Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa
File:                     2cc71add-527b-33ca-bca3-3aed5a7256fb.roa (raw, json)
Hash identifier:          UF4fFOJq9J2vLH1KnJzL4nggiMRS4NKGouSX7hjJmgU=
Subject key identifier:   4F:67:42:65:BB:F7:65:AC:91:62:EC:45:78:D8:86:11:89:66:FE:1C
Certificate issuer:       /CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac
Certificate serial:       010D0C9F4328584C9C31B259968DB2F41C9D7180
Authority key identifier: BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa
Signing time:             Thu 22 Jan 2026 14:00:37 +0000
ROA not before:           Thu 22 Jan 2026 14:00:37 +0000
ROA not after:            Wed 22 Apr 2026 13:00:37 +0000
asID:                     393705
IP address blocks:        169.224.192.0/19 maxlen: 24
                          2607:cdc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:31:b2:59:96:8d:b2:f4:1c:9d:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215a9e7-8c66-4e81-a077-2a73c903a0ac
        Validity
            Not Before: Jan 22 14:00:37 2026 GMT
            Not After : Apr 22 13:00:37 2026 GMT
        Subject: CN=a21c7857-6910-4146-9bf7-7a39de2e6891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:93:32:6c:8f:74:ec:32:71:29:be:82:9f:
                    2a:46:d0:58:b2:56:e2:da:50:0c:a5:f3:39:6e:6c:
                    09:21:58:9f:88:2d:b1:83:6b:ed:a3:ca:36:3e:e6:
                    70:33:7f:42:0c:90:41:1c:a6:30:d9:f8:32:bd:75:
                    bd:e0:c1:f7:66:de:dc:8c:41:33:e1:16:52:e7:8c:
                    bd:10:6b:ba:fe:6d:a4:f1:c0:96:23:4c:ee:2b:25:
                    bc:1c:83:93:4f:37:cc:e9:87:a0:f2:42:62:97:a4:
                    54:07:41:00:ac:60:47:8f:26:7c:c0:d3:9c:c8:96:
                    21:db:ca:32:58:30:c8:a5:40:dd:09:ce:ae:1b:c7:
                    c9:67:ed:81:f2:a9:3c:9a:67:c0:e6:00:c1:59:9d:
                    54:3a:46:8e:85:2d:fe:ef:6e:59:eb:ef:eb:13:fc:
                    1f:e3:fb:5f:18:dd:0a:2d:d7:89:3a:11:41:50:9a:
                    74:18:b7:73:c6:93:d7:66:74:90:58:1d:2a:be:f6:
                    be:67:97:1a:57:9e:9f:18:2d:a7:43:06:6a:8b:7d:
                    0a:68:82:7b:64:f9:5c:ff:f9:40:2c:aa:e6:0d:f5:
                    5a:a9:cb:98:ae:39:c8:7b:e2:74:8f:a3:e6:e7:83:
                    51:33:e4:c3:56:ab:a2:0f:d2:1a:6b:9f:2e:78:f2:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:67:42:65:BB:F7:65:AC:91:62:EC:45:78:D8:86:11:89:66:FE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/2cc71add-527b-33ca-bca3-3aed5a7256fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac/e215a9e7-8c66-4e81-a077-2a73c903a0ac.crl

            X509v3 Authority Key Identifier:
                keyid:BB:CC:6E:8F:71:EE:5B:79:1C:68:18:85:B1:3F:64:3F:01:D1:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e215a9e7-8c66-4e81-a077-2a73c903a0ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.192.0/19
                IPv6:
                  2607:cdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:de:af:82:5c:6a:19:cf:a7:08:f8:ee:51:f0:92:b2:3d:9a:
         22:bb:43:a4:dc:2b:f2:4d:8e:2d:5e:84:37:b7:70:ee:d9:57:
         23:d5:81:49:9e:16:27:ea:47:85:a3:8f:6c:f3:a6:76:4a:95:
         7f:6a:bc:54:0a:5a:0f:01:80:c9:78:c9:be:75:2c:30:6f:c8:
         43:11:f1:a9:80:39:f1:72:11:a9:f0:1b:aa:a7:6d:ea:87:76:
         df:f6:6c:1b:58:12:ae:8a:a9:06:e5:6a:27:5c:8f:23:45:99:
         16:72:5b:06:cf:de:8c:0a:e2:3b:bc:9e:98:40:6e:9f:fe:0b:
         1d:f3:7d:04:ef:74:c2:67:e8:f0:c0:8d:60:f7:86:14:e3:0d:
         a4:32:17:b4:07:ea:d3:31:80:6b:7f:44:50:28:35:8a:95:98:
         d1:a1:1e:db:6c:5c:b6:bc:1f:71:2b:1b:8e:b2:29:2e:3c:59:
         45:df:a4:b1:fc:cd:21:b6:18:c7:fa:a6:61:f3:9c:db:bb:11:
         ca:49:54:c9:4c:86:e2:5c:c5:40:58:a0:9c:5a:df:1a:7a:02:
         84:5e:6e:31:b6:7b:d9:9b:51:3c:a0:4f:a7:7a:f4:6c:d7:90:
         96:fb:93:a4:95:94:13:f7:55:51:27:58:ff:38:d6:ae:ed:5d:
         45:2e:a7:0a
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEycMbJZlo2y9BydcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIxNWE5ZTctOGM2Ni00ZTgxLWEwNzctMmE3M2M5MDNh
MGFjMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk
YTIxYzc4NTctNjkxMC00MTQ2LTliZjctN2EzOWRlMmU2ODkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZqTMmyPdOwycSm+gp8qRtBYslbi2lAMpfM5
bmwJIVifiC2xg2vto8o2PuZwM39CDJBBHKYw2fgyvXW94MH3Zt7cjEEz4RZS54y9
EGu6/m2k8cCWI0zuKyW8HIOTTzfM6Yeg8kJil6RUB0EArGBHjyZ8wNOcyJYh28oy
WDDIpUDdCc6uG8fJZ+2B8qk8mmfA5gDBWZ1UOkaOhS3+725Z6+/rE/wf4/tfGN0K
LdeJOhFBUJp0GLdzxpPXZnSQWB0qvva+Z5caV56fGC2nQwZqi30KaIJ7ZPlc//lA
LKrmDfVaqcuYrjnIe+J0j6Pm54NRM+TDVquiD9Iaa58uePKNFQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFE9nQmW792WskWLsRXjYhhGJZv4cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1
YTllNy04YzY2LTRlODEtYTA3Ny0yYTczYzkwM2EwYWMvMmNjNzFhZGQtNTI3Yi0z
M2NhLWJjYTMtM2FlZDVhNzI1NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxNWE5ZTctOGM2Ni00ZTgxLWEw
NzctMmE3M2M5MDNhMGFjL2UyMTVhOWU3LThjNjYtNGU4MS1hMDc3LTJhNzNjOTAz
YTBhYy5jcmwwHwYDVR0jBBgwFoAUu8xuj3HuW3kcaBiFsT9kPwHRyCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjE1YTllNy04YzY2LTRlODEtYTA3Ny0yYTcz
YzkwM2EwYWMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFqeDAMA0E
AgACMAcDBQAmB83AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBADXer4JcahnPpwj47lHwkrI9miK7Q6TcK/JN
ji1ehDe3cO7ZVyPVgUmeFifqR4Wjj2zzpnZKlX9qvFQKWg8BgMl4yb51LDBvyEMR
8amAOfFyEanwG6qnbeqHdt/2bBtYEq6KqQblaidcjyNFmRZyWwbP3owK4ju8nphA
bp/+Cx3zfQTvdMJn6PDAjWD3hhTjDaQyF7QH6tMxgGt/RFAoNYqVmNGhHttsXLa8
H3ErG46yKS48WUXfpLH8zSG2GMf6pmHznNu7EcpJVMlMhuJcxUBYoJxa3xp6AoRe
bjG2e9mbUTygT6d69GzXkJb7k6SVlBP3VVEnWP841q7tXUUupwo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:10 2026 by rpki-client