Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/18f3acc0-115f-3d01-8d63-31d6a3695f65.roa
File:                     18f3acc0-115f-3d01-8d63-31d6a3695f65.roa (raw, json)
Hash identifier:          IxcElP/Kgz76zvbg7ZKzyv6U0ax+pzCNLgwsJZ6j4cg=
Subject key identifier:   C0:22:DA:10:2D:4C:34:CA:F9:B3:65:86:D9:86:A0:9D:1E:1E:EF:4F
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584D037D12A86F75CED2D02CECC0
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/18f3acc0-115f-3d01-8d63-31d6a3695f65.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     10794
IP address blocks:        199.201.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:12:a8:6f:75:ce:d2:d0:2c:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=7b609a44-3c6e-40a1-ba1d-546c0aff0f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:fb:12:c1:09:9c:77:1c:35:7d:f1:f5:d9:
                    bb:17:07:a1:bd:65:61:6d:37:81:d6:d2:d9:89:54:
                    db:00:79:e0:93:ee:28:cb:0e:0c:17:e2:ec:10:69:
                    b4:92:c3:16:a2:27:84:29:ce:74:2d:3b:47:01:b7:
                    97:df:0e:c4:12:24:b9:10:b7:19:5b:a2:50:46:e2:
                    e8:bf:46:16:e0:d7:76:67:a1:a3:97:e7:3b:4d:b9:
                    39:55:7b:5b:27:da:45:fa:c5:e1:c3:df:ef:5e:63:
                    ec:a1:bb:ab:8c:05:27:67:8f:c1:79:c4:4c:46:91:
                    8f:69:59:d0:e6:e2:92:b6:d7:7f:54:c1:44:b0:40:
                    ca:3e:45:26:16:56:4f:2b:54:b5:bd:65:e5:4e:7c:
                    98:20:e2:09:14:2c:fe:33:2a:1b:93:f2:62:fb:81:
                    3e:46:fb:bf:a4:ae:b2:b5:df:99:99:da:18:e7:30:
                    d9:21:d9:13:08:26:d1:ee:c4:2d:7e:1d:55:8d:e3:
                    d8:2b:9c:d0:92:91:e2:82:2e:df:4c:5f:67:26:4d:
                    bb:f1:98:ac:af:be:db:44:9f:ae:be:d2:1c:39:6d:
                    06:9b:00:c1:3e:b2:c0:3f:91:18:5f:74:fc:ac:c8:
                    c4:ff:e6:4c:bd:a6:a2:41:ae:a4:6a:ee:89:28:17:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:22:DA:10:2D:4C:34:CA:F9:B3:65:86:D9:86:A0:9D:1E:1E:EF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/18f3acc0-115f-3d01-8d63-31d6a3695f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:a7:43:ba:63:12:3f:87:39:2d:37:c9:96:5d:bd:56:dd:
         e9:88:2e:0f:db:4e:d1:12:40:2b:4f:ef:5b:63:36:36:a0:13:
         f0:7f:0b:73:28:e8:34:25:4b:f1:6c:92:d8:07:c8:3a:01:5e:
         e6:ef:fb:d8:8d:30:3f:04:c7:61:fd:23:bb:2d:96:96:f8:24:
         bc:5f:52:78:ae:12:5f:8a:e0:8c:5b:e3:68:4e:bd:6c:16:00:
         15:28:e7:fb:2f:6a:a4:f0:43:fb:00:e8:65:05:61:03:73:50:
         ac:21:5b:a7:ae:e9:37:42:11:35:25:cc:25:da:76:82:f9:e0:
         3e:8d:14:fa:31:16:aa:04:d9:19:92:c2:eb:54:51:be:56:ac:
         fd:92:d2:ea:19:85:aa:e8:8d:8e:ef:02:35:6f:7b:04:ae:17:
         db:5f:cf:19:dc:a0:02:f7:3b:67:21:c2:46:9a:6d:49:ae:96:
         1f:c4:5a:34:93:f3:8e:21:b3:01:c7:6f:08:2a:09:c1:a4:37:
         15:f6:4f:05:31:27:9c:84:4f:62:8a:47:0b:e0:de:c9:c4:95:
         cf:7b:be:f0:e7:17:03:12:e4:08:47:75:15:f3:ea:92:49:e6:
         fa:6f:b5:09:6d:9b:31:35:3d:3b:5d:ce:70:a9:b8:b8:3d:81:
         b5:52:29:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRKob3XO0tAs7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1
MWI2MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
N2I2MDlhNDQtM2M2ZS00MGExLWJhMWQtNTQ2YzBhZmYwZjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/7EsEJnHccNX3x9dm7FwehvWVhbTeB1tLZ
iVTbAHngk+4oyw4MF+LsEGm0ksMWoieEKc50LTtHAbeX3w7EEiS5ELcZW6JQRuLo
v0YW4Nd2Z6Gjl+c7Tbk5VXtbJ9pF+sXhw9/vXmPsoburjAUnZ4/BecRMRpGPaVnQ
5uKSttd/VMFEsEDKPkUmFlZPK1S1vWXlTnyYIOIJFCz+Myobk/Ji+4E+Rvu/pK6y
td+ZmdoY5zDZIdkTCCbR7sQtfh1VjePYK5zQkpHigi7fTF9nJk278Zisr77bRJ+u
vtIcOW0GmwDBPrLAP5EYX3T8rMjE/+ZMvaaiQa6kau6JKBeN7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAi2hAtTDTK+bNlhtmGoJ0eHu9PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh
YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvMThmM2FjYzAtMTE1Zi0z
ZDAxLThkNjMtMzFkNmEzNjk1ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl
NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi
NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz
YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8k/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvJp0O6YxI/hzktN8mWXb1W3emILg/bTtESQCtP71tjNjagE/B/C3Mo
6DQlS/FsktgHyDoBXubv+9iNMD8Ex2H9I7stlpb4JLxfUniuEl+K4Ixb42hOvWwW
ABUo5/svaqTwQ/sA6GUFYQNzUKwhW6eu6TdCETUlzCXadoL54D6NFPoxFqoE2RmS
wutUUb5WrP2S0uoZharojY7vAjVvewSuF9tfzxncoAL3O2chwkaabUmulh/EWjST
844hswHHbwgqCcGkNxX2TwUxJ5yET2KKRwvg3snElc97vvDnFwMS5AhHdRXz6pJJ
5vpvtQltmzE1PTtdznCpuLg9gbVSKco=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:01 2026 by rpki-client