Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1fa812d6-2ffb-312e-aee1-c33c09d5c40f.roa
File:                     1fa812d6-2ffb-312e-aee1-c33c09d5c40f.roa (raw, json)
Hash identifier:          ocn7X+eZyo3S3DbDuzwFHCYvkCuPxe4PJfjCasx8kFM=
Subject key identifier:   62:0D:06:A2:EC:9F:65:38:DF:82:C5:0D:CE:25:AD:7F:4B:F2:4D:71
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CF6ECC36ACB6744788F13CF40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1fa812d6-2ffb-312e-aee1-c33c09d5c40f.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     268695
IP address blocks:        204.157.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:c3:6a:cb:67:44:78:8f:13:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=8b9452da-02cb-473a-bd1c-e277254115f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ec:4c:0b:77:b3:8f:b4:1d:65:9a:ad:83:bb:
                    1b:7d:60:7a:41:0b:25:e7:75:56:5f:b8:f0:27:e0:
                    88:36:18:00:ac:c8:f1:c4:3d:8f:00:8b:21:e1:d8:
                    79:aa:4a:ff:f7:9c:3d:0d:a3:a1:c8:f2:e1:40:64:
                    a2:67:a4:20:9e:88:6c:ce:ad:87:3c:21:5f:1a:c5:
                    18:17:88:76:e9:b3:67:9b:79:fe:87:ba:aa:3a:ab:
                    1d:50:c1:7a:48:a8:e6:c0:80:3b:8f:0c:a9:01:63:
                    f7:93:86:a6:09:4c:66:59:4e:c4:32:07:de:b3:85:
                    ee:9f:a9:bc:ce:a2:cd:ff:09:dc:fb:24:43:f0:39:
                    fc:6a:80:91:a0:d1:4c:39:c0:19:95:ba:0d:ec:65:
                    ed:7b:95:39:9e:19:18:36:ec:eb:c0:72:8f:fd:56:
                    3c:e0:ce:f7:7f:ac:c6:fb:3f:c7:a7:63:75:40:31:
                    71:d1:9e:97:79:41:df:b7:fd:14:2a:43:89:3a:11:
                    d9:b6:0d:2f:22:50:cd:9a:94:ad:8d:35:aa:8e:24:
                    4a:2c:f9:52:c7:2c:90:7a:f7:e0:7c:05:62:09:66:
                    dd:b4:41:5f:8e:3d:a0:d4:ec:8d:67:f9:fe:a3:00:
                    28:5a:3e:b6:cd:b7:88:99:73:3b:d7:f1:96:e4:b5:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0D:06:A2:EC:9F:65:38:DF:82:C5:0D:CE:25:AD:7F:4B:F2:4D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1fa812d6-2ffb-312e-aee1-c33c09d5c40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.157.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:21:43:07:e0:8f:cf:0d:7d:12:44:4a:b3:9a:85:83:5e:ac:
         b0:4a:20:3d:45:69:9f:b4:b7:48:a1:e4:d3:f5:1a:fa:c6:8a:
         ae:91:11:fa:cd:bf:f0:87:26:0a:af:41:eb:e8:9b:77:13:5b:
         30:f1:e7:ee:02:fe:26:a5:95:14:36:0f:c9:39:2b:76:ab:ad:
         76:cf:cd:3b:ca:57:2c:c7:7a:cb:a1:20:0d:79:0d:1a:44:d5:
         2f:1f:13:9c:21:7d:62:f6:00:3c:d2:7f:fa:6c:24:d7:35:aa:
         5d:b6:a2:08:6b:ce:48:da:34:b9:fb:46:e5:24:eb:0d:dd:2f:
         ac:5f:e5:14:88:5e:d8:e7:b8:99:d6:3c:52:66:6a:25:d7:14:
         c5:9e:66:b9:e3:91:ee:20:08:8d:a1:ab:ae:96:29:c6:f9:f5:
         17:5a:77:67:86:41:71:26:ff:54:13:c8:23:c9:28:ef:c6:35:
         2c:30:7b:55:ae:56:ab:18:a1:cb:e6:b5:b9:5d:7c:04:35:20:
         0b:79:9d:59:35:e5:ec:43:2f:23:fd:bd:6e:53:72:95:46:fb:
         60:3d:4f:5d:95:39:50:7f:a4:89:6f:3d:b9:02:c4:67:57:f2:
         99:39:73:d2:5c:71:31:92:3c:75:60:53:68:55:99:da:61:fa:
         bd:94:93:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27MNqy2dEeI8Tz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
OGI5NDUyZGEtMDJjYi00NzNhLWJkMWMtZTI3NzI1NDExNWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuxMC3ezj7QdZZqtg7sbfWB6QQsl53VWX7jw
J+CINhgArMjxxD2PAIsh4dh5qkr/95w9DaOhyPLhQGSiZ6Qgnohszq2HPCFfGsUY
F4h26bNnm3n+h7qqOqsdUMF6SKjmwIA7jwypAWP3k4amCUxmWU7EMgfes4Xun6m8
zqLN/wnc+yRD8Dn8aoCRoNFMOcAZlboN7GXte5U5nhkYNuzrwHKP/VY84M73f6zG
+z/Hp2N1QDFx0Z6XeUHft/0UKkOJOhHZtg0vIlDNmpStjTWqjiRKLPlSxyyQevfg
fAViCWbdtEFfjj2g1OyNZ/n+owAoWj62zbeImXM71/GW5LX/YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGINBqLsn2U434LFDc4lrX9L8k1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWZhODEyZDYtMmZmYi0z
MTJlLWFlZTEtYzMzYzA5ZDVjNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJ31MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHohQwfgj88NfRJESrOahYNerLBKID1FaZ+0t0ih5NP1GvrGiq6REfrN
v/CHJgqvQevom3cTWzDx5+4C/iallRQ2D8k5K3arrXbPzTvKVyzHesuhIA15DRpE
1S8fE5whfWL2ADzSf/psJNc1ql22oghrzkjaNLn7RuUk6w3dL6xf5RSIXtjnuJnW
PFJmaiXXFMWeZrnjke4gCI2hq66WKcb59Rdad2eGQXEm/1QTyCPJKO/GNSwwe1Wu
VqsYocvmtbldfAQ1IAt5nVk15exDLyP9vW5TcpVG+2A9T12VOVB/pIlvPbkCxGdX
8pk5c9JccTGSPHVgU2hVmdph+r2Uk/0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:34:07 2026 by rpki-client