Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa
File:                     0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa (raw, json)
Hash identifier:          uglduurQdas8Bc7+5MBhAQkxCSvjBCVkwiMuEQ14ptQ=
Subject key identifier:   8E:45:08:FD:8D:91:40:3D:5C:AA:59:F4:33:E8:63:95:2F:B3:00:B3
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584CEE458769D513517D664D1B20
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa
Signing time:             Fri 20 Feb 2026 23:37:07 +0000
ROA not before:           Fri 20 Feb 2026 23:37:07 +0000
ROA not after:            Thu 21 May 2026 22:37:07 +0000
asID:                     54941
IP address blocks:        199.216.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:45:87:69:d5:13:51:7d:66:4d:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Feb 20 23:37:07 2026 GMT
            Not After : May 21 22:37:07 2026 GMT
        Subject: CN=b6c9b5b5-f981-4e46-be55-d2ced8fffc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:15:ec:e8:0b:5a:c2:29:36:40:f8:1a:9f:6b:
                    9a:a8:09:d1:a6:6b:85:9d:9f:ae:40:88:5e:fc:62:
                    ba:36:72:1c:ab:73:95:2d:7e:32:d0:87:da:3b:d5:
                    5f:f1:fa:68:d0:81:51:0e:49:86:86:3d:18:4e:53:
                    a8:57:17:a7:db:30:ad:42:d1:aa:85:a4:73:09:2a:
                    2c:4b:c4:5a:c1:7a:da:1f:57:7f:5f:93:80:87:e1:
                    91:8f:d8:80:3c:44:4e:33:da:e6:1d:a3:64:4c:23:
                    30:75:84:e0:a0:f1:11:ef:dd:af:80:62:7a:c2:81:
                    75:a7:43:f2:d6:0d:0b:da:97:09:57:53:e1:2a:b4:
                    83:6f:ff:14:ba:8b:ec:c0:01:2d:7e:87:29:80:86:
                    55:d5:53:f1:22:04:e0:95:fc:96:76:c4:19:ed:bd:
                    b6:c4:38:88:7e:65:ec:dd:bf:2a:b1:f9:f2:ff:0c:
                    37:b1:41:51:df:ce:24:99:49:d9:6a:d5:a6:e7:41:
                    a8:b2:a3:d1:e0:c9:e8:28:9f:33:3c:04:d1:fc:7a:
                    a3:d7:63:e1:5d:a3:f4:8b:4d:63:d7:f5:07:22:57:
                    a3:86:2a:5c:e0:40:c9:5b:3c:dc:03:24:2d:08:0b:
                    a5:d9:c1:e4:75:77:37:09:72:60:ff:30:32:bd:67:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:45:08:FD:8D:91:40:3D:5C:AA:59:F4:33:E8:63:95:2F:B3:00:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/0e5e71cb-d477-3691-8e8a-0345ecd197fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bb:7f:66:f6:d5:f6:18:70:25:a5:9c:1e:95:fb:f3:cd:4a:
         9c:b2:49:aa:74:7b:40:49:e3:c6:f2:e7:02:26:d6:14:bf:5d:
         2b:e6:2d:42:86:c1:9f:8a:bb:14:b6:39:ad:8c:11:4b:c3:fa:
         d4:fd:42:a5:eb:12:45:a3:bd:2b:86:64:4f:5d:1a:ee:66:0d:
         49:05:b4:08:d4:76:5e:38:41:48:4d:6a:4f:53:cb:2b:36:50:
         da:db:f4:52:4c:a2:00:ab:bc:53:a7:3b:9a:87:e6:02:96:e1:
         f9:45:e3:32:10:a7:f2:ce:04:64:36:d6:8e:cc:33:c3:83:19:
         86:f2:d5:f7:3c:0d:54:94:ea:00:37:84:67:b3:a1:db:fb:bc:
         27:14:28:aa:43:82:06:b9:ea:ad:84:94:f6:e4:df:72:c2:4a:
         4d:d2:f6:e5:4a:ff:db:b3:11:17:3c:73:91:b6:43:2f:aa:62:
         07:53:9d:d9:9d:20:be:12:33:4c:37:54:05:9f:af:9b:65:48:
         9c:bd:4c:d0:bd:cc:f5:35:15:82:49:78:a5:9e:da:4d:93:cf:
         ac:1d:a3:2a:f0:5d:68:24:a5:7e:85:08:77:42:34:22:65:e0:
         78:57:28:3f:4e:4d:3a:a1:c5:f4:f5:03:a6:a1:02:01:d2:2b:
         24:f8:a7:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzuRYdp1RNRfWZNGyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDIyMDIzMzcwN1oXDTI2MDUyMTIyMzcwN1owLzEtMCsGA1UEAxMk
YjZjOWI1YjUtZjk4MS00ZTQ2LWJlNTUtZDJjZWQ4ZmZmYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxXs6Atawik2QPgan2uaqAnRpmuFnZ+uQIhe
/GK6NnIcq3OVLX4y0IfaO9Vf8fpo0IFRDkmGhj0YTlOoVxen2zCtQtGqhaRzCSos
S8RawXraH1d/X5OAh+GRj9iAPEROM9rmHaNkTCMwdYTgoPER792vgGJ6woF1p0Py
1g0L2pcJV1PhKrSDb/8UuovswAEtfocpgIZV1VPxIgTglfyWdsQZ7b22xDiIfmXs
3b8qsfny/ww3sUFR384kmUnZatWm50GosqPR4MnoKJ8zPATR/Hqj12PhXaP0i01j
1/UHIlejhipc4EDJWzzcAyQtCAul2cHkdXc3CXJg/zAyvWeHlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI5FCP2NkUA9XKpZ9DPoY5UvswCzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMGU1ZTcxY2ItZDQ3Ny0z
NjkxLThlOGEtMDM0NWVjZDE5N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9iWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH67f2b21fYYcCWlnB6V+/PNSpyySap0e0BJ48by5wIm1hS/XSvmLUKG
wZ+KuxS2Oa2MEUvD+tT9QqXrEkWjvSuGZE9dGu5mDUkFtAjUdl44QUhNak9Tyys2
UNrb9FJMogCrvFOnO5qH5gKW4flF4zIQp/LOBGQ21o7MM8ODGYby1fc8DVSU6gA3
hGezodv7vCcUKKpDgga56q2ElPbk33LCSk3S9uVK/9uzERc8c5G2Qy+qYgdTndmd
IL4SM0w3VAWfr5tlSJy9TNC9zPU1FYJJeKWe2k2Tz6wdoyrwXWgkpX6FCHdCNCJl
4HhXKD9OTTqhxfT1A6ahAgHSKyT4p5s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:39 2026 by rpki-client