Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7a69ea64-9e10-3866-be1d-7a2297ecb839.roa
File:                     7a69ea64-9e10-3866-be1d-7a2297ecb839.roa (raw, json)
Hash identifier:          WB4HXh52vpPD2TVOI79YfGvCXEAOWOD3wnnceMaZf+s=
Subject key identifier:   02:2E:6D:54:25:68:94:9D:52:FC:18:3B:F3:D7:9A:43:1A:CA:3B:EA
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584CD6D2261A68BDEBA412E6AB00
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7a69ea64-9e10-3866-be1d-7a2297ecb839.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     206264
IP address blocks:        68.233.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:26:1a:68:bd:eb:a4:12:e6:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=642984a4-5860-42e2-871c-4a5d506254a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:27:8e:1f:c9:54:24:35:5b:d3:9e:34:2a:
                    66:cb:ba:b0:32:1f:8c:be:55:6e:a9:71:2f:81:e9:
                    d3:a1:62:4a:48:18:bc:5b:0d:86:3e:91:b4:4e:31:
                    7e:56:81:c6:7c:97:06:dc:e7:cc:69:36:d9:90:11:
                    c1:3d:9a:33:ad:31:67:92:21:07:37:97:78:2e:77:
                    36:6b:4e:c5:92:dd:fd:8d:ad:85:aa:3d:10:3a:b4:
                    50:44:ac:49:ee:cf:2c:8c:93:af:bc:36:75:02:c5:
                    28:c2:a2:30:4c:2d:4d:f1:15:03:02:96:4f:c6:a4:
                    c3:be:52:d7:7a:15:77:84:a7:c7:7a:a4:c4:e6:95:
                    c3:3e:f4:11:6f:28:86:f5:a4:20:0d:83:7a:b7:7d:
                    4b:d3:bf:8c:d3:2e:c4:98:9b:0d:ab:51:72:39:04:
                    34:8c:d3:ea:c0:11:60:dc:85:21:13:fe:a4:a0:0d:
                    2b:b5:9c:4e:d0:74:90:e3:c1:6e:ef:1e:68:17:d9:
                    a9:35:50:b0:47:ff:24:93:77:06:17:23:76:1c:bd:
                    36:90:80:a5:33:27:86:c7:59:0b:e5:48:3b:d2:50:
                    08:af:32:47:39:8f:f5:44:35:67:b7:a8:e8:33:8b:
                    bc:28:0f:33:80:62:39:5e:7b:cf:6b:a8:a9:2f:07:
                    31:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2E:6D:54:25:68:94:9D:52:FC:18:3B:F3:D7:9A:43:1A:CA:3B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7a69ea64-9e10-3866-be1d-7a2297ecb839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:33:22:60:fa:84:4d:42:89:b8:53:80:71:c4:07:3f:07:
         a7:19:9d:e0:4b:14:c5:9d:63:2f:c4:75:05:5f:e0:ad:94:6d:
         0f:a8:19:6f:ba:56:4f:76:e9:ce:b3:d2:c8:b9:d4:a6:4a:dc:
         e9:f6:24:ce:80:90:d8:84:07:6a:43:8f:7b:3c:87:a0:58:22:
         6e:b0:85:a3:01:39:ea:b3:5e:f4:55:6d:ac:23:69:49:63:9a:
         fd:4f:83:cd:6a:ae:d1:3f:ea:c8:59:93:08:ee:81:66:b9:d7:
         77:50:0d:c1:4a:be:ba:f1:f8:c5:97:50:d2:e9:b0:05:56:82:
         16:d0:20:95:86:93:cc:15:94:91:af:2f:df:5d:f2:23:26:5d:
         f8:6e:da:ca:9b:dd:91:83:41:37:39:43:0b:0b:f3:52:d0:72:
         fa:5c:57:4e:81:a5:5b:8f:45:c3:04:a0:c6:c5:4c:40:a6:29:
         12:5d:56:c7:2a:e5:19:2f:b8:35:f2:45:19:72:84:2f:ab:ef:
         95:36:e4:d5:cf:37:42:bc:28:91:00:3c:95:a9:6a:9d:18:16:
         8a:d2:83:11:7a:27:41:6e:22:52:f7:19:9f:8d:c3:2a:1c:10:
         48:c3:1b:db:98:4c:75:11:68:a0:6e:56:88:da:f7:cf:13:41:
         97:7f:b1:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0iYaaL3rpBLmqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGJkNWJjMWEtNWY0OC00Y2U3LWI5NTItYjk0YjhlY2U4
N2ZmMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk
NjQyOTg0YTQtNTg2MC00MmUyLTg3MWMtNGE1ZDUwNjI1NGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zQnjh/JVCQ1W9OeNCpmy7qwMh+MvlVuqXEv
genToWJKSBi8Ww2GPpG0TjF+VoHGfJcG3OfMaTbZkBHBPZozrTFnkiEHN5d4Lnc2
a07Fkt39ja2Fqj0QOrRQRKxJ7s8sjJOvvDZ1AsUowqIwTC1N8RUDApZPxqTDvlLX
ehV3hKfHeqTE5pXDPvQRbyiG9aQgDYN6t31L07+M0y7EmJsNq1FyOQQ0jNPqwBFg
3IUhE/6koA0rtZxO0HSQ48Fu7x5oF9mpNVCwR/8kk3cGFyN2HL02kIClMyeGx1kL
5Ug70lAIrzJHOY/1RDVnt6joM4u8KA8zgGI5XnvPa6ipLwcxbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAIubVQlaJSdUvwYO/PXmkMayjvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1
YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRiOGVjZTg3ZmYvN2E2OWVhNjQtOWUxMC0z
ODY2LWJlMWQtN2EyMjk3ZWNiODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGJkNWJjMWEtNWY0OC00Y2U3LWI5
NTItYjk0YjhlY2U4N2ZmLzhiZDViYzFhLTVmNDgtNGNlNy1iOTUyLWI5NGI4ZWNl
ODdmZi5jcmwwHwYDVR0jBBgwFoAUYaLNU5TNbnVpVnI59gs0FWwcdYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YmQ1YmMxYS01ZjQ4LTRjZTctYjk1Mi1iOTRi
OGVjZTg3ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROkhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6oMyJg+oRNQom4U4BxxAc/B6cZneBLFMWdYy/EdQVf4K2UbQ+oGW+6
Vk926c6z0si51KZK3On2JM6AkNiEB2pDj3s8h6BYIm6whaMBOeqzXvRVbawjaUlj
mv1Pg81qrtE/6shZkwjugWa513dQDcFKvrrx+MWXUNLpsAVWghbQIJWGk8wVlJGv
L99d8iMmXfhu2sqb3ZGDQTc5QwsL81LQcvpcV06BpVuPRcMEoMbFTECmKRJdVscq
5RkvuDXyRRlyhC+r75U25NXPN0K8KJEAPJWpap0YForSgxF6J0FuIlL3GZ+Nwyoc
EEjDG9uYTHURaKBuVoja988TQZd/sfI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:55:32 2026 by rpki-client