Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/768d7434-14ec-3257-b7e1-71e33e25c59f.roa
File:                     768d7434-14ec-3257-b7e1-71e33e25c59f.roa (raw, json)
Hash identifier:          1c2DpbcVEGclpNMmNKUyH9MOplb4rFVB2xPHx8F75G4=
Subject key identifier:   F6:EF:EF:9D:4A:DA:FA:1D:1B:2D:F4:C6:C1:E2:1C:E7:43:1E:AC:29
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CCBA767446A7790C0435BB600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/768d7434-14ec-3257-b7e1-71e33e25c59f.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     21769
IP address blocks:        67.203.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:67:44:6a:77:90:c0:43:5b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=e89f4e11-6974-4548-a11c-47819d60489d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:91:1c:4d:f5:8c:6a:28:e4:60:2e:6c:eb:
                    ac:b4:3e:9c:e1:de:e3:e4:b9:4c:3a:56:6c:05:29:
                    c1:71:cd:dd:c2:44:47:61:b0:b5:4f:8c:52:7b:25:
                    7a:1f:86:dd:15:9d:e2:c1:f9:fb:34:98:9c:af:aa:
                    ba:9f:bd:df:3b:01:ca:ae:04:a6:f2:07:17:de:96:
                    55:51:3b:5b:50:bc:46:39:61:ec:27:6b:b1:3c:91:
                    ca:37:47:5b:31:f9:81:c7:fa:3e:dd:6d:d2:a6:59:
                    81:af:03:e3:a9:1e:e8:db:07:0c:5b:60:fb:30:65:
                    70:94:75:bb:92:3e:ee:10:f4:19:21:f3:90:d5:90:
                    48:37:3c:7b:21:5a:ef:c8:2b:7d:3f:59:2b:c4:e9:
                    91:2a:e2:ea:ab:e9:86:5b:ae:f0:77:46:a6:00:96:
                    0d:09:d0:e1:e0:b1:3d:00:cc:58:fa:2c:a1:3b:41:
                    3a:67:fe:e5:18:77:bf:71:d6:69:5a:d0:31:4b:7e:
                    15:24:a0:5c:10:21:2d:1e:22:1e:42:f8:3b:0a:67:
                    80:5d:fa:b7:8c:9e:c3:2b:5a:78:b1:6f:b8:71:21:
                    f7:8d:5a:b9:95:3f:4f:87:01:83:02:55:c8:d0:7c:
                    26:f2:0d:4b:4a:8a:22:65:c8:a1:75:6e:16:98:97:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EF:EF:9D:4A:DA:FA:1D:1B:2D:F4:C6:C1:E2:1C:E7:43:1E:AC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/768d7434-14ec-3257-b7e1-71e33e25c59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:65:14:75:d2:56:d4:20:85:c4:3b:5f:a0:ae:0a:81:b1:7f:
         75:fe:ce:ec:dd:5d:97:00:fb:b5:98:ff:45:9b:e6:e1:9c:48:
         59:d7:c6:40:9b:75:de:f8:e1:a2:f6:c8:9d:6f:b2:31:eb:f0:
         61:c3:b9:c7:ed:ab:f0:e4:5e:a1:22:b7:9a:6f:62:da:bd:55:
         92:70:ae:60:d3:a1:be:23:57:17:2c:11:a8:6c:65:12:77:4e:
         36:81:29:b1:2f:c7:27:33:c3:83:30:1b:5d:4f:3a:dc:f1:3f:
         ea:a6:64:e6:ee:b4:eb:e3:cb:18:d7:82:63:db:3e:28:3d:e2:
         9a:06:53:b9:ae:dd:13:e5:d3:95:1d:b0:85:53:44:14:65:7d:
         81:fc:ca:0a:22:3d:b5:75:28:a5:8a:eb:14:5c:3d:08:71:8d:
         c4:56:07:a2:a9:0e:70:fe:f9:bc:76:ff:1d:66:a4:b9:96:4e:
         99:fc:03:67:9f:14:4c:03:b9:2a:ac:a7:7b:ed:9e:87:b2:e4:
         ef:0a:9b:32:4f:29:26:e8:e9:9e:8a:e7:dc:e0:14:c7:49:08:
         33:0e:8d:77:79:65:66:d9:16:72:3c:d9:77:90:cf:1a:5c:ec:
         24:e3:86:26:2d:35:57:bf:05:bf:ab:b5:25:7b:ef:d0:51:b5:
         4f:4b:76:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp2dEaneQwENbtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
ZTg5ZjRlMTEtNjk3NC00NTQ4LWExMWMtNDc4MTlkNjA0ODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2qRHE31jGoo5GAubOustD6c4d7j5LlMOlZs
BSnBcc3dwkRHYbC1T4xSeyV6H4bdFZ3iwfn7NJicr6q6n73fOwHKrgSm8gcX3pZV
UTtbULxGOWHsJ2uxPJHKN0dbMfmBx/o+3W3SplmBrwPjqR7o2wcMW2D7MGVwlHW7
kj7uEPQZIfOQ1ZBINzx7IVrvyCt9P1krxOmRKuLqq+mGW67wd0amAJYNCdDh4LE9
AMxY+iyhO0E6Z/7lGHe/cdZpWtAxS34VJKBcECEtHiIeQvg7CmeAXfq3jJ7DK1p4
sW+4cSH3jVq5lT9PhwGDAlXI0Hwm8g1LSooiZcihdW4WmJeP6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbv751K2vodGy30xsHiHOdDHqwpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzY4ZDc0MzQtMTRlYy0z
MjU3LWI3ZTEtNzFlMzNlMjVjNTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ8swMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBlFHXSVtQghcQ7X6CuCoGxf3X+zuzdXZcA+7WY/0Wb5uGcSFnXxkCb
dd744aL2yJ1vsjHr8GHDucftq/DkXqEit5pvYtq9VZJwrmDTob4jVxcsEahsZRJ3
TjaBKbEvxyczw4MwG11POtzxP+qmZObutOvjyxjXgmPbPig94poGU7mu3RPl05Ud
sIVTRBRlfYH8ygoiPbV1KKWK6xRcPQhxjcRWB6KpDnD++bx2/x1mpLmWTpn8A2ef
FEwDuSqsp3vtnoey5O8KmzJPKSbo6Z6K59zgFMdJCDMOjXd5ZWbZFnI82XeQzxpc
7CTjhiYtNVe/Bb+rtSV779BRtU9Ldlo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:24 2026 by rpki-client