Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/003e0607-ecb4-3428-b394-2929e48d5659.roa
File:                     003e0607-ecb4-3428-b394-2929e48d5659.roa (raw, json)
Hash identifier:          B30LRq8WIkBBVtR6UbebG9dOCt3iyYlb3L9cgmhb9cI=
Subject key identifier:   FD:8A:50:27:75:F8:84:36:C0:FA:FB:A0:31:E1:71:CB:D1:CC:73:C0
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584CFC822BEC393DBFD149DC7000
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/003e0607-ecb4-3428-b394-2929e48d5659.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     23280
IP address blocks:        208.83.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:2b:ec:39:3d:bf:d1:49:dc:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=6b7f7721-81d2-441e-9a79-8c9b9938cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:2f:16:7b:ec:d6:ba:03:5a:ac:69:54:3c:
                    fc:5b:8e:02:ac:03:9b:9f:a2:3a:13:bb:00:3d:9d:
                    54:47:c7:5a:9d:9a:a3:1a:5c:74:c1:3f:47:f9:74:
                    28:61:4d:72:bf:19:56:48:94:2f:36:c5:d8:41:71:
                    76:a0:bf:f2:97:02:55:ae:97:de:76:28:74:94:53:
                    6b:1a:9f:b9:9d:3c:42:0d:20:a8:57:54:67:4f:df:
                    ad:bf:cd:a2:71:20:9b:1d:37:14:8e:75:24:34:61:
                    e5:3e:59:14:ba:cf:ce:d0:f6:bf:5e:22:54:9c:7b:
                    e8:45:d8:cc:fe:d9:e3:e8:ae:f4:34:5e:85:00:ca:
                    9b:11:63:8d:0f:61:01:e3:d6:6e:6f:fa:4f:8c:df:
                    34:f2:f6:d2:6f:2d:cc:43:ff:c0:5c:52:fb:f9:6c:
                    6d:44:b7:ee:37:4c:ab:b0:70:92:97:c0:d4:5d:c7:
                    b9:48:64:0b:73:b8:a0:7d:31:d3:46:6d:fd:7a:e6:
                    2e:c0:66:ae:9a:3f:db:f8:72:d9:f9:65:4c:7f:cd:
                    40:59:69:63:bb:4a:bc:2c:b0:8e:3e:3c:d4:19:fb:
                    f9:b8:c6:ba:cc:29:28:ea:1e:f1:8b:dc:32:e2:ab:
                    91:23:6f:58:c7:21:18:56:50:c2:9d:dd:45:6c:d6:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8A:50:27:75:F8:84:36:C0:FA:FB:A0:31:E1:71:CB:D1:CC:73:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/003e0607-ecb4-3428-b394-2929e48d5659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:7e:28:48:77:27:fc:f4:69:f4:20:a3:fc:f6:d8:86:72:
         9d:20:c7:f6:d6:95:5c:24:ad:57:b8:65:01:7a:c9:b2:c0:85:
         54:ca:8d:e7:2b:4f:f7:cb:5d:14:af:08:e1:33:c7:32:4c:d3:
         d0:c5:67:a1:f9:de:41:bc:33:d3:0f:ed:8b:be:64:d0:ba:0d:
         02:9b:e8:34:60:09:a2:4a:f6:c2:a4:a2:cd:f2:b9:36:ad:6c:
         92:70:30:14:eb:3e:54:fa:5e:8f:96:df:98:c4:1f:44:20:fa:
         5a:dd:29:e1:e7:4e:d0:e1:85:48:8b:9d:c2:e8:38:9a:01:4d:
         8b:32:da:d0:73:82:59:b1:69:84:19:8b:76:e9:9a:4f:57:97:
         be:ba:34:7d:74:ac:3f:4b:e8:e6:05:75:db:a5:d8:b4:db:95:
         75:e1:cf:73:e1:b6:8c:94:93:b4:61:f8:20:94:7f:a6:39:c6:
         0f:f3:20:2f:25:6e:cd:bf:34:2e:57:df:72:6d:83:4a:3c:dd:
         4e:40:51:5a:57:85:3a:07:b9:d5:a1:2b:9e:c7:f0:1e:63:8b:
         d0:c9:90:d6:ca:c1:54:2f:e4:68:e9:98:88:08:32:42:15:eb:
         5a:95:69:c5:d5:e8:68:8c:aa:3d:0e:b3:97:b6:b8:de:7a:c3:
         79:38:91:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8givsOT2/0UnccAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk
NmI3Zjc3MjEtODFkMi00NDFlLTlhNzktOGM5Yjk5MzhjZjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUkvFnvs1roDWqxpVDz8W44CrAObn6I6E7sA
PZ1UR8danZqjGlx0wT9H+XQoYU1yvxlWSJQvNsXYQXF2oL/ylwJVrpfedih0lFNr
Gp+5nTxCDSCoV1RnT9+tv82icSCbHTcUjnUkNGHlPlkUus/O0Pa/XiJUnHvoRdjM
/tnj6K70NF6FAMqbEWOND2EB49Zub/pPjN808vbSby3MQ//AXFL7+WxtRLfuN0yr
sHCSl8DUXce5SGQLc7igfTHTRm39euYuwGaumj/b+HLZ+WVMf81AWWlju0q8LLCO
PjzUGfv5uMa6zCko6h7xi9wy4quRI29YxyEYVlDCnd1FbNb0PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2KUCd1+IQ2wPr7oDHhccvRzHPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMDAzZTA2MDctZWNiNC0z
NDI4LWIzOTQtMjkyOWU0OGQ1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FM9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqFfihIdyf89Gn0IKP89tiGcp0gx/bWlVwkrVe4ZQF6ybLAhVTKjecr
T/fLXRSvCOEzxzJM09DFZ6H53kG8M9MP7Yu+ZNC6DQKb6DRgCaJK9sKkos3yuTat
bJJwMBTrPlT6Xo+W35jEH0Qg+lrdKeHnTtDhhUiLncLoOJoBTYsy2tBzglmxaYQZ
i3bpmk9Xl766NH10rD9L6OYFddul2LTblXXhz3PhtoyUk7Rh+CCUf6Y5xg/zIC8l
bs2/NC5X33Jtg0o83U5AUVpXhToHudWhK57H8B5ji9DJkNbKwVQv5GjpmIgIMkIV
61qVacXV6GiMqj0Os5e2uN56w3k4kUw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:57 2026 by rpki-client