Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa
File:                     1ce20416-7f37-33f9-9a62-528b71678539.roa (raw, json)
Hash identifier:          7ZRW5z9UVBFHHGwDDVsnGc0LJlKs2R28wRPvuLDUTS0=
Subject key identifier:   2F:CA:91:B7:14:24:8C:B7:46:F2:37:76:05:03:80:90:19:24:0D:9B
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584CBDB1FAF30C139FDDB0029080
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     7018
IP address blocks:        144.208.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:fa:f3:0c:13:9f:dd:b0:02:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=445b0d0e-4940-42dc-abd3-e43bcf47d242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:3a:19:1a:aa:27:be:34:c9:07:e3:52:43:
                    f1:d6:83:e3:22:d9:25:8f:e0:07:9d:1c:82:f7:92:
                    a3:10:0c:f9:e3:f6:05:84:29:c8:86:8b:75:39:b4:
                    f1:96:7f:f8:bf:fe:ec:1c:b1:d7:c3:94:ac:f1:b4:
                    99:74:90:5a:83:3d:2f:4f:9e:e5:e7:fb:a0:8d:77:
                    25:d2:c3:31:8f:00:13:0a:c6:e9:ee:a3:64:10:06:
                    d8:7b:bb:e7:3d:45:00:fe:c7:ef:93:59:91:75:15:
                    e6:b1:67:db:5d:01:e9:18:ef:bd:17:39:74:1a:b9:
                    f7:fa:bd:6a:7f:fa:4e:7c:cd:21:59:76:e5:79:31:
                    d7:4e:cf:68:61:95:e8:ac:79:74:50:2c:19:ba:b7:
                    84:80:f9:f4:e2:c2:ac:88:4a:71:69:ab:a8:4a:b7:
                    33:8d:47:c4:ec:0f:74:a4:7b:11:ac:04:3c:90:e8:
                    0f:a7:71:42:9b:59:bb:a3:75:69:69:32:01:de:0a:
                    2b:b9:1e:5c:4f:8b:c0:dc:3f:89:35:e0:d9:6d:df:
                    02:35:e8:dd:15:47:85:e3:fe:7a:cb:7a:5a:73:2e:
                    25:9a:b0:b0:16:5c:20:2a:10:a7:16:73:74:96:f8:
                    2a:5f:94:b2:e2:8d:11:ee:a0:ae:4d:3f:ed:d1:eb:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:91:B7:14:24:8C:B7:46:F2:37:76:05:03:80:90:19:24:0D:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1ce20416-7f37-33f9-9a62-528b71678539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:45:e8:d5:1b:e6:2f:8a:81:77:71:45:cd:01:22:26:54:
         22:54:d9:c3:c8:16:05:1f:1f:bb:86:02:bf:b8:6f:0a:28:ae:
         41:76:cd:58:4c:e0:6a:97:f6:c4:a7:c0:be:c0:e8:6a:73:83:
         92:65:fa:97:85:88:83:9f:20:12:1c:54:03:0b:3f:3f:8a:3b:
         a8:1f:22:fa:3b:c2:e9:4d:4d:14:46:48:10:fb:eb:f4:fc:a8:
         49:35:64:0e:ae:0e:a6:8b:a9:89:0e:e5:49:f4:d6:8c:d3:75:
         2f:83:74:04:77:9e:fa:6c:6f:12:72:a0:f4:e1:b5:75:59:ed:
         65:67:14:e8:5a:91:53:10:41:80:35:83:58:ec:11:aa:76:1a:
         df:45:11:e9:f5:bb:7b:45:06:fd:1f:5a:ff:b7:e9:71:4f:91:
         bf:c0:68:d1:db:f0:7d:98:13:72:bd:8d:18:0c:7b:0b:8e:ab:
         95:f4:7f:c6:a4:88:51:2e:3e:bb:df:74:43:ab:eb:83:fc:d0:
         89:df:1e:56:9f:39:70:71:b5:e1:2d:65:fb:06:82:fc:81:c0:
         fc:e5:f5:98:47:69:e0:03:8a:2a:dc:2d:59:b9:23:da:16:b3:
         41:b5:af:68:12:02:9c:4c:30:19:0d:85:63:78:42:ef:71:29:
         73:a8:7f:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sfrzDBOf3bACkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
NDQ1YjBkMGUtNDk0MC00MmRjLWFiZDMtZTQzYmNmNDdkMjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobo6GRqqJ740yQfjUkPx1oPjItklj+AHnRyC
95KjEAz54/YFhCnIhot1ObTxln/4v/7sHLHXw5Ss8bSZdJBagz0vT57l5/ugjXcl
0sMxjwATCsbp7qNkEAbYe7vnPUUA/sfvk1mRdRXmsWfbXQHpGO+9Fzl0Grn3+r1q
f/pOfM0hWXbleTHXTs9oYZXorHl0UCwZureEgPn04sKsiEpxaauoSrczjUfE7A90
pHsRrAQ8kOgPp3FCm1m7o3VpaTIB3goruR5cT4vA3D+JNeDZbd8CNejdFUeF4/56
y3pacy4lmrCwFlwgKhCnFnN0lvgqX5Sy4o0R7qCuTT/t0et23wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/KkbcUJIy3RvI3dgUDgJAZJA2bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMWNlMjA0MTYtN2YzNy0z
M2Y5LTlhNjItNTI4YjcxNjc4NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHXJRejVG+YvioF3cUXNASImVCJU2cPIFgUfH7uGAr+4bwoorkF2zVhM
4GqX9sSnwL7A6Gpzg5Jl+peFiIOfIBIcVAMLPz+KO6gfIvo7wulNTRRGSBD76/T8
qEk1ZA6uDqaLqYkO5Un01ozTdS+DdAR3nvpsbxJyoPThtXVZ7WVnFOhakVMQQYA1
g1jsEap2Gt9FEen1u3tFBv0fWv+36XFPkb/AaNHb8H2YE3K9jRgMewuOq5X0f8ak
iFEuPrvfdEOr64P80InfHlafOXBxteEtZfsGgvyBwPzl9ZhHaeADiircLVm5I9oW
s0G1r2gSApxMMBkNhWN4Qu9xKXOof/c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:27 2026 by rpki-client