Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa
File:                     f182be9d-b8f9-3157-a816-20982907b3f7.roa (raw, json)
Hash identifier:          PEEmNrLg1FpCpSWt4boIwj64DurLjqwW1JptEhEGlxI=
Subject key identifier:   E2:0D:B0:3A:F1:3D:94:D6:E3:38:F2:12:52:64:A4:A3:6D:6A:53:95
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584CB28730BD68DB467A9E69D480
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     13213
IP address blocks:        67.212.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:30:bd:68:db:46:7a:9e:69:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=f21d6a68-e7fc-4580-a176-7e9bed5e544e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:72:fe:a8:84:d9:fa:c3:5e:d0:58:6b:29:
                    0b:06:5f:65:32:3e:f3:ca:b3:e9:6d:1f:a9:3d:ac:
                    32:37:0f:08:67:dc:a2:35:58:e2:c7:ac:a5:2f:67:
                    f0:65:36:be:94:a5:2c:72:4d:0f:3f:ec:ec:0a:21:
                    f0:77:5f:85:f6:05:47:30:2f:69:9c:35:3a:47:1a:
                    8a:62:c1:92:f6:01:00:cc:88:9f:f0:aa:4d:0b:ac:
                    00:8a:8c:6b:52:51:58:60:8d:77:c5:cd:6d:7d:fd:
                    91:3a:e3:69:c4:12:c5:84:d3:f8:33:2c:db:37:37:
                    e9:b6:79:9f:06:b3:42:5c:3d:00:f1:55:87:b1:5e:
                    ed:0f:26:91:56:2e:c0:ec:fd:0d:54:9f:fc:70:b0:
                    de:4a:26:bb:63:8f:c8:f7:28:6c:19:7e:73:80:6c:
                    8b:05:6c:d2:84:dd:73:e9:cf:57:75:5c:29:d9:6d:
                    2d:cd:27:e9:1d:41:a6:5f:f3:c6:94:09:5f:66:23:
                    70:80:9d:75:fc:69:eb:e2:30:fc:4b:70:8d:fe:c7:
                    e7:44:3c:eb:c6:dd:97:94:e4:29:a7:11:c6:7b:6e:
                    94:14:d8:0b:f8:8f:e7:d9:e5:c6:84:e5:f8:5c:90:
                    ea:2a:48:4d:f0:9c:1d:77:5d:48:df:9d:f5:54:bd:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:B0:3A:F1:3D:94:D6:E3:38:F2:12:52:64:A4:A3:6D:6A:53:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/f182be9d-b8f9-3157-a816-20982907b3f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:00:cc:f7:8e:f7:cc:0a:09:ef:87:0b:df:5d:c9:2d:90:
         e5:30:0e:54:db:01:cc:8b:67:df:ea:be:ef:a6:7a:d6:e6:82:
         98:ac:3d:6b:51:ae:34:dd:7d:aa:cd:1c:ba:b2:f8:29:91:79:
         77:a8:be:17:28:2e:0c:59:49:52:9c:8e:9b:79:39:98:d2:b5:
         52:d6:9a:2e:02:17:06:60:85:78:02:e3:9d:18:a3:bc:bd:8c:
         35:7b:b6:df:82:97:bc:47:f6:3a:6f:28:f6:f0:4b:04:61:97:
         2d:95:54:ba:99:56:1d:55:94:d7:ca:18:23:83:d1:ed:78:a0:
         17:ed:71:8b:d9:c3:49:60:55:79:7a:12:1c:47:c3:2c:da:6c:
         a6:5b:27:0f:4c:39:c8:83:5a:8f:f1:07:e8:73:62:fa:52:ab:
         f9:03:a1:4c:68:89:98:0e:39:69:a1:95:7c:5c:cf:b6:3d:0f:
         d5:bb:c7:95:47:62:ae:ef:d3:2b:ad:a1:ee:ea:3a:da:16:67:
         e0:fd:fe:c1:56:e2:ae:67:e4:2d:bd:f7:1b:bc:03:a9:dc:15:
         9f:7d:0d:b6:ca:2a:f8:21:f4:61:71:94:79:ce:d7:a3:97:4c:
         5c:0d:68:3d:40:a0:4a:15:bc:f8:b3:e4:46:28:14:18:a1:87:
         05:49:bf:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzC9aNtGep5p1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5
YWFlMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZjIxZDZhNjgtZTdmYy00NTgwLWExNzYtN2U5YmVkNWU1NDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ly/qiE2frDXtBYaykLBl9lMj7zyrPpbR+p
PawyNw8IZ9yiNVjix6ylL2fwZTa+lKUsck0PP+zsCiHwd1+F9gVHMC9pnDU6RxqK
YsGS9gEAzIif8KpNC6wAioxrUlFYYI13xc1tff2ROuNpxBLFhNP4MyzbNzfptnmf
BrNCXD0A8VWHsV7tDyaRVi7A7P0NVJ/8cLDeSia7Y4/I9yhsGX5zgGyLBWzShN1z
6c9XdVwp2W0tzSfpHUGmX/PGlAlfZiNwgJ11/Gnr4jD8S3CN/sfnRDzrxt2XlOQp
pxHGe26UFNgL+I/n2eXGhOX4XJDqKkhN8Jwdd11I3531VL31MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOINsDrxPZTW4zjyElJkpKNtalOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh
OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZjE4MmJlOWQtYjhmOS0z
MTU3LWE4MTYtMjA5ODI5MDdiM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh
OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl
OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh
ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9TgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcsAMz3jvfMCgnvhwvfXcktkOUwDlTbAcyLZ9/qvu+metbmgpisPWtR
rjTdfarNHLqy+CmReXeovhcoLgxZSVKcjpt5OZjStVLWmi4CFwZghXgC450Yo7y9
jDV7tt+Cl7xH9jpvKPbwSwRhly2VVLqZVh1VlNfKGCOD0e14oBftcYvZw0lgVXl6
EhxHwyzabKZbJw9MOciDWo/xB+hzYvpSq/kDoUxoiZgOOWmhlXxcz7Y9D9W7x5VH
Yq7v0yutoe7qOtoWZ+D9/sFW4q5n5C299xu8A6ncFZ99DbbKKvgh9GFxlHnO16OX
TFwNaD1AoEoVvPiz5EYoFBihhwVJv3k=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:57 2026 by rpki-client