Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/b26f5196-2a7e-37ad-a8b7-ea7d464add7e.roa
File:                     b26f5196-2a7e-37ad-a8b7-ea7d464add7e.roa (raw, json)
Hash identifier:          MgNcWTBgpo/7094/Iy7C2c/aEyjsRc9enBRwwUMrfNo=
Subject key identifier:   D3:C9:D0:DF:DF:27:46:44:B0:56:85:21:1C:5C:C4:D2:CC:B5:7D:F9
Certificate issuer:       /CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
Certificate serial:       010D0C9F4328584D1B19E95A388F9B304CCB1820
Authority key identifier: FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/b26f5196-2a7e-37ad-a8b7-ea7d464add7e.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     395642
IP address blocks:        63.245.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:e9:5a:38:8f:9b:30:4c:cb:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=d497306c-b3e4-48a7-a7bf-9d67d56bb43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:ab:ad:e7:29:83:d3:4e:6e:8d:a1:77:bd:
                    ac:89:3c:b7:fe:e2:13:b3:c8:1f:ee:13:78:72:3f:
                    9a:be:89:66:fe:b6:b6:82:66:e1:06:f8:ee:05:99:
                    f4:86:89:67:4c:45:b7:12:71:e5:67:9c:c5:7b:8b:
                    8d:aa:bd:ea:0f:90:98:ad:01:fd:53:df:c2:ae:c6:
                    f4:f2:78:65:33:ef:0b:30:99:da:5d:9b:6e:58:dd:
                    73:d3:59:a7:4e:19:45:24:7d:e5:90:d1:6f:73:56:
                    48:d9:78:83:84:37:79:90:08:b4:11:41:5f:ff:0a:
                    90:e3:46:39:f0:6e:d1:ad:98:7d:cf:0f:b4:84:a4:
                    17:59:72:e5:35:07:b1:7d:92:80:ee:c5:3f:06:90:
                    c0:67:62:ab:66:32:64:6b:58:0a:40:bb:89:10:c8:
                    24:94:cd:54:fd:e4:a8:54:cb:e6:a4:57:6e:20:1b:
                    71:1a:07:45:01:1f:05:42:b6:a0:1e:e2:71:d4:ee:
                    ee:9a:aa:d9:c7:4b:97:64:ab:85:e6:c2:1e:67:73:
                    58:8b:d4:1e:f0:6b:a3:f0:e1:58:6a:12:82:a4:0b:
                    f3:87:5a:90:7e:ec:c2:8e:90:71:92:25:a9:ed:18:
                    b3:74:8b:a5:f8:63:58:aa:32:76:39:bf:f8:33:4e:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C9:D0:DF:DF:27:46:44:B0:56:85:21:1C:5C:C4:D2:CC:B5:7D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/b26f5196-2a7e-37ad-a8b7-ea7d464add7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:8c:4a:9f:86:57:11:29:f5:bc:53:ee:7a:4e:62:d3:75:
         bf:82:b3:3c:40:e0:29:48:e9:ba:3c:33:af:df:fc:9a:20:7f:
         28:1c:02:13:d2:a5:17:fc:19:35:c2:15:2d:71:6d:37:e1:e6:
         ec:37:c6:16:d0:b1:d9:63:29:9f:9f:8a:b8:fd:d2:86:d7:1f:
         49:2e:84:01:88:d8:da:a6:cf:9a:bc:57:90:7e:8e:cb:2b:a3:
         9f:f2:43:11:90:5a:6c:7b:e2:09:c2:19:46:e5:5b:36:2d:5e:
         ef:fb:23:80:b4:1d:82:40:c9:18:ac:1f:0e:4d:bf:3a:db:18:
         ec:22:db:8c:e5:fd:3d:af:6a:5a:15:f2:57:e2:fd:e7:69:f2:
         ef:58:e8:71:16:a3:f3:ea:85:9b:3a:b5:90:56:e6:65:36:f8:
         de:41:35:2d:2f:d1:2a:9e:e1:50:8e:a0:27:9a:f5:22:fe:f8:
         4d:85:4f:24:1e:4b:0c:d5:ad:0e:5a:45:06:8d:3b:c8:44:fa:
         b7:f1:a3:c7:3a:6e:8e:3d:32:73:e2:d5:58:1e:56:86:32:61:
         26:d5:f2:24:c8:77:65:de:ac:a0:c9:cd:1e:42:57:9b:31:16:
         9d:1f:f7:47:9a:d8:c6:56:15:71:7c:b0:7e:8c:b4:2b:f2:53:
         da:f0:18:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGelaOI+bMEzLGCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVm
ZGQyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
ZDQ5NzMwNmMtYjNlNC00OGE3LWE3YmYtOWQ2N2Q1NmJiNDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGCrrecpg9NObo2hd72siTy3/uITs8gf7hN4
cj+avolm/ra2gmbhBvjuBZn0holnTEW3EnHlZ5zFe4uNqr3qD5CYrQH9U9/Crsb0
8nhlM+8LMJnaXZtuWN1z01mnThlFJH3lkNFvc1ZI2XiDhDd5kAi0EUFf/wqQ40Y5
8G7RrZh9zw+0hKQXWXLlNQexfZKA7sU/BpDAZ2KrZjJka1gKQLuJEMgklM1U/eSo
VMvmpFduIBtxGgdFAR8FQragHuJx1O7umqrZx0uXZKuF5sIeZ3NYi9Qe8Guj8OFY
ahKCpAvzh1qQfuzCjpBxkiWp7RizdIul+GNYqjJ2Ob/4M05CgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPJ0N/fJ0ZEsFaFIRxcxNLMtX35MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjNj
MDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZkZDIvYjI2ZjUxOTYtMmE3ZS0z
N2FkLWE4YjctZWE3ZDQ2NGFkZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIzYzAyMmUtNDY3OS00NTMwLWFk
M2EtMWRmMzA0MWVmZGQyLzJiM2MwMjJlLTQ2NzktNDUzMC1hZDNhLTFkZjMwNDFl
ZmRkMi5jcmwwHwYDVR0jBBgwFoAU/sirHHbHOvVFD4dFwsu8DT689V4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYz
MDQxZWZkZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/XUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu4jEqfhlcRKfW8U+56TmLTdb+CszxA4ClI6bo8M6/f/JogfygcAhPS
pRf8GTXCFS1xbTfh5uw3xhbQsdljKZ+firj90obXH0kuhAGI2Nqmz5q8V5B+jssr
o5/yQxGQWmx74gnCGUblWzYtXu/7I4C0HYJAyRisHw5NvzrbGOwi24zl/T2valoV
8lfi/edp8u9Y6HEWo/PqhZs6tZBW5mU2+N5BNS0v0Sqe4VCOoCea9SL++E2FTyQe
SwzVrQ5aRQaNO8hE+rfxo8c6bo49MnPi1VgeVoYyYSbV8iTId2XerKDJzR5CV5sx
Fp0f90ea2MZWFXF8sH6MtCvyU9rwGMg=
-----END CERTIFICATE-----
Generated at Wed Mar 18 20:27:44 2026 by rpki-client