Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b/18aeab3a-005e-37c3-ad8d-1573a2f3b9ee.roa
File:                     18aeab3a-005e-37c3-ad8d-1573a2f3b9ee.roa (raw, json)
Hash identifier:          nZqRi9TlRAaFnY3mncc+5GoMAtB3Vn+tLyjAIXoNp3w=
Subject key identifier:   76:1D:02:23:CC:32:76:CE:BD:0F:FC:13:53:90:70:08:66:CB:78:40
Certificate issuer:       /CN=a5749c8f-2c1c-4812-a8e2-83ec698ce50b
Certificate serial:       010D0C9F4328584CEAF8F09C342B65ADCD531640
Authority key identifier: 69:13:97:CC:79:ED:C0:EE:2A:88:CA:1E:DF:9A:38:00:FB:6C:76:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b/18aeab3a-005e-37c3-ad8d-1573a2f3b9ee.roa
Signing time:             Thu 19 Feb 2026 19:15:22 +0000
ROA not before:           Thu 19 Feb 2026 19:15:22 +0000
ROA not after:            Wed 20 May 2026 18:15:22 +0000
asID:                     63312
IP address blocks:        24.235.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b/a5749c8f-2c1c-4812-a8e2-83ec698ce50b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b/a5749c8f-2c1c-4812-a8e2-83ec698ce50b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:f8:f0:9c:34:2b:65:ad:cd:53:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5749c8f-2c1c-4812-a8e2-83ec698ce50b
        Validity
            Not Before: Feb 19 19:15:22 2026 GMT
            Not After : May 20 18:15:22 2026 GMT
        Subject: CN=5fda650d-0f66-465c-9ae2-ce6a0185cd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:c2:93:16:d6:29:33:ff:2d:0a:e5:45:5c:
                    0f:a4:81:48:4a:eb:c3:e8:62:ae:3a:21:8b:46:40:
                    40:ea:c9:ac:97:98:08:45:95:ef:ab:f9:60:56:1d:
                    19:13:a9:22:8d:ac:40:52:80:c6:ac:25:ac:f5:94:
                    5a:27:32:94:d3:a8:38:0e:30:3d:38:bf:1e:8b:96:
                    78:d9:cf:45:25:64:52:91:be:44:11:18:a9:a9:ee:
                    87:f9:f5:0e:dc:6f:fe:cb:7e:ac:7f:a3:5e:32:35:
                    8c:1a:b9:02:d4:75:85:b0:92:34:26:19:62:0c:68:
                    17:05:b6:8d:fa:a5:d0:dd:14:5c:72:15:c0:ae:cc:
                    75:5c:0f:d5:28:59:2a:6c:22:9e:e3:cc:b1:82:ee:
                    d5:99:5e:76:4a:ed:97:ef:e1:c2:1f:40:64:f9:a0:
                    72:7d:1b:c1:a3:c1:ea:e0:f0:fd:e3:9e:81:14:ce:
                    47:8a:58:0a:55:b7:f0:30:11:1a:9c:13:9b:f8:bc:
                    bc:c1:92:b2:4f:46:3c:22:ab:55:4c:1f:84:03:68:
                    d1:84:be:70:49:5f:92:22:d8:d9:8d:1f:60:8d:a3:
                    f2:68:7b:9d:ac:ca:d4:ae:4f:9a:b1:10:58:af:36:
                    b3:bd:10:84:87:31:1b:6d:fc:87:04:33:c2:f5:09:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:02:23:CC:32:76:CE:BD:0F:FC:13:53:90:70:08:66:CB:78:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b/18aeab3a-005e-37c3-ad8d-1573a2f3b9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b/a5749c8f-2c1c-4812-a8e2-83ec698ce50b.crl

            X509v3 Authority Key Identifier:
                keyid:69:13:97:CC:79:ED:C0:EE:2A:88:CA:1E:DF:9A:38:00:FB:6C:76:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a5749c8f-2c1c-4812-a8e2-83ec698ce50b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.235.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2c:77:58:5a:57:ae:e8:88:b0:7d:7c:c5:0e:b8:9e:9f:e6:
         f1:53:92:a3:0b:40:8e:88:6e:49:64:e1:d1:80:06:02:e3:2e:
         f8:e1:e2:e8:ba:79:c7:28:df:24:39:6f:eb:12:cc:13:db:87:
         3b:b2:9f:70:e1:ad:ce:e0:ab:43:e7:18:e3:6e:73:6c:65:ed:
         18:ca:0d:70:67:7d:65:56:33:4d:f8:8d:c4:56:87:df:5b:d0:
         e3:00:63:f5:71:67:25:ae:06:41:61:eb:bc:ab:c8:3d:cb:ea:
         57:d6:c8:ec:d6:8f:7c:15:5d:f9:ed:df:31:2e:ce:fa:2c:0a:
         01:44:63:89:36:57:51:43:b2:69:3d:8d:e0:05:d3:f1:7a:79:
         91:4d:a0:5b:6c:05:7c:d3:c4:56:9a:a1:9e:44:cc:3e:bc:90:
         a8:15:86:0d:60:1b:27:c9:be:f3:42:0c:cb:2e:bb:47:c1:54:
         52:51:fa:a2:76:bf:6c:52:d3:cc:8d:06:27:99:ea:25:ba:bb:
         60:36:76:31:3b:1c:91:01:22:c6:d9:a9:5e:be:54:a4:f1:8f:
         ff:54:ec:4f:83:a5:7e:ab:02:1b:f0:9a:d8:09:5c:a4:23:4c:
         8f:2d:63:86:b8:64:3f:91:8f:a5:5a:d8:c7:8f:c0:5e:64:95:
         68:ee:6c:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzq+PCcNCtlrc1TFkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU3NDljOGYtMmMxYy00ODEyLWE4ZTItODNlYzY5OGNl
NTBiMB4XDTI2MDIxOTE5MTUyMloXDTI2MDUyMDE4MTUyMlowLzEtMCsGA1UEAxMk
NWZkYTY1MGQtMGY2Ni00NjVjLTlhZTItY2U2YTAxODVjZDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DHCkxbWKTP/LQrlRVwPpIFISuvD6GKuOiGL
RkBA6smsl5gIRZXvq/lgVh0ZE6kijaxAUoDGrCWs9ZRaJzKU06g4DjA9OL8ei5Z4
2c9FJWRSkb5EERipqe6H+fUO3G/+y36sf6NeMjWMGrkC1HWFsJI0JhliDGgXBbaN
+qXQ3RRcchXArsx1XA/VKFkqbCKe48yxgu7VmV52Su2X7+HCH0Bk+aByfRvBo8Hq
4PD9456BFM5HilgKVbfwMBEanBOb+Ly8wZKyT0Y8IqtVTB+EA2jRhL5wSV+SItjZ
jR9gjaPyaHudrMrUrk+asRBYrzazvRCEhzEbbfyHBDPC9QlqJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYdAiPMMnbOvQ/8E1OQcAhmy3hAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hNTc0
OWM4Zi0yYzFjLTQ4MTItYThlMi04M2VjNjk4Y2U1MGIvMThhZWFiM2EtMDA1ZS0z
N2MzLWFkOGQtMTU3M2EyZjNiOWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTU3NDljOGYtMmMxYy00ODEyLWE4
ZTItODNlYzY5OGNlNTBiL2E1NzQ5YzhmLTJjMWMtNDgxMi1hOGUyLTgzZWM2OThj
ZTUwYi5jcmwwHwYDVR0jBBgwFoAUaROXzHntwO4qiMoe35o4APtsduUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hNTc0OWM4Zi0yYzFjLTQ4MTItYThlMi04M2Vj
Njk4Y2U1MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGOsFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcsd1haV67oiLB9fMUOuJ6f5vFTkqMLQI6Ibklk4dGABgLjLvjh4ui6
ecco3yQ5b+sSzBPbhzuyn3Dhrc7gq0PnGONuc2xl7RjKDXBnfWVWM034jcRWh99b
0OMAY/VxZyWuBkFh67yryD3L6lfWyOzWj3wVXfnt3zEuzvosCgFEY4k2V1FDsmk9
jeAF0/F6eZFNoFtsBXzTxFaaoZ5EzD68kKgVhg1gGyfJvvNCDMsuu0fBVFJR+qJ2
v2xS08yNBieZ6iW6u2A2djE7HJEBIsbZqV6+VKTxj/9U7E+DpX6rAhvwmtgJXKQj
TI8tY4a4ZD+Rj6Va2MePwF5klWjubK0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:30 2026 by rpki-client