Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa
File:                     09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa (raw, json)
Hash identifier:          myDgPLh15UFzJDPmwzSXbfEFpJdlxyfAgJnJTICo3fk=
Subject key identifier:   19:EE:6F:EE:03:02:74:38:0A:30:E2:B4:04:E3:EC:E5:FD:0E:1B:C8
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584D59EA6C5D8877B7337251FD80
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        69.64.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6c:5d:88:77:b7:33:72:51:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=34fe264b-5e74-45be-8fe3-648b1c918b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:7d:9f:3f:00:f0:cd:34:67:fd:cc:5e:53:
                    f1:90:5b:4b:88:0a:99:92:14:56:59:17:1a:29:50:
                    06:08:9b:7a:f1:dd:82:a1:98:11:02:13:61:5d:9c:
                    82:0f:a2:04:8d:b0:6a:ba:94:83:96:00:56:85:9e:
                    58:e3:f4:83:95:c5:f1:c5:90:dc:2b:0d:ee:df:c8:
                    4d:ed:06:a8:63:d1:ed:7d:bb:f8:80:b0:37:39:ba:
                    67:b9:e5:c3:0c:71:2b:18:58:2d:33:d7:8c:92:67:
                    4a:f6:f5:64:4f:1b:c6:5b:7d:ef:86:06:67:20:af:
                    d1:4a:0a:21:50:c4:35:9c:69:0a:91:ff:24:f1:ec:
                    b1:52:00:33:e5:ef:81:bd:1c:66:ad:3c:c0:0d:c3:
                    ad:e1:9c:ed:2e:28:58:01:c8:15:00:af:c7:f3:26:
                    4c:bf:b8:ac:66:c4:c0:b6:75:d5:71:9c:1d:72:40:
                    58:7c:97:f6:e1:ab:54:f0:a1:cc:73:47:0f:1b:3e:
                    75:b0:b7:1f:58:c4:b9:66:3f:c0:33:f6:ac:ce:60:
                    30:52:c1:e0:2a:57:1d:5c:ce:ed:fe:08:57:92:a6:
                    2f:51:d4:ff:5f:44:d9:60:21:a7:15:92:f4:a0:de:
                    fe:18:89:21:20:9b:8f:27:11:0d:59:51:a8:d9:03:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:6F:EE:03:02:74:38:0A:30:E2:B4:04:E3:EC:E5:FD:0E:1B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7b:d7:f4:66:d4:34:85:4b:5c:be:65:66:56:e5:30:cb:9a:
         01:08:48:7f:17:bf:c6:68:ea:4c:59:bf:a1:44:0c:c3:21:2b:
         f5:fe:8e:82:3a:47:e4:aa:bf:23:31:e9:23:09:82:f6:c5:72:
         15:7e:39:df:20:ac:c7:08:3c:b2:fc:4a:02:0b:9e:8b:59:de:
         3c:b6:3b:4c:2e:82:7a:6a:97:66:e6:43:68:6d:65:ba:51:2a:
         4f:05:3d:0c:5e:db:0f:8e:a2:f3:f8:f3:22:8f:4c:68:76:0a:
         79:b8:96:3b:1f:bf:d0:6d:f0:f8:9f:6d:cf:6a:90:9a:d2:ec:
         8d:2b:24:24:0f:e1:56:4b:14:67:f2:c6:df:18:9d:22:b3:ce:
         cc:11:60:95:a7:b2:4e:0f:ff:c1:d4:56:a4:b4:ee:28:d6:5a:
         3e:6f:dc:17:45:cb:fd:09:39:9b:c0:4f:ce:66:13:35:1c:76:
         d2:0c:c5:2f:79:ff:0a:1e:df:c6:99:a7:f7:a2:2e:fb:41:fa:
         9b:db:c8:88:63:6c:f1:bf:86:6c:6f:45:b3:2b:7a:6d:60:0d:
         05:c8:b9:1f:e3:94:4d:c6:02:a1:99:82:60:7c:f9:cb:54:be:
         91:43:8f:da:bf:09:08:80:22:83:2c:fb:7d:54:96:fb:15:5b:
         50:79:e6:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mxdiHe3M3JR/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MzRmZTI2NGItNWU3NC00NWJlLThmZTMtNjQ4YjFjOTE4YjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPZ9nz8A8M00Z/3MXlPxkFtLiAqZkhRWWRca
KVAGCJt68d2CoZgRAhNhXZyCD6IEjbBqupSDlgBWhZ5Y4/SDlcXxxZDcKw3u38hN
7QaoY9Htfbv4gLA3ObpnueXDDHErGFgtM9eMkmdK9vVkTxvGW33vhgZnIK/RSgoh
UMQ1nGkKkf8k8eyxUgAz5e+BvRxmrTzADcOt4ZztLihYAcgVAK/H8yZMv7isZsTA
tnXVcZwdckBYfJf24atU8KHMc0cPGz51sLcfWMS5Zj/AM/aszmAwUsHgKlcdXM7t
/ghXkqYvUdT/X0TZYCGnFZL0oN7+GIkhIJuPJxENWVGo2QPMywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnub+4DAnQ4CjDitATj7OX9DhvIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvMDlhYTIxZjgtZWIzYi0z
OGRhLWI4NjktYzc0MmFhZWI1YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB971/Rm1DSFS1y+ZWZW5TDLmgEISH8Xv8Zo6kxZv6FEDMMhK/X+joI6
R+SqvyMx6SMJgvbFchV+Od8grMcIPLL8SgILnotZ3jy2O0wugnpql2bmQ2htZbpR
Kk8FPQxe2w+OovP48yKPTGh2Cnm4ljsfv9Bt8Pifbc9qkJrS7I0rJCQP4VZLFGfy
xt8YnSKzzswRYJWnsk4P/8HUVqS07ijWWj5v3BdFy/0JOZvAT85mEzUcdtIMxS95
/woe38aZp/eiLvtB+pvbyIhjbPG/hmxvRbMrem1gDQXIuR/jlE3GAqGZgmB8+ctU
vpFDj9q/CQiAIoMs+31UlvsVW1B55lg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:04 2026 by rpki-client