Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/f270e87a-ddea-3b60-a6bb-9c03dcfec890.roa
File:                     f270e87a-ddea-3b60-a6bb-9c03dcfec890.roa (raw, json)
Hash identifier:          kcN9D2ILVKetvZxTns+RKvKm1wvWtcfu4HOwOc64P9E=
Subject key identifier:   65:3F:0A:59:4A:92:B2:76:9D:46:D5:0C:7B:A9:DD:CE:CF:81:47:5C
Certificate issuer:       /CN=ea689b24-e9a5-4734-a9cb-40111905098c
Certificate serial:       010D0C9F4328584CEBC20E49C54EE6BE40C32580
Authority key identifier: 41:6E:84:73:EB:0A:C9:C1:0E:A7:FC:15:71:DB:48:E7:04:8C:2A:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/f270e87a-ddea-3b60-a6bb-9c03dcfec890.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     15830
IP address blocks:        24.235.1.0/24 maxlen: 24
                          68.67.114.0/24 maxlen: 24
                          168.245.138.0/23 maxlen: 23
                          168.245.138.0/24 maxlen: 24
                          168.245.139.0/24 maxlen: 24
                          199.247.86.0/23 maxlen: 23
                          199.247.86.0/24 maxlen: 24
                          199.247.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/ea689b24-e9a5-4734-a9cb-40111905098c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/ea689b24-e9a5-4734-a9cb-40111905098c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:0e:49:c5:4e:e6:be:40:c3:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea689b24-e9a5-4734-a9cb-40111905098c
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=a9d57e90-1e9a-4f18-bbdd-5aa7ee2536c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:4e:df:79:e7:2a:4e:92:c6:df:0b:85:5d:
                    56:ee:23:60:2a:34:66:b8:6d:f7:8c:54:1c:53:1c:
                    16:7a:cd:cb:ce:d2:47:62:e8:3a:c4:79:7d:77:cf:
                    26:96:1d:0b:52:ea:fe:a5:9a:d7:06:f0:51:b1:28:
                    d9:aa:50:29:d7:95:ac:6b:d0:30:05:a9:10:4d:ca:
                    db:b6:59:56:54:16:24:79:14:f7:3e:12:dd:f1:14:
                    ca:4c:68:21:3b:47:0f:99:84:72:55:b4:5f:2a:c2:
                    95:c7:15:01:90:e3:f5:23:ef:87:db:9b:53:fc:81:
                    4f:0b:0f:8f:f3:36:24:fa:e7:e0:17:20:08:45:3e:
                    53:df:04:d1:2c:63:b8:f6:45:98:d1:ac:79:a1:c3:
                    7c:a8:77:31:c1:25:6a:ea:14:39:c7:e7:99:a7:0f:
                    90:a8:92:bf:0e:d9:8c:66:92:f5:4d:f3:6d:0b:63:
                    0b:85:8f:33:74:24:b4:10:df:67:40:8b:3a:70:a9:
                    f2:14:12:81:93:b4:56:2a:39:e1:0e:8e:9a:46:05:
                    93:0e:d5:e6:c0:31:85:4d:19:2a:08:47:a8:c8:1f:
                    71:98:3f:1a:9a:8c:ff:fb:03:1c:cb:b6:52:f7:10:
                    1f:64:8d:64:5c:a2:89:bb:5c:51:85:df:c2:95:c5:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:0A:59:4A:92:B2:76:9D:46:D5:0C:7B:A9:DD:CE:CF:81:47:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/f270e87a-ddea-3b60-a6bb-9c03dcfec890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c/ea689b24-e9a5-4734-a9cb-40111905098c.crl

            X509v3 Authority Key Identifier:
                keyid:41:6E:84:73:EB:0A:C9:C1:0E:A7:FC:15:71:DB:48:E7:04:8C:2A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea689b24-e9a5-4734-a9cb-40111905098c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.235.1.0/24
                  68.67.114.0/24
                  168.245.138.0/23
                  199.247.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:a4:66:ca:5e:86:5e:75:ab:1e:fd:4e:3e:20:ca:86:d3:
         fa:e4:7e:f7:03:ca:74:14:d4:7a:ab:2b:79:b0:89:f8:76:75:
         e9:33:5f:10:64:0b:23:8c:25:c9:1a:0f:3c:36:de:0d:ee:c5:
         e3:a9:c0:da:cc:69:6d:30:4f:b4:cd:1e:e0:b3:5a:96:91:ff:
         c8:b6:6d:bb:22:fb:07:a1:b3:50:9b:45:b8:37:a9:cb:49:68:
         3c:02:33:da:3f:cf:ee:a0:4a:a2:44:41:fc:a1:19:c9:b8:f5:
         f2:b3:61:dd:12:34:bf:e1:4d:19:10:56:68:32:0f:5a:6d:8a:
         9b:58:4d:6c:21:50:14:38:ea:24:bf:3c:3d:ea:9c:a0:b5:e7:
         3f:82:34:f7:77:06:70:04:cc:52:41:a9:f2:86:92:29:17:09:
         a4:ed:48:ce:42:8e:34:38:33:06:a1:0b:23:cc:fb:c5:0a:35:
         0b:79:b7:d8:08:23:59:90:7a:cf:06:7a:d7:58:e6:39:2f:bb:
         b6:05:6d:2c:f4:50:00:3b:81:d2:eb:0b:0a:6f:8e:f5:9f:ba:
         45:09:3b:2b:97:3d:50:b4:41:ec:a6:52:ab:21:2b:bc:0c:56:
         a7:16:57:b2:a2:bd:60:26:c8:f2:04:b3:ef:f0:78:e6:0f:a8:
         73:df:03:a1
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEzrwg5JxU7mvkDDJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE2ODliMjQtZTlhNS00NzM0LWE5Y2ItNDAxMTE5MDUw
OThjMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
YTlkNTdlOTAtMWU5YS00ZjE4LWJiZGQtNWFhN2VlMjUzNmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXBO33nnKk6Sxt8LhV1W7iNgKjRmuG33jFQc
UxwWes3LztJHYug6xHl9d88mlh0LUur+pZrXBvBRsSjZqlAp15Wsa9AwBakQTcrb
tllWVBYkeRT3PhLd8RTKTGghO0cPmYRyVbRfKsKVxxUBkOP1I++H25tT/IFPCw+P
8zYk+ufgFyAIRT5T3wTRLGO49kWY0ax5ocN8qHcxwSVq6hQ5x+eZpw+QqJK/DtmM
ZpL1TfNtC2MLhY8zdCS0EN9nQIs6cKnyFBKBk7RWKjnhDo6aRgWTDtXmwDGFTRkq
CEeoyB9xmD8amoz/+wMcy7ZS9xAfZI1kXKKJu1xRhd/ClcWJrwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFGU/CllKkrJ2nUbVDHup3c7PgUdcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lYTY4
OWIyNC1lOWE1LTQ3MzQtYTljYi00MDExMTkwNTA5OGMvZjI3MGU4N2EtZGRlYS0z
YjYwLWE2YmItOWMwM2RjZmVjODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZWE2ODliMjQtZTlhNS00NzM0LWE5
Y2ItNDAxMTE5MDUwOThjL2VhNjg5YjI0LWU5YTUtNDczNC1hOWNiLTQwMTExOTA1
MDk4Yy5jcmwwHwYDVR0jBBgwFoAUQW6Ec+sKycEOp/wVcdtI5wSMKp8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9lYTY4OWIyNC1lOWE1LTQ3MzQtYTljYi00MDEx
MTkwNTA5OGMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAGOsBAwQA
RENyAwQBqPWKAwQBx/dWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACarpGbKXoZedase/U4+IMqG0/rkfvcD
ynQU1HqrK3mwifh2dekzXxBkCyOMJckaDzw23g3uxeOpwNrMaW0wT7TNHuCzWpaR
/8i2bbsi+wehs1CbRbg3qctJaDwCM9o/z+6gSqJEQfyhGcm49fKzYd0SNL/hTRkQ
VmgyD1ptiptYTWwhUBQ46iS/PD3qnKC15z+CNPd3BnAEzFJBqfKGkikXCaTtSM5C
jjQ4MwahCyPM+8UKNQt5t9gII1mQes8GetdY5jkvu7YFbSz0UAA7gdLrCwpvjvWf
ukUJOyuXPVC0QeymUqshK7wMVqcWV7KivWAmyPIEs+/weOYPqHPfA6E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:24 2026 by rpki-client