Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/324e62eb-f012-35b1-b204-8dd31b1742d4.roa
File:                     324e62eb-f012-35b1-b204-8dd31b1742d4.roa (raw, json)
Hash identifier:          1Ygfk9ou3TLfNItPIU8I6Wu52G22lliG43E2fgvvR3Y=
Subject key identifier:   E8:68:5E:6B:50:8F:17:16:B6:82:43:1F:B1:5C:64:8E:41:7E:A3:02
Certificate issuer:       /CN=778754ac-5240-4fc0-85b4-8e68334c69e2
Certificate serial:       010D0C9F4328584CC1B1802FD8E5018530A8FB80
Authority key identifier: 92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/324e62eb-f012-35b1-b204-8dd31b1742d4.roa
Signing time:             Fri 02 Jan 2026 14:00:39 +0000
ROA not before:           Fri 02 Jan 2026 14:00:39 +0000
ROA not after:            Thu 02 Apr 2026 13:00:39 +0000
asID:                     3562
IP address blocks:        192.73.207.0/24 maxlen: 32
                          2620:106:6000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:b1:80:2f:d8:e5:01:85:30:a8:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778754ac-5240-4fc0-85b4-8e68334c69e2
        Validity
            Not Before: Jan  2 14:00:39 2026 GMT
            Not After : Apr  2 13:00:39 2026 GMT
        Subject: CN=aef282d9-0ae9-42bd-971f-01c69181ff27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:ab:3c:36:3a:f0:6b:01:b3:ca:fd:70:c8:
                    58:68:bd:14:27:e7:2c:86:37:2b:fe:a4:9f:4d:85:
                    f7:b6:08:35:93:12:22:bb:3a:5a:67:57:f0:0d:78:
                    1c:15:3d:4a:42:ba:e1:07:1f:bd:5b:32:f6:b4:32:
                    aa:5f:ed:3d:ab:0e:c1:73:6b:42:cc:31:6a:81:bd:
                    9a:6d:db:ea:c0:21:fb:52:e2:7d:48:33:24:be:17:
                    bd:6f:14:20:5d:1a:f8:db:0c:25:a8:3e:dd:e6:b6:
                    c1:ab:4a:40:54:fa:a3:30:db:13:07:3d:cb:16:42:
                    d2:81:ec:09:ba:ba:1f:f6:a8:d3:96:18:78:03:fa:
                    29:02:9e:bf:33:d2:79:45:cb:eb:01:1a:9f:73:00:
                    bc:5e:bf:db:ac:8d:39:f9:30:3a:32:be:a4:59:22:
                    55:67:22:b5:41:14:d4:6b:c9:75:27:cf:01:ff:10:
                    2c:29:d9:6a:ae:1c:8a:b2:a3:3a:aa:d4:41:a2:c1:
                    15:4d:06:14:9b:74:97:ba:a5:fc:0c:87:87:36:f4:
                    c3:7b:11:85:f5:15:1c:1d:d8:33:83:21:f5:f5:1d:
                    6f:e4:ac:93:fb:4c:3d:7d:05:e6:e6:08:32:e8:25:
                    b7:d7:e8:80:58:e0:6b:da:62:cc:31:2e:31:2d:94:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:68:5E:6B:50:8F:17:16:B6:82:43:1F:B1:5C:64:8E:41:7E:A3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/324e62eb-f012-35b1-b204-8dd31b1742d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl

            X509v3 Authority Key Identifier:
                keyid:92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.73.207.0/24
                IPv6:
                  2620:106:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:5a:3e:ee:eb:65:3f:f5:e2:61:d6:bd:ca:37:13:95:8e:
         3f:f5:93:4c:21:e3:e7:a1:8e:e0:ab:c7:97:d7:92:b2:3b:74:
         d4:23:30:f6:3d:74:23:3b:08:d0:7c:53:87:68:6a:f1:43:5a:
         fc:a8:f7:9b:9a:ad:b4:34:90:b3:79:0e:9e:bc:81:9f:12:85:
         b2:47:28:8c:88:e6:da:c5:73:1b:87:10:d6:75:f6:d1:48:a8:
         ad:2f:07:f2:ba:ff:f3:f6:ac:99:93:da:e6:4e:80:55:da:b3:
         20:72:37:4c:d8:a5:9e:9e:be:09:b5:af:04:01:fa:47:df:1a:
         bc:b7:59:56:06:eb:73:10:e1:bd:d7:2e:e5:95:7e:26:bf:fe:
         90:56:00:32:82:df:75:1f:ab:4b:d2:eb:09:39:d0:61:e0:51:
         ff:ba:67:4d:4a:98:bb:05:bc:af:d0:c1:f1:7c:8f:ef:1a:70:
         8f:fb:ca:0a:ad:a0:60:92:f5:44:6a:ed:21:23:f2:91:7c:34:
         2d:59:e8:57:95:c2:cc:cc:62:a4:e7:96:a8:6f:41:6f:22:45:
         25:c3:ec:6c:f8:0c:85:55:ec:03:92:e8:65:0e:73:58:07:62:
         97:de:08:92:47:ab:ea:c9:bc:3c:64:34:41:1a:95:62:1a:41:
         9f:c5:a0:cf
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzBsYAv2OUBhTCo+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc4NzU0YWMtNTI0MC00ZmMwLTg1YjQtOGU2ODMzNGM2
OWUyMB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk
YWVmMjgyZDktMGFlOS00MmJkLTk3MWYtMDFjNjkxODFmZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0varPDY68GsBs8r9cMhYaL0UJ+cshjcr/qSf
TYX3tgg1kxIiuzpaZ1fwDXgcFT1KQrrhBx+9WzL2tDKqX+09qw7Bc2tCzDFqgb2a
bdvqwCH7UuJ9SDMkvhe9bxQgXRr42wwlqD7d5rbBq0pAVPqjMNsTBz3LFkLSgewJ
urof9qjTlhh4A/opAp6/M9J5RcvrARqfcwC8Xr/brI05+TA6Mr6kWSJVZyK1QRTU
a8l1J88B/xAsKdlqrhyKsqM6qtRBosEVTQYUm3SXuqX8DIeHNvTDexGF9RUcHdgz
gyH19R1v5KyT+0w9fQXm5ggy6CW31+iAWOBr2mLMMS4xLZQkGwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFOhoXmtQjxcWtoJDH7FcZI5BfqMCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Nzg3
NTRhYy01MjQwLTRmYzAtODViNC04ZTY4MzM0YzY5ZTIvMzI0ZTYyZWItZjAxMi0z
NWIxLWIyMDQtOGRkMzFiMTc0MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzc4NzU0YWMtNTI0MC00ZmMwLTg1
YjQtOGU2ODMzNGM2OWUyLzc3ODc1NGFjLTUyNDAtNGZjMC04NWI0LThlNjgzMzRj
NjllMi5jcmwwHwYDVR0jBBgwFoAUkidncW8grHgYUb0AdYXEpLDTAuIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83Nzg3NTRhYy01MjQwLTRmYzAtODViNC04ZTY4
MzM0YzY5ZTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwEnPMA4E
AgACMAgDBgQmIAEGYDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhplo+7utlP/XiYda9yjcTlY4/9ZNMIePn
oY7gq8eX15KyO3TUIzD2PXQjOwjQfFOHaGrxQ1r8qPebmq20NJCzeQ6evIGfEoWy
RyiMiObaxXMbhxDWdfbRSKitLwfyuv/z9qyZk9rmToBV2rMgcjdM2KWenr4Jta8E
AfpH3xq8t1lWButzEOG91y7llX4mv/6QVgAygt91H6tL0usJOdBh4FH/umdNSpi7
Bbyv0MHxfI/vGnCP+8oKraBgkvVEau0hI/KRfDQtWehXlcLMzGKk55aob0FvIkUl
w+xs+AyFVewDkuhlDnNYB2KX3giSR6vqybw8ZDRBGpViGkGfxaDP
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:02 2026 by rpki-client