Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
File:                     1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa (raw, json)
Hash identifier:          Gqk95ewHiiNyfnP833jPkNmqVILthhKs/I5onOZxf5s=
Subject key identifier:   AB:AE:14:13:E3:72:F1:71:40:09:F5:70:3A:93:13:6D:D5:65:DE:FA
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F4328584C8476D486C07917C0808911E0
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     25875
IP address blocks:        69.165.96.0/20 maxlen: 24
                          208.88.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:d4:86:c0:79:17:c0:80:89:11:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=147d7d2a-dfa7-4c8b-881e-77e201221353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:c6:92:31:dc:c4:15:ba:b1:d3:48:60:9a:
                    55:73:5c:89:36:92:49:c1:09:e0:74:86:cc:dd:64:
                    66:d6:b7:75:34:28:55:97:7e:c4:b1:f2:07:02:e5:
                    c2:f1:e3:9b:54:80:e4:19:9e:ae:a5:c4:b0:d8:1e:
                    a3:14:5a:f9:e7:d8:00:da:54:9b:75:fd:b0:64:1f:
                    f6:29:ce:be:95:72:c0:ec:47:4f:bf:49:c7:49:47:
                    b8:48:ab:b6:8a:57:c2:80:eb:89:0a:b8:2f:24:a6:
                    46:5d:91:a7:35:81:fb:1e:72:27:94:e5:6c:16:8c:
                    92:ce:8f:4a:e2:93:28:7b:ae:ab:26:71:3d:32:dc:
                    05:9c:bf:d5:57:62:38:55:04:d7:25:16:fa:3d:f1:
                    ca:75:60:bc:1f:e2:46:26:d9:72:c7:7f:87:cb:b3:
                    38:e3:9c:05:f9:1b:49:40:f8:7c:8e:df:3c:bc:27:
                    5a:d9:b3:c1:bd:01:6a:0c:6c:5e:1d:38:d1:0f:7c:
                    71:ac:50:95:97:fd:2e:29:3f:62:b9:cc:d8:0c:3c:
                    9e:55:2d:6d:90:93:8e:9a:7b:c1:33:72:28:a2:4e:
                    bc:75:b7:34:0e:20:ef:c9:2a:20:cf:00:f7:0e:2d:
                    04:6c:ca:c4:3f:0d:2b:49:63:36:0b:14:b7:78:49:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AE:14:13:E3:72:F1:71:40:09:F5:70:3A:93:13:6D:D5:65:DE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/1ff0fc2a-4f27-3650-81ee-ba75839d6486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.96.0/20
                  208.88.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:9a:fc:33:24:72:92:7f:4c:9c:ec:68:80:cc:e8:05:3a:
         a7:8a:bd:9a:f1:35:71:c6:db:51:d9:7e:8b:25:54:3b:61:fd:
         1f:e1:14:bf:a9:5d:a0:41:87:06:6a:e0:02:fb:b0:ce:3c:c7:
         88:cb:94:e5:21:f2:68:c5:32:59:6d:20:c7:c1:a0:e4:3c:3f:
         45:6e:71:44:7f:1a:03:2c:82:7e:90:74:a8:54:c0:61:68:93:
         76:9b:f7:68:81:01:9b:d4:40:97:24:71:0e:49:ab:58:bc:68:
         ab:b0:50:13:03:57:26:64:d5:87:b0:c3:c1:40:ef:a6:96:90:
         be:59:f7:f0:77:be:44:16:1c:8c:2d:9a:d6:f3:35:4e:f0:47:
         94:3e:f3:b4:ad:30:a3:cc:61:c6:a7:23:9b:7d:3a:61:ff:c8:
         2d:b1:a1:30:53:f1:5e:f8:b6:a0:9f:35:67:f1:1e:79:de:16:
         4e:ee:73:09:8b:6b:6f:37:2f:af:b1:2d:f3:2b:8a:82:35:23:
         5b:a6:db:06:3c:01:f4:1e:dc:34:c2:53:27:7a:29:68:f6:41:
         bf:bf:f0:e7:44:7a:a8:bc:90:e4:65:43:f3:a9:6c:bf:13:19:
         1d:91:71:22:4f:fe:bc:99:fa:9a:c6:46:30:18:d3:8a:d1:e7:
         25:7f:b4:30
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyEdtSGwHkXwICJEeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkNjE4ZjktN2U5ZS00MzZjLTgwZDAtZDg3ZGQxYzBi
MmIwMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk
MTQ3ZDdkMmEtZGZhNy00YzhiLTg4MWUtNzdlMjAxMjIxMzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RLGkjHcxBW6sdNIYJpVc1yJNpJJwQngdIbM
3WRm1rd1NChVl37EsfIHAuXC8eObVIDkGZ6upcSw2B6jFFr559gA2lSbdf2wZB/2
Kc6+lXLA7EdPv0nHSUe4SKu2ilfCgOuJCrgvJKZGXZGnNYH7HnInlOVsFoySzo9K
4pMoe66rJnE9MtwFnL/VV2I4VQTXJRb6PfHKdWC8H+JGJtlyx3+Hy7M445wF+RtJ
QPh8jt88vCda2bPBvQFqDGxeHTjRD3xxrFCVl/0uKT9iuczYDDyeVS1tkJOOmnvB
M3Iook68dbc0DiDvySogzwD3Di0EbMrEPw0rSWM2CxS3eEkJowIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKuuFBPjcvFxQAn1cDqTE23VZd76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2
MThmOS03ZTllLTQzNmMtODBkMC1kODdkZDFjMGIyYjAvMWZmMGZjMmEtNGYyNy0z
NjUwLTgxZWUtYmE3NTgzOWQ2NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGVkNjE4ZjktN2U5ZS00MzZjLTgw
ZDAtZDg3ZGQxYzBiMmIwLzhlZDYxOGY5LTdlOWUtNDM2Yy04MGQwLWQ4N2RkMWMw
YjJiMC5jcmwwHwYDVR0jBBgwFoAULGY7IO/SYBE5jZ7mwAErOgumzV8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2MThmOS03ZTllLTQzNmMtODBkMC1kODdk
ZDFjMGIyYjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERaVgAwQD
0FiwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAG+ImvwzJHKSf0yc7GiAzOgFOqeKvZrxNXHG21HZfoslVDth
/R/hFL+pXaBBhwZq4AL7sM48x4jLlOUh8mjFMlltIMfBoOQ8P0VucUR/GgMsgn6Q
dKhUwGFok3ab92iBAZvUQJckcQ5Jq1i8aKuwUBMDVyZk1Yeww8FA76aWkL5Z9/B3
vkQWHIwtmtbzNU7wR5Q+87StMKPMYcanI5t9OmH/yC2xoTBT8V74tqCfNWfxHnne
Fk7ucwmLa283L6+xLfMrioI1I1um2wY8AfQe3DTCUyd6KWj2Qb+/8OdEeqi8kORl
Q/OpbL8TGR2RcSJP/ryZ+prGRjAY04rR5yV/tDA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:33 2026 by rpki-client