Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa
File:                     dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa (raw, json)
Hash identifier:          +1tI/Nh/2IOotF4BgmxUFnN12FhVDD1E/cN/X3BzqC8=
Subject key identifier:   7F:1D:E3:52:71:E6:87:A9:96:B5:CB:D1:28:50:61:7F:25:C9:8F:F6
Certificate issuer:       /CN=adbe8e45-914d-402e-9a09-f3730289dda0
Certificate serial:       010D0C9F4328584CB287356097DC97E9AD14A480
Authority key identifier: CC:BB:1E:4C:CA:95:0F:22:F5:AD:48:65:19:62:5A:AE:D1:88:1E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     25728
IP address blocks:        192.139.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:35:60:97:dc:97:e9:ad:14:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe8e45-914d-402e-9a09-f3730289dda0
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=adb62b06-08eb-47d2-a4a5-2a0676914a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:b6:d6:b8:af:bd:f8:9e:8c:a7:9d:3b:b0:
                    75:61:94:1b:b4:ac:23:f0:08:72:0f:6b:c1:73:28:
                    ef:61:10:07:6e:75:5f:38:ec:14:e1:c2:9c:46:e2:
                    2e:ea:9d:6e:6d:3f:27:d7:a3:5b:fd:62:0f:67:da:
                    d3:04:64:eb:32:11:b6:9e:72:d6:7b:37:4d:33:33:
                    cb:98:a7:f6:ba:c0:5e:45:61:aa:9f:c9:54:58:1b:
                    1e:e5:70:f3:2e:6b:3c:59:c5:75:85:96:c5:25:e5:
                    9c:de:72:c1:a4:20:c6:a0:86:bd:0d:53:9f:08:88:
                    3c:1b:1f:53:64:34:7f:a8:ae:c7:e7:ef:81:26:d7:
                    bb:bf:4b:14:9e:1f:8a:ac:5e:79:07:30:ed:99:0d:
                    97:87:2a:d8:80:ef:b9:57:47:8e:9c:12:05:4e:ef:
                    5a:5c:5f:39:fe:b7:87:29:5b:3a:3d:51:2d:19:9a:
                    9b:78:1d:77:65:25:61:49:34:63:a3:84:dc:a6:0e:
                    a4:e3:05:49:3b:1e:d2:14:b0:6f:ff:ec:6b:38:4a:
                    98:99:8c:91:7d:31:f8:32:bb:f8:fa:b3:d0:37:0b:
                    64:6e:24:1c:b7:28:b2:fa:89:19:6e:44:00:58:c1:
                    ff:3c:27:ef:11:1f:c5:5b:0d:01:8d:58:0e:43:9c:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:E3:52:71:E6:87:A9:96:B5:CB:D1:28:50:61:7F:25:C9:8F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.crl

            X509v3 Authority Key Identifier:
                keyid:CC:BB:1E:4C:CA:95:0F:22:F5:AD:48:65:19:62:5A:AE:D1:88:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:e9:b5:bc:1f:8b:2b:1c:a4:bb:77:e8:e2:1e:ec:55:3e:
         b2:f0:76:2f:08:05:2b:bc:e6:19:f2:fd:05:38:8d:37:90:60:
         61:a5:bf:c9:91:bb:66:5b:3f:ef:f0:ba:35:2b:ce:75:90:e9:
         84:b3:15:eb:f0:b6:aa:34:d0:12:b2:ea:f9:e7:12:66:c3:46:
         09:dd:97:8e:a5:60:af:69:14:cc:14:f5:71:5c:4b:fb:1c:1f:
         56:4d:55:f8:d2:3c:a1:ed:7b:46:47:14:f5:b8:22:52:0c:4d:
         14:31:f4:c5:64:6a:e5:8d:e3:3d:66:53:90:06:58:b6:9a:a7:
         41:86:7f:d4:5b:79:fd:9c:9c:b7:c4:56:39:f6:93:74:8a:65:
         40:d5:b5:ce:30:fb:b9:43:d0:c6:29:03:ac:cf:c5:43:d6:86:
         ae:48:0c:87:45:c8:d4:c5:39:0b:bd:8a:1b:2e:59:12:c7:08:
         6b:e8:fa:d6:91:d8:2f:c1:22:e1:97:c9:0a:02:37:bf:c9:3e:
         f3:b6:a2:5c:ed:a8:79:96:e4:35:bd:56:f5:b3:2a:f0:b6:af:
         cc:2e:17:e5:61:79:9a:fb:09:23:57:6f:ae:ee:85:1a:c0:c0:
         1d:18:fd:fe:f3:19:41:19:8d:5f:31:06:5a:bc:08:ca:4f:31:
         98:e9:32:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzVgl9yX6a0UpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWRiZThlNDUtOTE0ZC00MDJlLTlhMDktZjM3MzAyODlk
ZGEwMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk
YWRiNjJiMDYtMDhlYi00N2QyLWE0YTUtMmEwNjc2OTE0YTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjS21rivvfiejKedO7B1YZQbtKwj8AhyD2vB
cyjvYRAHbnVfOOwU4cKcRuIu6p1ubT8n16Nb/WIPZ9rTBGTrMhG2nnLWezdNMzPL
mKf2usBeRWGqn8lUWBse5XDzLms8WcV1hZbFJeWc3nLBpCDGoIa9DVOfCIg8Gx9T
ZDR/qK7H5++BJte7v0sUnh+KrF55BzDtmQ2XhyrYgO+5V0eOnBIFTu9aXF85/reH
KVs6PVEtGZqbeB13ZSVhSTRjo4Tcpg6k4wVJOx7SFLBv/+xrOEqYmYyRfTH4Mrv4
+rPQNwtkbiQctyiy+okZbkQAWMH/PCfvER/FWw0BjVgOQ5yRIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8d41Jx5oeplrXL0ShQYX8lyY/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZGJl
OGU0NS05MTRkLTQwMmUtOWEwOS1mMzczMDI4OWRkYTAvZGMzZTUyZjEtMGUxMS0z
MDc5LTk4ODktM2EwNDA4YTVjYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWRiZThlNDUtOTE0ZC00MDJlLTlh
MDktZjM3MzAyODlkZGEwL2FkYmU4ZTQ1LTkxNGQtNDAyZS05YTA5LWYzNzMwMjg5
ZGRhMC5jcmwwHwYDVR0jBBgwFoAUzLseTMqVDyL1rUhlGWJartGIHngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZGJlOGU0NS05MTRkLTQwMmUtOWEwOS1mMzcz
MDI4OWRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/P6bW8H4srHKS7d+jiHuxVPrLwdi8IBSu85hny/QU4jTeQYGGlv8mR
u2ZbP+/wujUrznWQ6YSzFevwtqo00BKy6vnnEmbDRgndl46lYK9pFMwU9XFcS/sc
H1ZNVfjSPKHte0ZHFPW4IlIMTRQx9MVkauWN4z1mU5AGWLaap0GGf9Rbef2cnLfE
Vjn2k3SKZUDVtc4w+7lD0MYpA6zPxUPWhq5IDIdFyNTFOQu9ihsuWRLHCGvo+taR
2C/BIuGXyQoCN7/JPvO2olztqHmW5DW9VvWzKvC2r8wuF+VheZr7CSNXb67uhRrA
wB0Y/f7zGUEZjV8xBlq8CMpPMZjpMlE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:18 2026 by rpki-client