Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa
File:                     b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa (raw, json)
Hash identifier:          h3W55BzN0P20ueM3OJDoziywjwBvm2mXH5WizbsnWFI=
Subject key identifier:   D2:76:89:39:A7:81:6D:47:B5:0F:35:2E:0A:84:9D:56:C7:AF:DC:2D
Certificate issuer:       /CN=829d195a-d541-4371-970d-5be56cd489a8
Certificate serial:       010D0C9F4328584CEFF232ADDEB76E13BBD0B800
Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     46892
IP address blocks:        104.145.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:32:ad:de:b7:6e:13:bb:d0:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=63ff4c1d-c0e5-44e0-be9b-588da22ba9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:50:fd:76:6d:98:4a:98:1f:40:c3:2c:35:
                    4f:c8:0b:58:b5:2d:d7:06:d3:7b:05:75:3f:99:89:
                    c6:94:67:b4:c4:98:68:ad:dd:b4:d8:1b:3a:3c:4f:
                    85:6e:29:f8:a7:82:54:60:c3:7e:d2:f9:d2:22:98:
                    88:e5:04:ae:fc:19:21:77:2d:9c:ce:28:62:24:85:
                    b2:2b:9a:02:35:69:29:2c:77:40:4c:0d:70:08:89:
                    0c:bb:3f:8f:30:88:f4:11:41:90:7f:87:c3:a7:f4:
                    f8:c5:6a:e0:7d:2a:ab:55:32:84:84:7c:1d:74:94:
                    ba:2d:3c:3b:35:d2:d9:e5:ff:8f:19:a1:9a:9a:5d:
                    e5:3a:f7:ac:f0:5c:2f:d8:21:3c:5b:b2:8c:71:7d:
                    48:98:d1:3e:c8:ff:51:05:24:22:81:bc:35:99:45:
                    65:21:de:aa:01:9d:6c:b1:94:28:4c:2d:36:f2:e4:
                    a8:52:e2:3b:94:cc:14:cc:65:5f:79:56:b6:b4:e8:
                    69:9a:d5:b2:20:1b:c7:71:b3:4a:46:10:a0:f3:91:
                    18:87:f5:e9:fb:79:2e:f6:87:75:ec:1c:c4:04:39:
                    e6:59:67:65:af:fd:d7:6f:13:c9:99:b7:c8:28:4a:
                    4a:bb:5e:21:0c:03:d4:25:dd:78:34:29:90:d3:17:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:89:39:A7:81:6D:47:B5:0F:35:2E:0A:84:9D:56:C7:AF:DC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/b3aaed9c-fd11-3b7f-a703-6c0d9ac3f355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl

            X509v3 Authority Key Identifier:
                keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:1b:17:e2:41:90:a5:86:f4:62:53:52:54:c3:26:b9:2c:
         f9:7c:cb:96:13:e5:08:17:b3:ad:70:4d:e4:88:06:80:2b:34:
         8c:d6:d4:c3:ff:30:62:6d:9b:79:4c:39:f0:03:57:bf:50:e9:
         23:e1:06:ef:dc:25:00:3b:c5:b0:ae:b7:6a:76:de:78:76:2b:
         8d:be:e6:76:19:ce:3f:ea:ff:ce:14:4c:83:7a:97:1c:16:48:
         3e:44:ca:a4:ee:79:79:51:8d:15:e7:16:25:60:82:7e:0d:bb:
         33:1d:e4:8a:e4:b3:10:7f:9b:34:8c:83:a3:b7:c7:55:5b:6d:
         19:35:d0:95:3c:5b:67:a7:82:68:53:01:ef:ee:f3:80:37:e9:
         79:82:10:0e:d6:a7:32:01:0c:af:f7:07:79:14:8d:4d:5c:bd:
         ca:56:96:d4:67:4f:fa:fe:61:ed:22:dc:e7:66:f4:21:b5:e4:
         c7:cd:d9:e5:0d:fa:e0:ff:17:75:ad:36:2c:40:d3:e1:6e:21:
         94:52:7a:73:ac:9f:a6:1b:e8:02:9e:e7:16:4a:5b:eb:bb:f1:
         45:b3:30:6e:ae:ed:5f:b8:b8:6e:6c:a9:04:81:91:9c:95:e9:
         78:b4:5a:a7:e7:69:ab:e2:3e:76:76:c9:0e:65:60:25:1b:9a:
         1f:ce:ce:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8jKt3rduE7vQuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4
OWE4MB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
NjNmZjRjMWQtYzBlNS00NGUwLWJlOWItNTg4ZGEyMmJhOWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOFQ/XZtmEqYH0DDLDVPyAtYtS3XBtN7BXU/
mYnGlGe0xJhord202Bs6PE+Fbin4p4JUYMN+0vnSIpiI5QSu/Bkhdy2czihiJIWy
K5oCNWkpLHdATA1wCIkMuz+PMIj0EUGQf4fDp/T4xWrgfSqrVTKEhHwddJS6LTw7
NdLZ5f+PGaGaml3lOves8Fwv2CE8W7KMcX1ImNE+yP9RBSQigbw1mUVlId6qAZ1s
sZQoTC028uSoUuI7lMwUzGVfeVa2tOhpmtWyIBvHcbNKRhCg85EYh/Xp+3ku9od1
7BzEBDnmWWdlr/3XbxPJmbfIKEpKu14hDAPUJd14NCmQ0xfcJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJ2iTmngW1HtQ81LgqEnVbHr9wtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk
MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvYjNhYWVkOWMtZmQxMS0z
YjdmLWE3MDMtNmMwZDlhYzNmMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3
MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0
ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1
NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWhGxfiQZClhvRiU1JUwya5LPl8y5YT5QgXs61wTeSIBoArNIzW1MP/
MGJtm3lMOfADV79Q6SPhBu/cJQA7xbCut2p23nh2K42+5nYZzj/q/84UTIN6lxwW
SD5EyqTueXlRjRXnFiVggn4NuzMd5IrksxB/mzSMg6O3x1VbbRk10JU8W2engmhT
Ae/u84A36XmCEA7WpzIBDK/3B3kUjU1cvcpWltRnT/r+Ye0i3Odm9CG15MfN2eUN
+uD/F3WtNixA0+FuIZRSenOsn6Yb6AKe5xZKW+u78UWzMG6u7V+4uG5sqQSBkZyV
6Xi0WqfnaaviPnZ2yQ5lYCUbmh/OzuI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:44:58 2026 by rpki-client