e:b4:37:c4:3f:55:44:ed:2f:af:bb:
         80:a1:73:fd:76:89:44:b4:0b:11:3b:e0:82:d1:a7:62:d2:ca:
         91:15:6d:98:e4:5d:07:9f:e7:0b:cd:29:9b:db:2b:f4:e3:76:
         e8:8a:91:9b:7f:5a:96:b8:01:1b:ce:58:85:ed:d5:4f:53:60:
         61:36:47:de:c9:0f:7d:89:aa:e2:84:f6:be:eb:ca:15:86:61:
         40:a9:36:ac:50:ac:0a:b2:2c:8a:7b:af:b0:0f:bc:b6:2d:b6:
         5f:c2:3b:9a:66:25:b4:07:b6:ae:86:0e:4d:32:ff:7e:a7:85:
         6f:64:02:57:b2:e5:50:66:f1:88:ee:a8:31:d8:d8:6f:2e:b4:
         97:f5:36:8d:db:af:7b:6e:55:0c:89:f8:c8:ec:c7:df:72:98:
         5d:5b:15:72:1e:e2:d4:ab:34:ad:01:bd:8d:37:1b:0f:16:b6:
         31:46:8f:04:7b:43:af:98:b8:19:9b:79:6e:a7:e2:36:58:cd:
         72:3c:b2:d2:11:63:28:66:c4:40:7b:b3:dd:9d:85:78:cb:49:
         7d:ea:fd:62:05:63:f3:17:16:bb:0f:4e:bf:13:8c:73:da:47:
         04:ea:8f:87:5c:d5:d3:94:d0:51:23:07:7f:0b:f9:d8:e6:35:
         f5:1f:03:b9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE13OoGLCM4J2GrnDQgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk
MDNmNzkzYmMtZjMyNy00Y2IzLWEyMWUtOWI0ZTRhNWNmZmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGvgpA1W1sxOmGEflbJz0fw07VTaUXgk9acg
PCOpGAm7BKIyiqsEZL/3rJo8chRtDPs76vNT9JQSVIfd/zMlpbNmWu/DhbArAfpa
dKJEOl4+d3yVna4GsZnKNRxBlL9Gkb/i+uew2OU3UukDFskruC/jVfV48EC9SFKV
DcdJjZvA7GKFb+T6eNdPZsemDGT/w5yOYWKbs1VAapVW4VFN888thRdzSTnSiHqw
vNTH7lNxjK7Vfu8IxE+8Mvw7QBaZ5iwA8BDfOUhAGOT7aT5DvqjUtBpNqyuoV05i
5p2zI3PLDLPuoNYdQXgI6AzANZKqYB9yEZ3Tn+z9H0cOqXNszwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB2zX/u9FdYVoR3zHzuHeDo4ot2VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvMTQ4ZmFjNWItZGIzMC0z
NzRiLWE0MjgtZjlkOWM4YTg1NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARSrVAwQA
ur7fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADLphEgLy9NutDfEP1VE7S+vu4Chc/12iUS0CxE74ILRp2LS
ypEVbZjkXQef5wvNKZvbK/TjduiKkZt/Wpa4ARvOWIXt1U9TYGE2R97JD32JquKE
9r7ryhWGYUCpNqxQrAqyLIp7r7APvLYttl/CO5pmJbQHtq6GDk0y/36nhW9kAley
5VBm8YjuqDHY2G8utJf1No3br3tuVQyJ+Mjsx99ymF1bFXIe4tSrNK0BvY03Gw8W
tjFGjwR7Q6+YuBmbeW6n4jZYzXI8stIRYyhmxEB7s92dhXjLSX3q/WIFY/MXFrsP
Tr8TjHPaRwTqj4dc1dOU0FEjB38L+djmNfUfA7k=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:48 2026 by rpki-client