Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa
File:                     f6c9df29-3b43-3fad-b06a-619bbb47b781.roa (raw, json)
Hash identifier:          jf3dgUN0bpjW+OO0AR7Or7u3Xw26XbeQpu8+QQEhevQ=
Subject key identifier:   93:9E:8D:49:97:76:AC:E9:55:47:86:22:8D:7C:1E:E4:C9:67:56:4C
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584CB551D55D2497F01105CDA800
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     10747
IP address blocks:        68.65.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:d5:5d:24:97:f0:11:05:cd:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=ed164c4c-fc02-4a69-887d-c8258d44d0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:64:d2:86:c3:5b:80:7d:7c:71:12:8d:20:
                    1d:83:33:c2:55:b8:42:0c:93:51:fd:70:b7:6c:1d:
                    e0:4e:d9:ca:02:38:09:b7:a2:13:79:fb:0d:5a:75:
                    60:b9:61:9a:dd:d4:b5:8a:e1:20:5e:f4:54:94:ab:
                    c0:0f:4e:e3:09:b5:b0:21:08:e6:23:34:fe:d9:13:
                    05:af:42:12:93:78:9e:6e:21:de:8b:e2:4f:d9:b9:
                    37:0a:d0:0b:ed:c1:cb:21:df:11:f2:a8:20:28:b8:
                    21:0e:ab:51:22:a7:5d:39:cc:64:bc:44:df:66:36:
                    02:60:2a:2b:44:95:76:4c:3e:dc:ba:9e:a0:7e:19:
                    ab:27:36:03:0b:ab:d0:4a:2e:a0:b7:d2:c7:db:76:
                    29:c1:8e:b8:2c:ca:39:8b:ac:42:59:dc:37:a3:39:
                    2d:d6:d0:18:65:19:64:ef:0a:b7:f1:f2:2a:08:2c:
                    97:78:e3:54:58:7d:33:ee:32:86:5c:03:f4:b8:03:
                    30:17:0b:94:55:88:8e:27:ac:7e:54:80:99:53:23:
                    41:9a:62:32:6c:f7:67:23:41:48:61:8c:2f:63:07:
                    57:fc:96:c1:6e:c5:34:22:28:64:70:cf:ca:aa:19:
                    91:d0:10:34:1a:6d:2f:38:9c:dc:05:c8:e4:79:07:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9E:8D:49:97:76:AC:E9:55:47:86:22:8D:7C:1E:E4:C9:67:56:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f6c9df29-3b43-3fad-b06a-619bbb47b781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:15:d1:3e:33:a5:46:d3:d2:f6:fd:c6:b7:32:3f:a8:c2:2a:
         3f:b6:42:80:83:3e:88:f5:94:e2:27:8e:fe:6d:d7:f6:43:d8:
         02:82:09:a9:7d:f0:58:1f:07:56:bd:05:31:d1:ce:76:71:71:
         21:fa:99:98:06:41:c9:dd:54:06:4d:4e:c7:cc:2c:38:26:41:
         49:dc:0a:f7:06:e5:8f:0d:5c:43:6c:24:57:9d:d2:70:f8:2f:
         af:91:ad:0b:7f:f4:d5:2e:71:8b:48:6f:53:5b:19:2c:b4:9b:
         d6:8e:32:c9:0c:d5:d3:11:c8:b8:9c:ae:c2:22:65:1e:c1:c4:
         4a:02:31:44:0a:12:9c:b2:1e:fe:5e:9d:2e:90:d6:67:c8:29:
         0a:38:9f:ee:ac:0b:60:60:50:b2:8b:c8:c6:d4:a3:92:24:c5:
         07:00:02:4b:3b:37:92:bc:3a:d7:52:a8:67:09:e8:ea:1d:62:
         ed:64:d7:47:37:e7:be:dc:08:46:51:4e:23:cf:92:b4:0e:82:
         97:df:ff:b9:f0:4c:4a:5f:d7:76:5e:62:51:b4:ee:b3:8f:c3:
         07:68:65:94:e6:fa:b4:a5:e3:31:6a:02:c1:d1:66:c1:bc:9a:
         16:6f:a8:fa:1b:ca:2d:6f:ff:49:41:f9:f1:4e:fa:74:0f:92:
         43:ef:49:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UdVdJJfwEQXNqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
ZWQxNjRjNGMtZmMwMi00YTY5LTg4N2QtYzgyNThkNDRkMGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDxk0obDW4B9fHESjSAdgzPCVbhCDJNR/XC3
bB3gTtnKAjgJt6ITefsNWnVguWGa3dS1iuEgXvRUlKvAD07jCbWwIQjmIzT+2RMF
r0ISk3iebiHei+JP2bk3CtAL7cHLId8R8qggKLghDqtRIqddOcxkvETfZjYCYCor
RJV2TD7cup6gfhmrJzYDC6vQSi6gt9LH23YpwY64LMo5i6xCWdw3ozkt1tAYZRlk
7wq38fIqCCyXeONUWH0z7jKGXAP0uAMwFwuUVYiOJ6x+VICZUyNBmmIybPdnI0FI
YYwvYwdX/JbBbsU0IihkcM/KqhmR0BA0Gm0vOJzcBcjkeQcCxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOejUmXdqzpVUeGIo18HuTJZ1ZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZjZjOWRmMjktM2I0My0z
ZmFkLWIwNmEtNjE5YmJiNDdiNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDREH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAV0T4zpUbT0vb9xrcyP6jCKj+2QoCDPoj1lOInjv5t1/ZD2AKCCal9
8FgfB1a9BTHRznZxcSH6mZgGQcndVAZNTsfMLDgmQUncCvcG5Y8NXENsJFed0nD4
L6+RrQt/9NUucYtIb1NbGSy0m9aOMskM1dMRyLicrsIiZR7BxEoCMUQKEpyyHv5e
nS6Q1mfIKQo4n+6sC2BgULKLyMbUo5IkxQcAAks7N5K8OtdSqGcJ6OodYu1k10c3
577cCEZRTiPPkrQOgpff/7nwTEpf13ZeYlG07rOPwwdoZZTm+rSl4zFqAsHRZsG8
mhZvqPobyi1v/0lB+fFO+nQPkkPvSVI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:14 2026 by rpki-client