Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c87893d-a568-39c4-a440-36007e28ebf1.roa
File:                     4c87893d-a568-39c4-a440-36007e28ebf1.roa (raw, json)
Hash identifier:          qom30pt+9TasiX8xu7kirzfRH9I8eAYlk/0ZvbHBzR0=
Subject key identifier:   F2:B2:AE:74:FA:5B:4A:FA:73:33:E4:A9:0B:46:21:EB:53:5B:6C:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C4D4559479DCC26A3A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c87893d-a568-39c4-a440-36007e28ebf1.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        204.178.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c4:d4:55:94:79:dc:c2:6a:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=c57f95ec-529d-41fe-822f-fbe104af9b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:05:4c:66:9a:f9:b1:ca:fd:a0:3f:fa:e2:
                    4b:d9:e0:c4:60:88:20:77:d7:5a:39:74:3e:5e:80:
                    4b:c2:17:1a:54:f5:f8:53:0e:3a:d9:f4:ec:f9:0d:
                    e3:02:2d:5e:a1:bb:32:58:58:c4:19:e6:1b:41:a7:
                    3a:1e:f2:93:57:60:66:aa:ef:8a:c1:5a:b1:06:7b:
                    46:0c:89:1f:51:f5:d2:17:4e:ec:c2:fb:e0:f4:1e:
                    9a:c3:48:3e:db:19:58:57:33:5d:9a:23:b7:9e:49:
                    dd:ab:a8:bd:a1:37:fc:41:46:a0:e5:bd:5f:ff:15:
                    49:20:dd:87:9a:7e:c6:4b:22:37:c1:c4:50:f9:f8:
                    86:3d:2f:1c:17:c9:a8:77:a9:21:3f:24:69:0d:97:
                    df:03:5d:f2:aa:58:ff:42:bf:4e:15:19:7a:02:7f:
                    e4:ca:37:dc:09:9b:89:c7:ea:04:61:13:a9:71:6a:
                    ca:de:b4:e1:19:a1:16:92:63:3e:4b:1c:b1:ee:37:
                    8f:b4:a9:87:d9:14:75:ca:8d:7a:1c:f9:69:b9:59:
                    ab:26:03:89:12:74:4c:a7:61:38:13:8a:ab:b0:23:
                    64:08:97:85:cf:ae:22:75:cc:26:24:1b:97:27:9c:
                    26:68:e8:d5:ca:b6:ad:fb:39:7c:86:6e:c0:9a:eb:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:AE:74:FA:5B:4A:FA:73:33:E4:A9:0B:46:21:EB:53:5B:6C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c87893d-a568-39c4-a440-36007e28ebf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.178.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:95:c2:04:e0:ce:9f:0b:1b:cb:1d:95:4f:80:ca:ef:09:85:
         f8:ef:06:35:61:fa:01:f9:73:88:a9:70:be:cf:12:b2:27:4b:
         dc:eb:1b:ff:9f:ec:1f:c2:68:f4:d0:f1:9e:4f:84:64:81:0a:
         0d:1e:19:d9:3e:d5:22:2a:d2:06:19:c8:d3:ee:55:d1:63:0e:
         73:68:c7:bc:9b:b6:bb:7d:b2:5e:e8:e1:c5:c6:02:77:1b:68:
         d1:e0:13:96:1d:56:d5:5c:e7:55:72:05:e0:f2:ea:95:d9:36:
         ea:94:7e:f6:21:1f:cd:7f:f1:51:8d:b4:eb:2f:9b:01:54:88:
         e5:25:c0:6c:aa:ae:5e:06:90:db:af:9b:f1:01:87:52:cf:b8:
         7c:87:64:c3:a6:dd:94:a0:25:ae:68:b7:75:e7:8f:a5:f9:90:
         91:49:d5:f2:50:3e:d2:8b:d1:5a:e4:d1:2f:80:cf:00:77:23:
         7f:88:b6:3c:81:c0:24:95:83:4c:ad:cd:87:6a:b9:aa:75:b2:
         9f:3e:43:ef:39:a1:13:0e:e0:60:a6:20:d8:21:a0:9f:21:c5:
         ee:c1:b3:ce:2d:e6:2f:4e:a9:84:87:60:f5:fa:35:99:cf:45:
         b8:af:2e:c0:ed:74:97:cd:41:58:da:c5:42:d8:fb:a1:a7:42:
         f8:5f:ef:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ8TUVZR53MJqOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
YzU3Zjk1ZWMtNTI5ZC00MWZlLTgyMmYtZmJlMTA0YWY5YjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8QFTGaa+bHK/aA/+uJL2eDEYIggd9daOXQ+
XoBLwhcaVPX4Uw462fTs+Q3jAi1eobsyWFjEGeYbQac6HvKTV2Bmqu+KwVqxBntG
DIkfUfXSF07swvvg9B6aw0g+2xlYVzNdmiO3nkndq6i9oTf8QUag5b1f/xVJIN2H
mn7GSyI3wcRQ+fiGPS8cF8mod6khPyRpDZffA13yqlj/Qr9OFRl6An/kyjfcCZuJ
x+oEYROpcWrK3rThGaEWkmM+Sxyx7jePtKmH2RR1yo16HPlpuVmrJgOJEnRMp2E4
E4qrsCNkCJeFz64idcwmJBuXJ5wmaOjVyrat+zl8hm7AmuuwSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKyrnT6W0r6czPkqQtGIetTW2wyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGM4Nzg5M2QtYTU2OC0z
OWM0LWE0NDAtMzYwMDdlMjhlYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLJHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6VwgTgzp8LG8sdlU+Ayu8JhfjvBjVh+gH5c4ipcL7PErInS9zrG/+f
7B/CaPTQ8Z5PhGSBCg0eGdk+1SIq0gYZyNPuVdFjDnNox7ybtrt9sl7o4cXGAncb
aNHgE5YdVtVc51VyBeDy6pXZNuqUfvYhH81/8VGNtOsvmwFUiOUlwGyqrl4GkNuv
m/EBh1LPuHyHZMOm3ZSgJa5ot3Xnj6X5kJFJ1fJQPtKL0Vrk0S+AzwB3I3+ItjyB
wCSVg0ytzYdquap1sp8+Q+85oRMO4GCmINghoJ8hxe7Bs84t5i9OqYSHYPX6NZnP
RbivLsDtdJfNQVjaxULY+6GnQvhf7xo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:23 2026 by rpki-client