Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2c03b3e-47bd-3023-8210-fff2de6bcad3.roa
File:                     b2c03b3e-47bd-3023-8210-fff2de6bcad3.roa (raw, json)
Hash identifier:          VjXj3XkmZkPcZWUkttzmp+KFLixE5uAgAgJtj4QKL4g=
Subject key identifier:   F9:92:44:A6:21:FE:F6:DE:A6:11:17:FB:A7:16:FD:BF:20:7B:B1:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA842BD156066F2B364E40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2c03b3e-47bd-3023-8210-fff2de6bcad3.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     54288
IP address blocks:        66.160.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:84:2b:d1:56:06:6f:2b:36:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=c259a940-e342-47cb-9b10-5f4eb0a7d2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:e2:a5:c8:6f:52:56:99:d4:2e:e2:20:64:
                    f7:ed:31:cc:98:b7:b9:31:77:4b:60:b6:6a:6a:cc:
                    80:15:e5:04:7f:bc:88:ea:c3:32:d5:04:2b:b1:01:
                    0e:1c:fa:d3:6b:51:c8:1b:96:13:99:58:8a:c7:0b:
                    3d:90:54:88:e8:33:42:37:1e:27:76:e7:e8:99:44:
                    8c:bd:b6:28:a3:4c:c7:f7:61:b7:f9:3b:ef:1d:a5:
                    a4:13:5e:f3:62:77:a9:ae:82:d9:a4:99:d0:70:1c:
                    03:02:bf:b6:86:bd:15:2b:e3:95:02:c6:cd:86:00:
                    b6:3f:97:68:a8:c2:28:8a:31:c1:59:4b:23:bc:dd:
                    35:16:4d:db:44:9c:67:d7:e6:f4:c1:98:a8:a5:75:
                    c6:ef:b3:83:90:d9:32:d1:3f:54:ab:b1:49:6c:de:
                    94:f8:06:9f:e4:db:9f:1e:f7:8e:77:dc:ef:11:7d:
                    89:44:2c:14:02:71:1c:f9:13:13:d6:6f:20:83:4a:
                    cc:1d:df:4c:4e:70:94:ee:81:06:d7:d6:d1:1d:5b:
                    3d:31:72:cf:8f:0d:68:bd:26:5e:58:a6:f8:d6:0b:
                    80:c1:a1:2e:4e:d3:4c:74:7d:89:93:fd:0d:92:d0:
                    71:74:40:b0:b8:2e:67:cd:ec:09:a4:ce:f1:15:0b:
                    f2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:92:44:A6:21:FE:F6:DE:A6:11:17:FB:A7:16:FD:BF:20:7B:B1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2c03b3e-47bd-3023-8210-fff2de6bcad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:50:96:25:83:7d:40:58:f1:eb:c5:6b:6f:41:df:d3:7a:
         fc:54:da:cc:b5:39:ef:e8:74:11:e6:3b:0f:a8:f6:ab:43:f8:
         d3:2d:22:5e:2b:0d:e9:f5:49:5e:aa:17:01:4c:e9:f8:7e:10:
         1f:2e:70:79:e1:bf:f5:2e:6f:0a:c7:1f:c4:ee:85:76:80:f9:
         c4:77:70:71:e2:4c:f1:56:50:8f:ab:8f:69:28:11:8a:df:16:
         05:de:82:ca:88:dc:18:72:c0:cb:f0:46:01:80:7c:ac:c8:81:
         f6:5d:93:ef:db:a5:f1:cf:76:c6:6b:88:37:8b:d7:b8:a6:46:
         67:7c:fe:7a:55:20:8e:b0:04:ae:4c:ea:37:a3:93:e7:5b:75:
         df:02:0c:73:d8:eb:a7:9f:b5:02:07:4b:d8:9d:48:e1:4a:f5:
         eb:0d:ee:4d:14:ca:a4:84:34:fc:3e:e1:95:86:6f:5d:a8:f9:
         e7:11:48:95:45:7a:e0:22:50:5a:b0:4b:0a:3d:37:3d:f1:5a:
         24:e7:c2:ca:0a:4d:b3:09:37:4d:19:84:e3:4b:98:49:d7:6c:
         f8:60:6f:a8:32:1b:a5:b8:0f:1f:cb:01:62:70:e3:f3:04:96:
         24:e0:84:e0:6b:59:92:d0:db:13:ff:a4:d8:cf:72:70:26:3d:
         e1:6a:9c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6oQr0VYGbys2TkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YzI1OWE5NDAtZTM0Mi00N2NiLTliMTAtNWY0ZWIwYTdkMmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ/ipchvUlaZ1C7iIGT37THMmLe5MXdLYLZq
asyAFeUEf7yI6sMy1QQrsQEOHPrTa1HIG5YTmViKxws9kFSI6DNCNx4ndufomUSM
vbYoo0zH92G3+TvvHaWkE17zYneproLZpJnQcBwDAr+2hr0VK+OVAsbNhgC2P5do
qMIoijHBWUsjvN01Fk3bRJxn1+b0wZiopXXG77ODkNky0T9Uq7FJbN6U+Aaf5Nuf
HveOd9zvEX2JRCwUAnEc+RMT1m8gg0rMHd9MTnCU7oEG19bRHVs9MXLPjw1ovSZe
WKb41guAwaEuTtNMdH2Jk/0NktBxdECwuC5nzewJpM7xFQvyRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmSRKYh/vbephEX+6cW/b8ge7F0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjJjMDNiM2UtNDdiZC0z
MDIzLTgyMTAtZmZmMmRlNmJjYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqDIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBLUJYlg31AWPHrxWtvQd/TevxU2sy1Oe/odBHmOw+o9qtD+NMtIl4r
Den1SV6qFwFM6fh+EB8ucHnhv/UubwrHH8TuhXaA+cR3cHHiTPFWUI+rj2koEYrf
FgXegsqI3BhywMvwRgGAfKzIgfZdk+/bpfHPdsZriDeL17imRmd8/npVII6wBK5M
6jejk+dbdd8CDHPY66eftQIHS9idSOFK9esN7k0UyqSENPw+4ZWGb12o+ecRSJVF
euAiUFqwSwo9Nz3xWiTnwsoKTbMJN00ZhONLmEnXbPhgb6gyG6W4Dx/LAWJw4/ME
liTghOBrWZLQ2xP/pNjPcnAmPeFqnDQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:11 2026 by rpki-client