Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
File:                     2005afc5-6398-3704-ae6d-145db2a4d7af.roa (raw, json)
Hash identifier:          I9fNgwdBPZFFKDvhlICU5KBr/jMdweGvBGxJU3SxwTw=
Subject key identifier:   1A:24:2F:4B:FB:DF:31:80:71:BE:FC:39:C6:62:A3:7D:2C:99:6B:9D
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584CD2A1EE8BCB241A06BFF0DC00
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa
Signing time:             Wed 11 Feb 2026 02:00:32 +0000
ROA not before:           Wed 11 Feb 2026 02:00:32 +0000
ROA not after:            Tue 12 May 2026 01:00:32 +0000
asID:                     16504
IP address blocks:        143.170.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:a1:ee:8b:cb:24:1a:06:bf:f0:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Feb 11 02:00:32 2026 GMT
            Not After : May 12 01:00:32 2026 GMT
        Subject: CN=94740701-8eef-4acd-9a32-0c90320c6e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:98:63:af:19:e2:7e:8f:38:c2:ea:c1:fb:
                    2f:ff:e6:39:2d:80:95:c6:ed:48:f5:ca:0f:70:ee:
                    ac:98:ef:9c:62:76:7e:eb:b5:ee:c6:d2:eb:3f:5c:
                    37:a9:a6:e2:46:7b:f6:f9:0b:7b:96:0d:5e:0f:fb:
                    c9:21:46:0a:aa:1c:b9:cf:b1:32:1d:84:66:d7:1e:
                    c3:00:89:57:cc:08:43:c7:f0:2a:b9:c4:27:fd:59:
                    ab:29:a0:31:8d:4f:a0:78:b0:71:37:ae:63:5f:59:
                    2a:63:e2:fd:86:64:fa:7b:e9:7e:eb:23:cd:4c:6c:
                    fa:3d:90:47:e1:4e:88:34:b7:83:fb:7c:b0:c2:62:
                    f5:59:02:4d:a9:83:17:5f:de:dc:9c:af:89:2a:4a:
                    10:5b:60:67:fd:72:00:7d:d4:31:38:6c:79:5a:91:
                    0f:a5:a3:0f:83:d5:ce:f1:7f:f9:9d:d8:52:79:66:
                    82:02:f0:11:61:02:7f:5e:0a:80:e1:ff:e0:9e:0d:
                    83:9b:6e:55:6c:3e:46:97:50:83:ba:78:03:ac:54:
                    29:4d:7a:25:57:e5:fe:14:71:2b:73:01:97:75:8c:
                    21:e9:cd:ae:06:62:d4:64:33:af:e3:c8:4b:d5:b0:
                    c8:5a:dd:88:ec:e3:a3:60:2a:af:dd:16:e2:85:56:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:2F:4B:FB:DF:31:80:71:BE:FC:39:C6:62:A3:7D:2C:99:6B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/2005afc5-6398-3704-ae6d-145db2a4d7af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:d9:06:f0:b0:76:17:20:0b:32:62:40:a0:d8:ca:d6:c2:
         6b:8a:19:23:12:d6:49:20:4f:05:81:ac:76:f8:42:83:0a:f7:
         86:9a:d9:d2:8b:fd:09:83:69:60:49:8f:cc:40:f5:22:bd:fc:
         09:1e:7e:8d:7e:c8:9b:a4:8d:87:23:c5:30:ca:65:81:e1:9a:
         67:3c:73:a7:9d:6c:1a:c5:dc:4b:78:68:b9:20:3c:14:bf:88:
         6f:33:3d:bb:35:f1:4f:a9:a1:af:78:b4:61:e9:66:d1:f1:aa:
         e3:58:e1:f9:01:92:85:76:22:da:91:49:1c:be:0c:15:08:f8:
         83:75:43:80:bd:97:1d:1b:6e:4e:b6:95:f9:cf:ea:2f:4f:27:
         b5:df:fc:b1:d7:c2:13:26:85:d4:2f:03:8e:1c:eb:cf:76:68:
         bf:0f:3b:fe:38:d8:dc:21:14:14:47:8e:dd:70:4c:2f:50:3a:
         2d:f8:19:ad:46:9d:a0:09:c5:2a:36:c7:8b:e9:4a:cf:c8:0c:
         48:a6:c2:a3:32:ac:c2:b1:3a:b2:46:4c:b8:9f:33:b3:d7:56:
         33:be:82:35:ee:27:c6:59:81:e4:6a:90:ab:79:a2:34:fd:b5:
         8b:22:fc:6f:1d:07:f8:f6:60:55:92:9b:08:0f:b4:d3:9c:31:
         da:60:ed:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzSoe6LyyQaBr/w3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkZTkyNDktZjcwNy00MzkyLWI0M2YtZDQwNmRmYjIw
YWVlMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk
OTQ3NDA3MDEtOGVlZi00YWNkLTlhMzItMGM5MDMyMGM2ZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvGYY68Z4n6POMLqwfsv/+Y5LYCVxu1I9coP
cO6smO+cYnZ+67XuxtLrP1w3qabiRnv2+Qt7lg1eD/vJIUYKqhy5z7EyHYRm1x7D
AIlXzAhDx/AqucQn/VmrKaAxjU+geLBxN65jX1kqY+L9hmT6e+l+6yPNTGz6PZBH
4U6INLeD+3ywwmL1WQJNqYMXX97cnK+JKkoQW2Bn/XIAfdQxOGx5WpEPpaMPg9XO
8X/5ndhSeWaCAvARYQJ/XgqA4f/gng2Dm25VbD5Gl1CDungDrFQpTXolV+X+FHEr
cwGXdYwh6c2uBmLUZDOv48hL1bDIWt2I7OOjYCqv3RbihVbmCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBokL0v73zGAcb78OcZio30smWudMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRl
OTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2ZGZiMjBhZWUvMjAwNWFmYzUtNjM5OC0z
NzA0LWFlNmQtMTQ1ZGIyYTRkN2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjVkZTkyNDktZjcwNy00MzkyLWI0
M2YtZDQwNmRmYjIwYWVlL2I1ZGU5MjQ5LWY3MDctNDM5Mi1iNDNmLWQ0MDZkZmIy
MGFlZS5jcmwwHwYDVR0jBBgwFoAUBQwgTZ1GgdH5HArYCUuvUKm259UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNWRlOTI0OS1mNzA3LTQzOTItYjQzZi1kNDA2
ZGZiMjBhZWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj6owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXgPZBvCwdhcgCzJiQKDYytbCa4oZIxLWSSBPBYGsdvhCgwr3hprZ0ov9
CYNpYEmPzED1Ir38CR5+jX7Im6SNhyPFMMplgeGaZzxzp51sGsXcS3houSA8FL+I
bzM9uzXxT6mhr3i0Yelm0fGq41jh+QGShXYi2pFJHL4MFQj4g3VDgL2XHRtuTraV
+c/qL08ntd/8sdfCEyaF1C8Djhzrz3Zovw87/jjY3CEUFEeO3XBML1A6LfgZrUad
oAnFKjbHi+lKz8gMSKbCozKswrE6skZMuJ8zs9dWM76CNe4nxlmB5GqQq3miNP21
iyL8bx0H+PZgVZKbCA+005wx2mDt6Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:39 2026 by rpki-client