Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/9aace15f-10f0-39e7-b805-9ddbe513017b.roa
File:                     9aace15f-10f0-39e7-b805-9ddbe513017b.roa (raw, json)
Hash identifier:          Rqp3VYQ955MUewsYVX6bFDSfDUuNto7/mDxwWO2Ld8Y=
Subject key identifier:   55:A7:1D:6E:49:AF:44:35:D8:00:7E:C0:03:EA:A1:71:14:41:E4:44
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584CE36206BB66A56B90FC987240
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/9aace15f-10f0-39e7-b805-9ddbe513017b.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     18914
IP address blocks:        167.150.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:06:bb:66:a5:6b:90:fc:98:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=a3a56cb4-af72-4299-8288-7af515afa9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:9d:5d:d1:ed:91:c6:8c:06:80:92:eb:e1:
                    1d:45:28:62:c4:a3:83:af:75:f7:72:2d:7b:93:6b:
                    8a:f5:25:bb:b0:60:5d:a4:f3:f1:c6:8b:72:95:0b:
                    74:1a:fa:c1:3d:78:3c:73:65:25:c5:55:a9:ef:7f:
                    58:0c:10:66:ff:75:4f:0d:50:19:4c:39:b1:2c:ef:
                    11:e8:03:c1:37:ca:7b:dd:79:52:b8:5c:c6:a9:37:
                    de:a0:6b:7f:c3:5a:6d:f2:d7:e8:83:64:6d:50:87:
                    6e:9f:ef:de:30:9f:65:32:f2:6f:6c:f6:fc:51:ff:
                    f9:da:09:bb:da:b0:f4:df:22:dc:f4:f8:67:96:b7:
                    cf:37:32:c4:5b:bf:7f:f9:b9:f2:52:d1:fa:42:10:
                    5b:6e:9b:72:5a:7c:fc:85:9d:78:52:23:60:fc:fa:
                    41:d3:a1:1c:5f:8d:b9:11:7d:33:b8:68:75:d3:9e:
                    97:64:46:9a:61:bb:7d:0b:c8:ab:22:90:53:90:cd:
                    fb:c1:1d:08:e8:91:bf:d6:18:b2:6c:f7:17:61:6a:
                    c0:f9:65:c7:8f:75:c2:c1:4e:17:b5:c6:b5:a2:ba:
                    76:f8:85:24:dd:4e:80:2d:13:16:b8:ba:2b:26:ef:
                    3f:4e:55:f9:5d:80:c2:a8:ad:10:b3:f5:97:92:0f:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:1D:6E:49:AF:44:35:D8:00:7E:C0:03:EA:A1:71:14:41:E4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/9aace15f-10f0-39e7-b805-9ddbe513017b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:5a:5f:fb:58:83:fb:7f:59:2b:95:84:f8:78:1c:81:3f:
         61:d2:39:62:b3:45:c1:3a:b7:e0:b3:07:f5:0c:1b:f1:f0:19:
         90:b8:7b:64:07:f7:96:9e:0c:d1:2a:6b:ca:bb:b8:c2:0e:c1:
         db:29:0b:3e:e0:1f:5a:14:1c:e7:bf:28:96:aa:10:1a:14:21:
         36:df:88:4c:72:21:b7:20:96:8f:a5:c5:73:c1:3e:e7:52:e2:
         53:86:c3:d3:17:03:72:48:8e:0b:45:3c:57:68:38:b6:b7:8e:
         7d:14:0e:10:a0:ff:fd:bd:f4:48:1c:e0:fb:84:24:ba:bf:cc:
         99:a7:c9:74:bf:40:fe:5c:2e:69:39:24:28:6c:09:3a:56:2f:
         32:2b:ba:83:99:d2:49:61:31:7b:1c:d7:99:d1:52:ad:6b:c0:
         1e:7e:14:bc:2a:94:dc:8f:a4:78:5b:a3:fd:e4:2d:46:b5:55:
         08:39:84:be:ff:8d:56:36:28:ec:d0:48:38:f9:6e:ac:5d:ba:
         b2:39:e3:47:57:70:7f:db:1e:6a:b8:d1:f7:7b:a5:3c:98:b5:
         fe:1c:59:7c:61:be:cd:ce:47:06:b5:d4:c6:1c:a2:84:2c:a0:
         46:71:4b:c2:e5:46:dd:c2:22:67:26:46:00:cb:06:ca:4e:6c:
         ed:13:db:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzjYga7ZqVrkPyYckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI2MDIxNzAyMDAzMVoXDTI2MDUxODAxMDAzMVowLzEtMCsGA1UEAxMk
YTNhNTZjYjQtYWY3Mi00Mjk5LTgyODgtN2FmNTE1YWZhOWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHadXdHtkcaMBoCS6+EdRShixKODr3X3ci17
k2uK9SW7sGBdpPPxxotylQt0GvrBPXg8c2UlxVWp739YDBBm/3VPDVAZTDmxLO8R
6APBN8p73XlSuFzGqTfeoGt/w1pt8tfog2RtUIdun+/eMJ9lMvJvbPb8Uf/52gm7
2rD03yLc9PhnlrfPNzLEW79/+bnyUtH6QhBbbptyWnz8hZ14UiNg/PpB06EcX425
EX0zuGh1056XZEaaYbt9C8irIpBTkM37wR0I6JG/1hiybPcXYWrA+WXHj3XCwU4X
tca1orp2+IUk3U6ALRMWuLorJu8/TlX5XYDCqK0Qs/WXkg+EFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWnHW5Jr0Q12AB+wAPqoXEUQeREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvOWFhY2UxNWYtMTBmMC0z
OWU3LWI4MDUtOWRkYmU1MTMwMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp5b0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjyWl/7WIP7f1krlYT4eByBP2HSOWKzRcE6t+CzB/UMG/HwGZC4e2QH
95aeDNEqa8q7uMIOwdspCz7gH1oUHOe/KJaqEBoUITbfiExyIbcglo+lxXPBPudS
4lOGw9MXA3JIjgtFPFdoOLa3jn0UDhCg//299Egc4PuEJLq/zJmnyXS/QP5cLmk5
JChsCTpWLzIruoOZ0klhMXsc15nRUq1rwB5+FLwqlNyPpHhbo/3kLUa1VQg5hL7/
jVY2KOzQSDj5bqxdurI540dXcH/bHmq40fd7pTyYtf4cWXxhvs3ORwa11MYcooQs
oEZxS8LlRt3CImcmRgDLBspObO0T27g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:38 2026 by rpki-client