Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0b4e97a3-fe50-3f1a-9cb7-1e5e51d70a02.roa
File:                     0b4e97a3-fe50-3f1a-9cb7-1e5e51d70a02.roa (raw, json)
Hash identifier:          pYbCfE0th5XFObMuhvz+dFAt7j4BiM4jVxXopjpU6bM=
Subject key identifier:   1A:ED:34:74:52:4D:E1:05:37:77:FF:72:F1:0D:63:2C:73:DE:DC:FF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D01DFB13EED16AE6C97A47280
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0b4e97a3-fe50-3f1a-9cb7-1e5e51d70a02.roa
Signing time:             Sat 28 Feb 2026 00:08:06 +0000
ROA not before:           Sat 28 Feb 2026 00:08:06 +0000
ROA not after:            Thu 28 May 2026 23:08:06 +0000
asID:                     834
IP address blocks:        64.204.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:df:b1:3e:ed:16:ae:6c:97:a4:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Feb 28 00:08:06 2026 GMT
            Not After : May 28 23:08:06 2026 GMT
        Subject: CN=0029458e-e888-4c3f-b84d-7eb06a910ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:25:49:6d:76:e5:2f:ce:40:f7:b7:ea:42:
                    c1:b0:aa:fe:c2:61:5f:e2:e5:b1:e9:c5:0c:85:ed:
                    09:f7:03:eb:8e:41:60:c4:68:9e:87:ee:3a:7c:56:
                    e5:84:a0:7e:7a:9d:79:ca:1b:9d:cd:2c:73:e4:e8:
                    55:a2:3e:c4:c8:38:91:06:1d:30:96:7e:e2:a0:8a:
                    e0:4d:26:4d:5a:9d:d1:5f:e4:8a:67:32:5d:1f:a8:
                    c4:df:f5:77:28:c0:18:fb:f9:4b:d2:a8:28:4f:5d:
                    f8:f4:d4:7a:b6:62:73:5a:1a:03:21:39:f8:25:23:
                    ec:6b:eb:2e:f2:dd:58:5f:e5:5a:55:e2:a2:b0:78:
                    c7:9b:96:ab:79:33:b5:25:25:f3:94:0d:4f:71:c3:
                    c7:37:91:30:88:3e:5a:26:ff:22:b6:fc:7f:40:18:
                    8d:46:49:3d:13:c0:e1:db:67:bd:6e:b0:fb:f1:a1:
                    97:75:d9:47:99:8d:1b:ef:fe:67:79:71:e8:26:e8:
                    a2:a4:56:91:55:34:18:3c:50:4c:0e:22:93:40:8e:
                    9b:11:bc:73:2e:1f:da:db:83:27:69:3f:3a:dc:9b:
                    96:c6:39:c5:b1:4f:48:15:89:2b:83:3f:c9:11:ea:
                    cd:93:e9:65:89:d3:9b:e1:e4:34:79:11:38:74:64:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:34:74:52:4D:E1:05:37:77:FF:72:F1:0D:63:2C:73:DE:DC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0b4e97a3-fe50-3f1a-9cb7-1e5e51d70a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:aa:ea:a5:55:cf:a0:36:c4:13:d2:e2:94:a7:8e:db:27:
         eb:04:ec:07:d0:7f:e0:21:3a:65:66:d4:7c:0c:fc:cf:36:fc:
         1d:45:92:4c:51:f3:f6:11:5d:e5:89:c4:de:c7:15:45:b6:c9:
         17:b9:59:91:44:ff:d4:e9:56:57:4d:c6:17:ad:cc:01:fc:fb:
         5c:76:cc:f7:52:c7:0b:a3:9c:ca:de:fc:3c:08:13:1f:d6:9d:
         37:01:89:52:e3:47:72:cb:35:df:8b:24:c0:a1:fe:f2:7f:ac:
         69:f9:a9:6c:e6:30:70:cc:34:3f:91:13:c3:52:61:d9:0e:c7:
         dd:33:66:91:83:ec:72:70:4b:80:de:ae:e0:4c:8a:59:e9:06:
         a2:bc:c9:04:f9:99:85:a1:cc:75:f1:93:eb:b4:e5:7a:d7:ce:
         15:eb:57:ad:e7:61:27:6b:12:a6:82:1b:aa:c2:58:2f:43:ba:
         45:63:c2:7a:1d:92:69:7d:54:ed:48:cb:ce:da:b9:d8:01:83:
         84:75:c2:00:91:0e:3c:11:13:1e:b4:c9:5d:2e:d6:b6:34:9a:
         11:fe:12:00:32:d3:08:af:18:be:01:9f:c7:75:54:0b:fd:0f:
         fa:5b:10:0b:a8:bc:b7:8c:34:8d:68:0e:96:7a:8f:9b:0d:c1:
         f7:83:8b:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0B37E+7RaubJekcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDIyODAwMDgwNloXDTI2MDUyODIzMDgwNlowLzEtMCsGA1UEAxMk
MDAyOTQ1OGUtZTg4OC00YzNmLWI4NGQtN2ViMDZhOTEwYWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA8lSW125S/OQPe36kLBsKr+wmFf4uWx6cUM
he0J9wPrjkFgxGieh+46fFblhKB+ep15yhudzSxz5OhVoj7EyDiRBh0wln7ioIrg
TSZNWp3RX+SKZzJdH6jE3/V3KMAY+/lL0qgoT1349NR6tmJzWhoDITn4JSPsa+su
8t1YX+VaVeKisHjHm5areTO1JSXzlA1PccPHN5EwiD5aJv8itvx/QBiNRkk9E8Dh
22e9brD78aGXddlHmY0b7/5neXHoJuiipFaRVTQYPFBMDiKTQI6bEbxzLh/a24Mn
aT863JuWxjnFsU9IFYkrgz/JEerNk+llidOb4eQ0eRE4dGSRYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBrtNHRSTeEFN3f/cvENYyxz3tz/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMGI0ZTk3YTMtZmU1MC0z
ZjFhLTljYjctMWU1ZTUxZDcwYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQMwYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzbquqlVc+gNsQT0uKUp47bJ+sE7AfQf+AhOmVm1HwM/M82/B1FkkxR
8/YRXeWJxN7HFUW2yRe5WZFE/9TpVldNxhetzAH8+1x2zPdSxwujnMre/DwIEx/W
nTcBiVLjR3LLNd+LJMCh/vJ/rGn5qWzmMHDMND+RE8NSYdkOx90zZpGD7HJwS4De
ruBMilnpBqK8yQT5mYWhzHXxk+u05XrXzhXrV63nYSdrEqaCG6rCWC9DukVjwnod
kml9VO1Iy87audgBg4R1wgCRDjwREx60yV0u1rY0mhH+EgAy0wivGL4Bn8d1VAv9
D/pbEAuovLeMNI1oDpZ6j5sNwfeDi4M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:10 2026 by rpki-client