Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa
File:                     c753aca4-2293-31df-a2e0-09caff20f8b7.roa (raw, json)
Hash identifier:          8PHYt3YzXVfIsW3I4qImT2EDQIrvK81Hkl28UwEmYQA=
Subject key identifier:   12:ED:30:58:13:10:06:AD:62:CC:10:36:7F:B9:9D:95:72:DA:91:4A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7B6A7B5FF7899D2BEABBD53B
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     64267
IP address blocks:        141.164.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7b:5f:f7:89:9d:2b:ea:bb:d5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=f51c2d28-50ab-4c91-992e-1010b7965d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:b0:10:82:b6:46:8d:41:15:53:74:e3:7f:
                    51:10:3c:54:cb:d1:62:44:d7:a2:58:8a:d3:ee:4f:
                    29:47:a3:7e:fc:4f:0f:45:20:46:be:10:4e:b9:ee:
                    ec:e1:8b:d3:35:bf:c7:a8:31:56:5c:d0:a3:1a:e2:
                    f4:97:43:92:a1:65:49:ef:75:71:db:7d:32:61:ef:
                    f1:66:57:cc:b1:30:25:a8:a5:7b:fc:53:de:d0:ce:
                    ab:b6:0f:04:24:56:e5:23:a4:5b:74:5b:fa:d7:f9:
                    b7:99:2a:61:90:f4:bd:c6:7b:68:14:c8:b4:3d:06:
                    1a:58:7f:b8:35:4f:a8:e6:df:1e:ac:7c:f6:16:86:
                    d7:a0:3a:d7:94:c3:67:7a:5e:04:cd:74:45:3e:36:
                    83:f2:78:2a:0b:97:2d:9f:fd:50:f2:92:6b:27:b6:
                    2d:b5:69:d1:bb:84:72:4a:c3:18:c2:8f:1d:ca:80:
                    c4:03:45:7b:1c:7b:67:da:2e:b5:0f:f9:7a:87:51:
                    2e:4c:42:a6:d5:56:68:12:52:a2:dd:08:1a:2e:75:
                    16:1d:73:a0:74:84:ca:c4:4b:8c:0e:66:11:a0:f8:
                    a3:5e:5d:68:fa:c5:6e:07:3a:8e:18:d9:4e:26:79:
                    51:66:bb:4c:a8:a6:57:93:53:48:bb:61:4b:a4:95:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:ED:30:58:13:10:06:AD:62:CC:10:36:7F:B9:9D:95:72:DA:91:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c753aca4-2293-31df-a2e0-09caff20f8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:5e:6a:0d:5d:f0:7d:e1:e5:cf:84:2f:44:b7:51:96:98:ed:
         7f:98:d7:83:14:07:2f:56:2d:2a:c3:7c:8d:06:ec:59:8d:a8:
         47:8d:28:90:ef:bd:76:1c:1b:ca:89:51:d4:ce:5d:2a:af:e9:
         53:25:43:9e:d3:c5:fb:06:b1:b3:c9:f6:77:97:d2:52:f6:3b:
         07:0a:e9:51:a3:34:db:15:f1:ed:7e:c8:59:c6:4c:4e:8f:97:
         0b:34:61:00:8e:09:05:84:ba:69:57:3c:d6:58:e9:36:7e:b7:
         bd:9e:64:20:f3:4e:f5:5e:ad:33:5a:90:4a:72:c1:f9:50:49:
         a5:1b:1b:fc:c2:ca:af:b5:69:29:58:0e:fb:76:04:0f:99:0e:
         77:6d:39:ee:1e:00:46:c5:d9:1f:39:47:f5:38:5f:ae:51:3f:
         c1:86:b7:cb:a5:cf:27:25:d1:94:81:9e:33:3c:83:55:07:3f:
         c5:4c:c6:bb:44:1f:db:27:21:8e:24:bc:9a:86:42:8c:45:4f:
         81:5f:fc:d5:a9:3b:51:62:a3:ee:d0:d1:9b:90:4a:08:5c:27:
         35:29:d9:69:11:3f:fb:f7:45:14:f5:58:e2:34:3e:96:73:3b:
         29:a0:6e:2e:99:7f:28:3c:99:20:91:75:2c:f5:47:71:b9:dd:
         39:34:23:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17antf94mdK+q71TswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
ZjUxYzJkMjgtNTBhYi00YzkxLTk5MmUtMTAxMGI3OTY1ZDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+KwEIK2Ro1BFVN0439REDxUy9FiRNeiWIrT
7k8pR6N+/E8PRSBGvhBOue7s4YvTNb/HqDFWXNCjGuL0l0OSoWVJ73Vx230yYe/x
ZlfMsTAlqKV7/FPe0M6rtg8EJFblI6RbdFv61/m3mSphkPS9xntoFMi0PQYaWH+4
NU+o5t8erHz2FobXoDrXlMNnel4EzXRFPjaD8ngqC5ctn/1Q8pJrJ7YttWnRu4Ry
SsMYwo8dyoDEA0V7HHtn2i61D/l6h1EuTEKm1VZoElKi3QgaLnUWHXOgdITKxEuM
DmYRoPijXl1o+sVuBzqOGNlOJnlRZrtMqKZXk1NIu2FLpJXOEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLtMFgTEAatYswQNn+5nZVy2pFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzc1M2FjYTQtMjI5My0z
MWRmLWEyZTAtMDljYWZmMjBmOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjaRVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANpeag1d8H3h5c+EL0S3UZaY7X+Y14MUBy9WLSrDfI0G7FmNqEeNKJDv
vXYcG8qJUdTOXSqv6VMlQ57TxfsGsbPJ9neX0lL2OwcK6VGjNNsV8e1+yFnGTE6P
lws0YQCOCQWEumlXPNZY6TZ+t72eZCDzTvVerTNakEpywflQSaUbG/zCyq+1aSlY
Dvt2BA+ZDndtOe4eAEbF2R85R/U4X65RP8GGt8ulzycl0ZSBnjM8g1UHP8VMxrtE
H9snIY4kvJqGQoxFT4Ff/NWpO1Fio+7Q0ZuQSghcJzUp2WkRP/v3RRT1WOI0PpZz
Oymgbi6Zfyg8mSCRdSz1R3G53Tk0I08=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:25 2026 by rpki-client