Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/ebe80919-0fbc-3172-98a5-3997d59f10fb.roa
File:                     ebe80919-0fbc-3172-98a5-3997d59f10fb.roa (raw, json)
Hash identifier:          GOqwjP+IG2L1PLIjAeQVmqoyekaB92X/06cZsWdnglw=
Subject key identifier:   49:1E:68:B3:93:78:70:D7:82:43:94:CA:DC:3B:4A:A6:D9:20:51:AF
Certificate issuer:       /CN=cb3c1858-774e-412f-8f35-dbceb0979782
Certificate serial:       010D0C9F4328584CBF172C0207689717520EB480
Authority key identifier: B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/ebe80919-0fbc-3172-98a5-3997d59f10fb.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     23118
IP address blocks:        69.36.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:2c:02:07:68:97:17:52:0e:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3c1858-774e-412f-8f35-dbceb0979782
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=d4164f7c-dd9a-4de2-ba5e-ddfd59aabafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c7:f5:9d:90:34:bc:ad:17:d8:94:cb:56:4b:
                    8a:73:9d:76:bf:13:6c:da:35:ae:68:04:c2:11:c8:
                    f0:41:70:10:f6:2d:84:26:b0:c6:e5:b9:fb:b9:24:
                    60:bc:79:bb:0f:b0:d2:0d:d0:a3:87:9c:15:3e:ce:
                    78:a2:eb:99:2e:f4:54:c2:12:20:a1:45:b1:a9:7e:
                    31:5e:a7:ac:8a:1c:66:02:ea:f2:22:9e:0d:eb:14:
                    27:e0:b8:c6:22:fa:7c:ad:1a:a4:d7:2a:cc:88:c7:
                    a4:6b:e3:2e:bc:c2:c2:c7:4c:5b:4e:93:33:1c:7a:
                    ff:1b:26:59:1e:fb:96:fc:7b:b0:35:12:9e:d3:d2:
                    c4:01:6e:c0:51:dc:31:ae:d2:85:6b:a1:62:11:10:
                    c3:02:2b:6d:75:cb:6b:09:f3:bc:b5:e5:9a:d0:21:
                    ce:96:85:6e:3c:73:29:a2:d7:38:dc:e6:f7:bd:40:
                    0c:31:30:91:ad:fb:fe:99:b4:36:0e:07:d2:bd:fb:
                    4c:a8:b8:a0:ed:c0:4b:6c:79:09:62:f3:f1:36:14:
                    37:a6:4a:79:aa:fa:82:ca:2c:15:4f:0e:ac:1d:7d:
                    0d:2a:eb:b2:2a:96:26:54:fc:30:40:f5:10:08:e1:
                    68:00:d7:03:c9:c2:e2:50:d5:fb:87:f3:e1:39:b0:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1E:68:B3:93:78:70:D7:82:43:94:CA:DC:3B:4A:A6:D9:20:51:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/ebe80919-0fbc-3172-98a5-3997d59f10fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782/cb3c1858-774e-412f-8f35-dbceb0979782.crl

            X509v3 Authority Key Identifier:
                keyid:B3:17:21:79:FB:C7:21:75:01:31:E9:A1:28:22:A6:C2:CA:8D:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb3c1858-774e-412f-8f35-dbceb0979782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b4:cd:07:00:55:95:64:1e:1e:6c:38:63:95:04:e6:52:8a:
         7e:2e:f4:d2:50:06:3a:c0:69:db:0a:a6:b4:81:3c:33:cb:50:
         c4:aa:14:82:35:37:f9:36:92:8a:fa:c8:ec:24:bf:ec:ed:28:
         b2:48:51:79:1d:d0:de:e1:ea:b9:84:e6:e2:8a:7f:f0:58:83:
         7d:94:fe:54:b5:fa:17:ad:24:44:f4:b5:42:aa:7c:bb:8e:80:
         29:a7:76:ee:84:55:83:6e:25:96:5b:06:a3:80:75:4e:a6:93:
         fb:07:0b:7a:2d:45:4c:d1:d5:ba:b2:cf:bb:de:dc:f4:53:17:
         8a:56:61:e7:e2:ab:24:c3:f2:67:3b:a7:37:4f:f1:a6:55:4b:
         19:76:48:3b:a5:5b:1b:00:c8:43:5a:d4:a6:fb:62:77:7e:d7:
         50:9a:b2:95:df:ae:37:8e:47:5f:fa:06:1a:8c:cf:25:33:1e:
         8d:14:fb:28:bc:9e:c2:ac:27:aa:80:49:50:c4:52:76:b9:53:
         6b:9d:5c:1d:ae:64:77:8b:d8:24:08:1d:d0:c8:c9:7c:36:02:
         3b:db:eb:b2:02:52:e5:02:f4:b0:b5:b2:82:10:9b:01:a7:8d:
         f2:8d:32:9a:58:41:56:b8:bd:42:1a:dc:79:79:a0:85:b7:08:
         ec:62:e9:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/FywCB2iXF1IOtIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzYzE4NTgtNzc0ZS00MTJmLThmMzUtZGJjZWIwOTc5
NzgyMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZDQxNjRmN2MtZGQ5YS00ZGUyLWJhNWUtZGRmZDU5YWFiYWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMf1nZA0vK0X2JTLVkuKc512vxNs2jWuaATC
EcjwQXAQ9i2EJrDG5bn7uSRgvHm7D7DSDdCjh5wVPs54ouuZLvRUwhIgoUWxqX4x
XqesihxmAuryIp4N6xQn4LjGIvp8rRqk1yrMiMeka+MuvMLCx0xbTpMzHHr/GyZZ
HvuW/HuwNRKe09LEAW7AUdwxrtKFa6FiERDDAittdctrCfO8teWa0CHOloVuPHMp
otc43Ob3vUAMMTCRrfv+mbQ2DgfSvftMqLig7cBLbHkJYvPxNhQ3pkp5qvqCyiwV
Tw6sHX0NKuuyKpYmVPwwQPUQCOFoANcDycLiUNX7h/PhObBvJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkeaLOTeHDXgkOUytw7SqbZIFGvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjNj
MTg1OC03NzRlLTQxMmYtOGYzNS1kYmNlYjA5Nzk3ODIvZWJlODA5MTktMGZiYy0z
MTcyLTk4YTUtMzk5N2Q1OWYxMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2IzYzE4NTgtNzc0ZS00MTJmLThm
MzUtZGJjZWIwOTc5NzgyL2NiM2MxODU4LTc3NGUtNDEyZi04ZjM1LWRiY2ViMDk3
OTc4Mi5jcmwwHwYDVR0jBBgwFoAUsxchefvHIXUBMemhKCKmwsqNtjwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYjNjMTg1OC03NzRlLTQxMmYtOGYzNS1kYmNl
YjA5Nzk3ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSTTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJq0zQcAVZVkHh5sOGOVBOZSin4u9NJQBjrAadsKprSBPDPLUMSqFII1
N/k2kor6yOwkv+ztKLJIUXkd0N7h6rmE5uKKf/BYg32U/lS1+hetJET0tUKqfLuO
gCmndu6EVYNuJZZbBqOAdU6mk/sHC3otRUzR1bqyz7ve3PRTF4pWYefiqyTD8mc7
pzdP8aZVSxl2SDulWxsAyENa1Kb7Ynd+11CaspXfrjeOR1/6BhqMzyUzHo0U+yi8
nsKsJ6qASVDEUna5U2udXB2uZHeL2CQIHdDIyXw2Ajvb67ICUuUC9LC1soIQmwGn
jfKNMppYQVa4vUIa3Hl5oIW3COxi6Zw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:54 2026 by rpki-client