Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa
File:                     70223726-522b-3882-97c5-dbf180615c24.roa (raw, json)
Hash identifier:          tYfPi6VJriRcp+dN+gyOhj4kY3xE6qi+9nSBybFguAo=
Subject key identifier:   67:6C:E8:87:C9:25:B5:A6:80:26:D6:77:D7:57:C8:68:62:22:86:05
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584CDC676B524702BD38FD52D000
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     399804
IP address blocks:        45.59.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:6b:52:47:02:bd:38:fd:52:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=a6bcfd00-a328-40d1-89a4-ddabec325ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:a3:ae:82:5a:7e:7a:52:a1:19:59:0c:4a:
                    69:33:2c:b6:5d:e1:3d:7f:01:6f:a2:9c:d6:4e:a5:
                    85:17:3e:14:3e:da:07:c1:b9:da:33:ee:98:66:1a:
                    f3:9a:94:ec:2d:bb:17:6d:6d:1c:ee:85:65:97:49:
                    1f:9c:ef:cc:f3:a8:47:e6:9b:dc:2d:1f:8b:72:ae:
                    41:6f:b6:32:8a:75:2c:10:cb:41:d9:a2:84:60:58:
                    f5:4c:9e:6b:1c:23:6e:94:8d:b8:ce:25:20:ed:dc:
                    f3:e4:2b:f6:bc:65:e1:31:8a:3e:8f:74:61:3a:a9:
                    3d:9b:17:dd:e1:c6:eb:c0:04:8d:ab:e6:b9:cc:45:
                    c1:32:93:90:c8:99:d4:89:31:62:b8:ac:6d:86:d1:
                    26:d8:29:5f:eb:d4:06:58:34:a3:9b:a3:b1:0b:b4:
                    4f:a4:66:04:9d:e8:a0:88:46:8b:70:e5:01:4b:de:
                    87:0b:b0:cc:72:42:63:4a:fe:62:66:db:f3:44:90:
                    58:34:66:ef:9f:c4:c7:7e:9c:02:10:47:17:ad:c7:
                    20:e2:51:68:55:5c:b5:53:30:ce:4e:c6:75:3d:74:
                    12:54:44:f3:46:1e:fd:b7:e1:a7:5f:7d:a5:d0:01:
                    3e:91:6b:a6:9f:de:ea:c9:9a:f5:1a:97:bf:7c:ae:
                    8e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6C:E8:87:C9:25:B5:A6:80:26:D6:77:D7:57:C8:68:62:22:86:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:11:9e:9a:95:01:6f:b1:0c:31:c0:9a:e2:a9:77:8c:7e:6e:
         46:13:7f:c9:97:28:94:f7:e6:b6:0e:60:21:c5:5a:d1:84:35:
         c7:94:68:fe:e5:a1:24:f9:65:5f:b0:65:96:31:dd:3e:e5:58:
         93:90:51:75:2b:c8:6b:1f:1f:b0:2b:61:2e:be:0c:9a:1a:3b:
         84:38:ca:7a:e5:eb:78:87:a3:59:56:dd:48:7e:a6:84:1b:19:
         7d:50:7f:34:6f:6a:61:ef:cc:52:90:50:1b:9b:65:0f:15:7b:
         e7:c2:12:f5:f8:9f:f9:17:f1:8b:0b:71:93:da:ba:7b:da:9d:
         3c:56:12:c3:d0:e5:13:42:2e:2e:05:d4:18:0e:85:88:49:54:
         1e:9b:7c:91:a9:5a:7e:17:86:12:8b:4f:44:0d:5f:2c:3c:26:
         a8:a3:9b:06:0f:65:fd:55:c8:3e:16:09:c5:f3:65:60:5c:8e:
         f6:0d:a7:6a:d6:5c:99:d1:77:a7:5b:94:1e:90:4f:a0:a7:b4:
         2f:0b:69:d4:7f:32:76:e1:68:32:a8:43:66:55:8e:e1:85:37:
         9d:32:b6:b7:b8:11:c7:10:0f:f9:39:6c:78:f9:31:b7:fa:59:
         da:dd:6f:4b:6c:26:29:45:c5:87:1c:3b:55:4c:99:b7:b6:c2:
         9b:3f:1e:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ2tSRwK9OP1S0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3
Y2IzMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
YTZiY2ZkMDAtYTMyOC00MGQxLTg5YTQtZGRhYmVjMzI1ZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhmjroJafnpSoRlZDEppMyy2XeE9fwFvopzW
TqWFFz4UPtoHwbnaM+6YZhrzmpTsLbsXbW0c7oVll0kfnO/M86hH5pvcLR+Lcq5B
b7YyinUsEMtB2aKEYFj1TJ5rHCNulI24ziUg7dzz5Cv2vGXhMYo+j3RhOqk9mxfd
4cbrwASNq+a5zEXBMpOQyJnUiTFiuKxthtEm2Clf69QGWDSjm6OxC7RPpGYEneig
iEaLcOUBS96HC7DMckJjSv5iZtvzRJBYNGbvn8THfpwCEEcXrccg4lFoVVy1UzDO
TsZ1PXQSVETzRh79t+GnX32l0AE+kWumn97qyZr1Gpe/fK6OLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGds6IfJJbWmgCbWd9dXyGhiIoYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0
OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvNzAyMjM3MjYtNTIyYi0z
ODgyLTk3YzUtZGJmMTgwNjE1YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw
MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj
N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw
OGUxYzdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALTt+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgRnpqVAW+xDDHAmuKpd4x+bkYTf8mXKJT35rYOYCHFWtGENceUaP7l
oST5ZV+wZZYx3T7lWJOQUXUryGsfH7ArYS6+DJoaO4Q4ynrl63iHo1lW3Uh+poQb
GX1QfzRvamHvzFKQUBubZQ8Ve+fCEvX4n/kX8YsLcZPaunvanTxWEsPQ5RNCLi4F
1BgOhYhJVB6bfJGpWn4XhhKLT0QNXyw8JqijmwYPZf1VyD4WCcXzZWBcjvYNp2rW
XJnRd6dblB6QT6CntC8LadR/MnbhaDKoQ2ZVjuGFN50ytre4EccQD/k5bHj5Mbf6
Wdrdb0tsJilFxYccO1VMmbe2wps/Hgc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:58 2026 by rpki-client