Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0f26707-0514-35c3-9122-bb324ae855e0.roa
File:                     d0f26707-0514-35c3-9122-bb324ae855e0.roa (raw, json)
Hash identifier:          P/tcbW62rJ4V6YTnaejRolOSv0l4QNlM8j0dgZkTmnQ=
Subject key identifier:   ED:A2:B9:35:37:3F:99:BC:88:8C:84:9C:A1:9E:C8:44:65:2D:2C:13
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6D750C00E97485165F7EBEC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0f26707-0514-35c3-9122-bb324ae855e0.roa
Signing time:             Tue 07 Apr 2026 13:00:30 +0000
ROA not before:           Tue 07 Apr 2026 13:00:30 +0000
ROA not after:            Mon 06 Jul 2026 13:00:30 +0000
asID:                     273751
IP address blocks:        216.28.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:75:0c:00:e9:74:85:16:5f:7e:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  7 13:00:30 2026 GMT
            Not After : Jul  6 13:00:30 2026 GMT
        Subject: CN=fb39d15a-92be-4362-a59a-50d38ec5b104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ed:06:60:61:89:4b:fb:86:b0:2b:0e:ed:af:
                    03:ed:a2:81:63:b6:24:26:c3:41:a6:15:b9:25:f9:
                    c6:38:c2:fa:bf:f2:79:d8:1a:9a:df:be:8b:a1:9f:
                    61:f4:07:91:2f:46:8c:06:b6:47:f0:5e:c4:e6:57:
                    7f:94:f4:06:66:ce:ed:c3:51:29:ad:d7:69:1c:be:
                    42:8f:b7:91:f8:a5:9e:90:f7:60:b7:5c:b9:df:9d:
                    85:f5:17:5e:32:fe:71:65:32:79:86:2a:b2:da:e3:
                    d5:87:d2:c7:aa:40:c9:a0:72:be:1b:06:9c:b2:13:
                    56:5d:4b:59:74:63:11:d6:dc:e9:04:17:de:4f:19:
                    1f:1c:eb:43:00:c5:ac:2f:ce:e7:80:80:c9:17:28:
                    a1:6c:c8:46:21:21:85:3d:bf:d8:62:6f:d7:c1:27:
                    44:b1:98:65:f2:f9:89:5e:b5:9d:18:1f:6f:35:02:
                    02:53:5f:37:b3:bb:a8:ff:60:53:23:34:22:00:88:
                    c7:e4:6e:c5:9f:5b:bc:9e:16:bc:b3:18:e2:9c:01:
                    e1:d5:8a:54:19:af:3c:b3:ef:72:1a:19:c6:f8:aa:
                    87:d7:af:70:fb:a1:f5:0b:96:9f:20:59:e1:66:06:
                    a7:48:0d:9b:b4:05:10:a6:fa:3c:f4:49:8e:5d:4a:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:B9:35:37:3F:99:BC:88:8C:84:9C:A1:9E:C8:44:65:2D:2C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d0f26707-0514-35c3-9122-bb324ae855e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.28.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:b5:c3:c4:b9:97:df:9d:8d:ef:ea:2a:27:86:38:5d:ed:
         4d:13:80:6e:0e:d2:8a:1c:49:6c:fc:2a:56:02:27:06:d6:a8:
         b1:02:79:e5:0a:c2:77:e9:9f:a1:c0:ff:06:37:23:c1:b8:f5:
         bf:4c:27:da:05:4e:d7:df:7a:c8:8f:02:fd:34:27:31:d3:75:
         92:db:07:49:f3:87:6f:8f:ff:a1:d2:be:8f:23:89:d7:f2:3c:
         80:36:d0:43:67:89:b8:82:35:ce:89:07:60:bb:06:a6:d9:28:
         c2:7f:ed:c5:fc:15:a6:c0:29:aa:dc:1f:95:0c:c7:66:61:b4:
         65:78:f0:6c:d7:b4:b5:8b:1a:1a:63:d9:79:c4:8a:6d:3e:91:
         49:b7:ec:8b:03:82:55:1f:cb:6e:05:31:ae:cb:95:1c:f1:6e:
         20:23:23:74:a8:18:d2:eb:1c:a3:a6:7b:51:91:fe:bd:6e:13:
         ec:e7:66:5c:8d:78:c6:f6:52:c3:ad:5a:bf:8b:8d:af:3d:92:
         1c:bd:85:c3:ca:23:51:cb:f8:a2:7f:58:6c:a8:77:0c:61:51:
         e2:b5:f2:e6:e9:0a:3d:ac:fd:01:a0:8f:18:cf:3d:05:53:af:
         57:19:e9:73:12:a7:fa:53:c8:96:cf:ed:a8:24:18:7b:9b:dd:
         d1:e2:90:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tdQwA6XSFFl9+vsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk
ZmIzOWQxNWEtOTJiZS00MzYyLWE1OWEtNTBkMzhlYzViMTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke0GYGGJS/uGsCsO7a8D7aKBY7YkJsNBphW5
JfnGOML6v/J52Bqa376LoZ9h9AeRL0aMBrZH8F7E5ld/lPQGZs7tw1EprddpHL5C
j7eR+KWekPdgt1y5352F9RdeMv5xZTJ5hiqy2uPVh9LHqkDJoHK+GwacshNWXUtZ
dGMR1tzpBBfeTxkfHOtDAMWsL87ngIDJFyihbMhGISGFPb/YYm/XwSdEsZhl8vmJ
XrWdGB9vNQICU183s7uo/2BTIzQiAIjH5G7Fn1u8nha8sxjinAHh1YpUGa88s+9y
GhnG+KqH169w+6H1C5afIFnhZganSA2btAUQpvo89EmOXUrfkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2iuTU3P5m8iIyEnKGeyERlLSwTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDBmMjY3MDctMDUxNC0z
NWMzLTkxMjItYmIzMjRhZTg1NWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Bz2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6VtcPEuZffnY3v6ionhjhd7U0TgG4O0oocSWz8KlYCJwbWqLECeeUK
wnfpn6HA/wY3I8G49b9MJ9oFTtffesiPAv00JzHTdZLbB0nzh2+P/6HSvo8jidfy
PIA20ENnibiCNc6JB2C7BqbZKMJ/7cX8FabAKarcH5UMx2ZhtGV48GzXtLWLGhpj
2XnEim0+kUm37IsDglUfy24FMa7LlRzxbiAjI3SoGNLrHKOme1GR/r1uE+znZlyN
eMb2UsOtWr+Lja89khy9hcPKI1HL+KJ/WGyodwxhUeK18ubpCj2s/QGgjxjPPQVT
r1cZ6XMSp/pTyJbP7agkGHub3dHikL8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:53 2026 by rpki-client