Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa
File:                     f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa (raw, json)
Hash identifier:          FMOtoBvKmqvxS+kMHosaQfvPOlwiFt1lekjJkC0bOW4=
Subject key identifier:   5B:A9:64:E1:F6:A4:C5:B5:13:43:4E:C7:C4:E3:9F:E4:F6:1B:14:C8
Certificate issuer:       /CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0
Certificate serial:       010D0C9F4328584CCBA7572BDC6046829CE77CF0
Authority key identifier: 7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     22667
IP address blocks:        67.59.192.0/20 maxlen: 24
                          69.39.240.0/20 maxlen: 24
                          173.213.192.0/20 maxlen: 24
                          173.249.96.0/19 maxlen: 24
                          192.40.208.0/21 maxlen: 24
                          206.176.224.0/19 maxlen: 24
                          2604:8f80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:57:2b:dc:60:46:82:9c:e7:7c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977c0d3a-286c-4c57-a7ca-84ea57d643a0
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=4daa4a42-7338-4d02-9067-d734843b69d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e9:ba:be:b6:f3:ba:fc:b2:4f:94:5b:dd:a6:
                    b5:04:ff:e4:15:77:a3:1d:bc:cd:c9:10:fa:f2:b7:
                    ab:ff:16:20:6b:95:0e:4e:08:ec:a9:01:b9:49:72:
                    90:cb:bc:f7:db:bc:bf:c3:32:00:79:d8:2d:49:70:
                    da:1d:07:b0:79:b1:ad:5f:57:b8:1c:d5:18:83:a8:
                    79:36:3c:44:26:59:f8:c7:5a:89:be:64:fc:71:14:
                    c8:00:12:b9:fd:ac:ee:2b:53:54:2c:2a:ae:da:14:
                    9a:f5:1d:d0:85:06:1a:6f:85:70:13:9c:eb:89:7f:
                    3e:69:dd:be:fb:77:4f:13:fa:da:50:25:96:5d:8f:
                    9d:bb:18:89:24:fc:b2:56:c6:6e:85:90:ae:ff:87:
                    f8:ae:50:40:5b:34:88:18:90:fc:ad:de:ff:e8:99:
                    35:85:d9:96:b5:fd:c7:29:e9:13:9a:5e:64:dc:2d:
                    ba:e7:ab:e3:4d:4b:d8:3d:20:c8:00:b4:81:5c:41:
                    d4:2a:31:26:07:b9:6a:f5:ed:9b:d5:92:5c:f6:94:
                    57:f7:11:a4:f4:28:8b:80:22:5e:e9:89:e7:fc:a3:
                    55:a4:04:06:6a:7f:d4:81:dc:97:0c:2b:69:f2:e0:
                    1e:63:73:00:3c:a3:fb:ab:b0:0d:05:7a:ac:6d:83:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A9:64:E1:F6:A4:C5:B5:13:43:4E:C7:C4:E3:9F:E4:F6:1B:14:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/f8f483bc-fa3b-3de6-a338-a4039d8187d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0/977c0d3a-286c-4c57-a7ca-84ea57d643a0.crl

            X509v3 Authority Key Identifier:
                keyid:7E:F8:DA:8D:0E:90:87:46:31:30:CC:BC:47:CA:85:2C:E4:13:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/977c0d3a-286c-4c57-a7ca-84ea57d643a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.192.0/20
                  69.39.240.0/20
                  173.213.192.0/20
                  173.249.96.0/19
                  192.40.208.0/21
                  206.176.224.0/19
                IPv6:
                  2604:8f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:fc:36:fa:7e:d3:b4:9a:33:7d:6b:85:c4:a7:44:01:fc:
         0c:f4:bb:b2:af:66:cc:04:b7:94:9e:d0:3c:06:05:8b:0b:2f:
         05:81:8d:5b:79:b1:54:39:52:4c:1f:8f:0d:98:2a:e7:b8:85:
         42:b8:f1:0f:3f:ea:a6:a1:71:ef:32:05:77:bd:4d:70:7f:a0:
         53:df:05:d2:83:f1:56:8a:b4:d1:ad:3c:24:e8:26:36:d4:bf:
         32:39:74:59:53:4c:01:74:7f:79:40:c8:d2:69:71:e5:64:d2:
         32:23:2f:bc:ab:f4:40:af:b3:e3:42:aa:49:bf:05:2d:7e:4a:
         5e:7a:b3:6d:c9:96:ee:97:18:66:d8:0a:e7:7d:bc:e3:86:b3:
         22:21:5f:41:49:1a:d3:54:df:fb:3c:73:52:50:a7:ec:46:22:
         08:55:e7:8d:0b:5d:7e:2e:50:58:a8:1f:93:6b:f7:fe:5f:da:
         0a:70:8d:8d:36:f4:de:4c:6c:3d:a1:0a:2c:96:10:2c:33:0a:
         af:e4:de:f1:f1:ff:32:f6:64:79:02:a4:5f:ef:07:37:e1:7f:
         93:21:44:03:1f:d4:77:80:15:58:e1:c6:8f:00:5f:25:d3:06:
         40:00:5e:fe:ed:7e:1c:60:bf:b8:78:71:b6:a0:b4:e4:7a:d2:
         49:6c:ec:0b
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEzLp1cr3GBGgpznfPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc3YzBkM2EtMjg2Yy00YzU3LWE3Y2EtODRlYTU3ZDY0
M2EwMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
NGRhYTRhNDItNzMzOC00ZDAyLTkwNjctZDczNDg0M2I2OWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOm6vrbzuvyyT5Rb3aa1BP/kFXejHbzNyRD6
8rer/xYga5UOTgjsqQG5SXKQy7z327y/wzIAedgtSXDaHQewebGtX1e4HNUYg6h5
NjxEJln4x1qJvmT8cRTIABK5/azuK1NULCqu2hSa9R3QhQYab4VwE5zriX8+ad2+
+3dPE/raUCWWXY+duxiJJPyyVsZuhZCu/4f4rlBAWzSIGJD8rd7/6Jk1hdmWtf3H
KekTml5k3C2656vjTUvYPSDIALSBXEHUKjEmB7lq9e2b1ZJc9pRX9xGk9CiLgCJe
6Ynn/KNVpAQGan/UgdyXDCtp8uAeY3MAPKP7q7ANBXqsbYM/+QIDAQABo4IDgjCC
A34wHQYDVR0OBBYEFFupZOH2pMW1E0NOx8Tjn+T2GxTIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85Nzdj
MGQzYS0yODZjLTRjNTctYTdjYS04NGVhNTdkNjQzYTAvZjhmNDgzYmMtZmEzYi0z
ZGU2LWEzMzgtYTQwMzlkODE4N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTc3YzBkM2EtMjg2Yy00YzU3LWE3
Y2EtODRlYTU3ZDY0M2EwLzk3N2MwZDNhLTI4NmMtNGM1Ny1hN2NhLTg0ZWE1N2Q2
NDNhMC5jcmwwHwYDVR0jBBgwFoAUfvjajQ6Qh0YxMMy8R8qFLOQTFXYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85NzdjMGQzYS0yODZjLTRjNTctYTdjYS04NGVh
NTdkNjQzYTAuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEQzvAAwQE
RSfwAwQErdXAAwQFrflgAwQDwCjQAwQFzrDgMA0EAgACMAcDBQAmBI+AMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBAII7/Db6ftO0mjN9a4XEp0QB/Az0u7KvZswEt5Se0DwGBYsLLwWBjVt5sVQ5
Ukwfjw2YKue4hUK48Q8/6qahce8yBXe9TXB/oFPfBdKD8VaKtNGtPCToJjbUvzI5
dFlTTAF0f3lAyNJpceVk0jIjL7yr9ECvs+NCqkm/BS1+Sl56s23Jlu6XGGbYCud9
vOOGsyIhX0FJGtNU3/s8c1JQp+xGIghV540LXX4uUFioH5Nr9/5f2gpwjY029N5M
bD2hCiyWECwzCq/k3vHx/zL2ZHkCpF/vBzfhf5MhRAMf1HeAFVjhxo8AXyXTBkAA
Xv7tfhxgv7h4cbagtOR60kls7As=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:27:49 2026 by rpki-client