Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f708a62e-8289-3a3d-af41-2a946dd6cc5b.roa
File:                     f708a62e-8289-3a3d-af41-2a946dd6cc5b.roa (raw, json)
Hash identifier:          DHNjD05JxrHx5h6VymWZ0cShwpatfcAZEXv2RLfur4Q=
Subject key identifier:   A3:EB:43:FD:4A:C9:9F:56:6B:96:37:19:71:EC:D8:45:4E:57:22:7C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CDC67B4825978852006772210
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f708a62e-8289-3a3d-af41-2a946dd6cc5b.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     397240
IP address blocks:        64.6.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:b4:82:59:78:85:20:06:77:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=d42f4c3f-bfb0-49ff-9853-81da364329d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:98:36:90:b9:d6:79:3f:21:dd:b3:92:fa:
                    1e:aa:bf:3a:9f:a9:48:17:71:e7:9a:5d:09:53:48:
                    08:ec:e9:c3:e4:e1:10:b6:31:cc:ff:93:99:4f:c7:
                    f2:80:1a:0b:e1:10:49:ef:a2:4e:88:01:82:b9:07:
                    92:8a:17:a1:9a:fd:56:35:1e:a3:2e:91:a0:b2:14:
                    67:38:2b:a9:71:48:5c:b3:ed:72:66:44:2a:78:d0:
                    50:4d:80:71:ef:56:31:73:fd:d5:5c:c7:c4:66:15:
                    ce:ff:e2:9b:e2:29:b3:a4:a7:38:15:27:ab:3c:c5:
                    07:db:db:81:c0:bd:8e:27:a1:07:41:ec:20:2e:a5:
                    69:ec:76:bf:23:7b:d0:be:11:9a:3c:1a:81:fc:f5:
                    65:2c:e2:88:44:1b:96:fa:be:ed:b7:bb:dd:8d:bb:
                    54:14:28:94:e3:f2:d3:4f:66:de:9d:b6:1f:3d:0b:
                    f4:f5:51:e0:bc:dc:ff:9c:7b:d8:41:fe:d1:c4:fb:
                    d1:b2:1e:7d:44:66:57:eb:d1:4b:01:27:78:2d:0b:
                    25:b4:be:f7:ad:e4:15:4e:bb:a4:0f:ef:77:f9:45:
                    69:85:1f:fa:5d:60:3e:b3:3f:d4:fd:9f:9d:48:b6:
                    fc:98:3e:83:cc:09:19:80:da:ab:96:4c:e0:95:d4:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:43:FD:4A:C9:9F:56:6B:96:37:19:71:EC:D8:45:4E:57:22:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f708a62e-8289-3a3d-af41-2a946dd6cc5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:69:0a:b0:d3:b0:ef:54:3d:25:40:3c:7c:26:0a:af:ff:3c:
         e1:09:6e:e6:84:aa:12:20:11:92:22:3f:01:6b:08:b9:9c:79:
         7d:10:5e:06:fa:ce:9e:ec:aa:bb:57:ce:11:97:cb:81:d4:11:
         31:3c:7f:50:b6:19:54:a9:29:19:af:0f:89:51:77:71:6c:f4:
         88:d5:9e:96:bc:dd:bf:a6:42:15:0b:fb:1a:54:06:24:95:95:
         02:89:5a:10:78:ba:3f:ba:68:6a:6b:fe:14:0a:7f:69:b6:b2:
         f9:b9:3b:9e:28:9c:77:d8:c0:ea:1d:ed:d4:ce:12:86:b0:91:
         43:46:82:46:7c:92:50:a3:5f:8f:19:d1:d6:f4:cc:1c:21:bb:
         80:30:43:cb:99:05:c3:9a:f6:53:d7:dd:31:ac:d4:ba:04:fb:
         2c:a2:51:e8:89:88:76:27:e1:8e:35:8e:91:69:78:a6:5f:e2:
         5a:5b:f3:db:f4:36:e4:c8:d5:0a:58:45:b9:5e:01:dd:41:5b:
         a4:3a:f6:1b:e7:69:58:9c:7a:f2:6a:c4:f6:d2:0b:03:a1:d2:
         3f:7b:26:a6:85:a0:58:68:32:2c:bd:2f:97:df:cd:11:a4:fb:
         5f:63:26:40:c7:68:56:3d:64:42:0c:c1:9b:d6:e5:c2:d6:39:
         0d:5b:08:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ7SCWXiFIAZ3IhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
ZDQyZjRjM2YtYmZiMC00OWZmLTk4NTMtODFkYTM2NDMyOWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VyYNpC51nk/Id2zkvoeqr86n6lIF3Hnml0J
U0gI7OnD5OEQtjHM/5OZT8fygBoL4RBJ76JOiAGCuQeSihehmv1WNR6jLpGgshRn
OCupcUhcs+1yZkQqeNBQTYBx71Yxc/3VXMfEZhXO/+Kb4imzpKc4FSerPMUH29uB
wL2OJ6EHQewgLqVp7Ha/I3vQvhGaPBqB/PVlLOKIRBuW+r7tt7vdjbtUFCiU4/LT
T2benbYfPQv09VHgvNz/nHvYQf7RxPvRsh59RGZX69FLASd4LQsltL73reQVTruk
D+93+UVphR/6XWA+sz/U/Z+dSLb8mD6DzAkZgNqrlkzgldQ3TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPrQ/1KyZ9Wa5Y3GXHs2EVOVyJ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZjcwOGE2MmUtODI4OS0z
YTNkLWFmNDEtMmE5NDZkZDZjYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAZBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZpCrDTsO9UPSVAPHwmCq//POEJbuaEqhIgEZIiPwFrCLmceX0QXgb6
zp7sqrtXzhGXy4HUETE8f1C2GVSpKRmvD4lRd3Fs9IjVnpa83b+mQhUL+xpUBiSV
lQKJWhB4uj+6aGpr/hQKf2m2svm5O54onHfYwOod7dTOEoawkUNGgkZ8klCjX48Z
0db0zBwhu4AwQ8uZBcOa9lPX3TGs1LoE+yyiUeiJiHYn4Y41jpFpeKZf4lpb89v0
NuTI1QpYRbleAd1BW6Q69hvnaVicevJqxPbSCwOh0j97JqaFoFhoMiy9L5ffzRGk
+19jJkDHaFY9ZEIMwZvW5cLWOQ1bCL4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:33 2026 by rpki-client