Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa
File:                     2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa (raw, json)
Hash identifier:          GRNEXS+l7u25lXHyXLMuE5u7ZMLlm84Q4Ise3hoblhg=
Subject key identifier:   3C:5D:1D:EF:A7:CA:DF:35:A3:A0:3C:6A:97:92:54:68:31:5F:F8:30
Certificate issuer:       /CN=213412d0-2e00-4f54-95bc-e72555790689
Certificate serial:       010D0C9F4328584CFDE7AB1E363ECC888AD22800
Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     40509
IP address blocks:        209.198.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:ab:1e:36:3e:cc:88:8a:d2:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=79e63019-1aed-4e22-81d7-8e828b046b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:fb:bf:f0:56:ce:09:b1:d4:e6:08:2e:04:
                    b4:a5:32:bc:04:a6:00:7e:90:63:49:68:32:3c:c6:
                    b3:4b:76:4b:18:9b:f7:72:25:e9:3b:92:6e:d2:aa:
                    1e:0a:4a:7d:ce:6c:d5:61:60:64:19:80:28:de:a8:
                    3c:71:5d:e6:c5:11:b2:cf:7e:7a:dd:33:ec:1b:d5:
                    77:bf:2c:54:53:e4:bd:ef:ef:06:51:47:74:83:a8:
                    3d:5a:54:0a:55:e8:59:e2:1d:5f:d5:ba:0d:43:28:
                    1b:ad:ac:d9:cf:84:b0:f0:73:b1:64:81:86:3f:46:
                    ca:c0:4f:23:dd:34:7d:2f:f0:ee:df:a9:3c:18:b0:
                    db:41:4d:3e:a9:f7:07:4f:41:07:8b:78:32:d6:de:
                    c9:68:a5:00:d2:92:fc:37:d5:3d:cd:f4:e2:7d:48:
                    0e:d9:ae:75:63:64:45:44:72:dd:d8:ce:09:7e:15:
                    be:f2:57:2e:27:b6:1a:80:b1:35:bb:d9:0b:7d:af:
                    bb:c8:18:3c:76:3f:aa:08:0b:80:5c:17:08:34:31:
                    19:3b:cf:d7:6e:ae:ea:2f:d3:e1:96:d5:2b:c3:05:
                    42:3e:a8:15:11:84:52:9c:d5:e3:eb:8f:c4:fc:57:
                    46:70:f1:0b:b6:5b:45:0a:b6:de:84:23:ae:8d:a3:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5D:1D:EF:A7:CA:DF:35:A3:A0:3C:6A:97:92:54:68:31:5F:F8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/2e6c5e30-a5e1-3b07-afe0-c214631305bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl

            X509v3 Authority Key Identifier:
                keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.198.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:19:9d:cb:e8:bb:17:2c:82:a0:84:1f:63:d6:43:c7:de:
         6c:9f:ec:3b:86:ac:e0:1d:a8:a2:a4:4a:19:9c:40:15:bb:8d:
         40:b8:48:26:52:8d:04:41:34:91:53:94:3c:ae:64:bb:b8:26:
         b2:1c:20:67:d6:6b:3c:34:b4:70:3e:03:6c:59:64:89:c0:81:
         36:23:cc:d6:b4:49:27:93:7b:41:8f:56:d0:10:d3:70:6b:93:
         cd:29:bf:8d:af:0a:f6:b1:70:71:c3:98:af:03:0a:ab:a9:59:
         ed:03:bd:27:d1:13:26:31:e6:47:aa:b6:6b:aa:97:a5:1f:98:
         42:73:6b:66:98:a5:4a:09:ac:2a:7a:7c:e6:af:06:40:86:63:
         eb:18:e2:0e:a2:78:f1:4f:a7:8e:a0:49:eb:41:30:41:b4:cc:
         0f:78:49:f7:41:f7:16:23:6d:c5:68:6b:a4:47:c2:5b:b5:ff:
         94:23:f1:de:3e:e4:d3:de:70:ed:98:41:fe:f9:d7:c0:92:88:
         57:f3:f5:d0:df:3d:e6:c0:80:82:4e:f7:f3:21:81:33:76:29:
         9d:d2:66:e1:2f:08:fc:6f:62:13:71:95:c6:e2:ac:7b:51:21:
         2d:9a:4a:dc:47:38:8d:de:52:7b:44:f6:85:20:e1:20:e4:fa:
         59:1a:d5:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz956seNj7MiIrSKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw
Njg5MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
NzllNjMwMTktMWFlZC00ZTIyLTgxZDctOGU4MjhiMDQ2YjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO/7v/BWzgmx1OYILgS0pTK8BKYAfpBjSWgy
PMazS3ZLGJv3ciXpO5Ju0qoeCkp9zmzVYWBkGYAo3qg8cV3mxRGyz3563TPsG9V3
vyxUU+S97+8GUUd0g6g9WlQKVehZ4h1f1boNQygbrazZz4Sw8HOxZIGGP0bKwE8j
3TR9L/Du36k8GLDbQU0+qfcHT0EHi3gy1t7JaKUA0pL8N9U9zfTifUgO2a51Y2RF
RHLd2M4JfhW+8lcuJ7YagLE1u9kLfa+7yBg8dj+qCAuAXBcINDEZO8/Xbq7qL9Ph
ltUrwwVCPqgVEYRSnNXj64/E/FdGcPELtltFCrbehCOujaMKOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxdHe+nyt81o6A8apeSVGgxX/gwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0
MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMmU2YzVlMzAtYTVlMS0z
YjA3LWFmZTAtYzIxNDYzMTMwNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1
YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5
MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1
NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0cbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoQGZ3L6LsXLIKghB9j1kPH3myf7DuGrOAdqKKkShmcQBW7jUC4SCZS
jQRBNJFTlDyuZLu4JrIcIGfWazw0tHA+A2xZZInAgTYjzNa0SSeTe0GPVtAQ03Br
k80pv42vCvaxcHHDmK8DCqupWe0DvSfREyYx5keqtmuql6UfmEJza2aYpUoJrCp6
fOavBkCGY+sY4g6iePFPp46gSetBMEG0zA94SfdB9xYjbcVoa6RHwlu1/5Qj8d4+
5NPecO2YQf7518CSiFfz9dDfPebAgIJO9/MhgTN2KZ3SZuEvCPxvYhNxlcbirHtR
IS2aStxHOI3eUntE9oUg4SDk+lka1SQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:02 2026 by rpki-client