Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa
File:                     2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json)
Hash identifier:          jK6YBD5H3i3Cc6KZdp3SZV1tLuR3Kmiid4WCKKmE1t0=
Subject key identifier:   51:FC:B3:D2:35:6A:81:8E:3B:8D:EE:53:D8:47:19:0B:B8:5C:BB:66
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584CB551EB804708C2C370760800
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     33392
IP address blocks:        192.149.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:eb:80:47:08:c2:c3:70:76:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=c2341812-b6d7-4b80-9667-600f54baa134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:39:04:31:fe:86:3c:fa:8e:e6:2b:96:15:
                    d2:4d:29:28:f8:9e:6d:0c:6f:e0:18:4b:78:aa:83:
                    4d:3f:6b:28:9c:1b:1d:88:00:56:ad:3d:69:ef:46:
                    ff:60:98:f5:fd:3d:46:8a:a2:22:30:09:a3:03:d0:
                    23:06:6d:7e:82:02:a0:08:58:84:05:f7:95:c3:8f:
                    5d:ea:bd:6a:1b:4c:0d:f4:59:8a:b3:3b:1b:f7:04:
                    2c:73:0a:3d:ce:23:e1:0f:44:91:ec:64:66:80:a7:
                    56:c9:2d:5b:0f:d7:f7:e9:9b:cf:d7:dd:1e:eb:b2:
                    e5:18:8f:5a:64:f0:92:a8:e1:7f:d9:6e:09:fc:78:
                    30:6a:09:59:7e:71:c4:02:54:11:e8:45:ab:87:37:
                    ea:33:21:db:dc:9c:81:29:e5:b7:30:72:d7:88:e7:
                    66:b1:5d:76:aa:dc:43:50:c1:bb:18:c7:6b:55:50:
                    16:f7:f2:2c:42:e3:37:1a:fe:24:44:24:99:40:40:
                    f7:8e:39:89:cc:43:45:ee:ed:c3:d6:f3:1a:74:6b:
                    d6:eb:62:5a:87:94:d8:21:94:7d:53:1d:ab:fc:60:
                    db:6d:2a:ed:5b:40:12:af:7d:53:f1:74:0b:e0:a5:
                    79:85:ec:28:58:12:2a:d0:57:68:ed:fa:0f:77:98:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:B3:D2:35:6A:81:8E:3B:8D:EE:53:D8:47:19:0B:B8:5C:BB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:1e:89:ef:3e:c3:a4:7e:b3:5c:23:13:50:02:c5:dd:07:
         49:3d:84:67:b5:5b:6d:cc:63:a7:ab:42:35:a5:ef:2a:ec:38:
         74:8a:92:fd:98:ea:a4:15:40:e8:08:b4:7a:30:32:da:df:da:
         a5:7d:7a:ae:d0:df:fa:6d:4a:ca:85:6a:81:c3:10:0a:50:1e:
         f1:c0:e0:f6:d4:3e:69:84:f4:cd:ff:25:4b:b7:98:ba:42:ee:
         86:49:00:fa:60:3a:69:a0:c2:4e:cf:4c:cc:52:d6:35:7f:6f:
         ed:eb:0f:f5:f4:3d:6d:8d:86:5a:c7:f6:dc:43:7a:ca:37:26:
         f0:fe:ec:4f:af:8b:df:de:60:9c:09:f6:81:85:8e:c8:a6:2c:
         47:81:0e:f4:08:32:e2:aa:26:1a:ea:18:f1:8f:1e:b9:0f:31:
         6e:73:b0:6d:0a:96:68:04:01:c7:e1:0f:8a:93:3d:b7:a8:5b:
         c9:4b:71:1f:28:61:63:6e:6c:74:c9:28:f5:7e:9c:36:4a:9f:
         94:07:5d:d2:95:8d:5a:8e:fd:01:95:23:ba:06:72:5d:42:6f:
         95:cc:d8:ee:64:cc:7e:85:70:f0:df:ca:16:0d:8f:0b:ae:f9:
         f1:19:5e:c4:c5:5a:0d:bf:2a:8a:0a:fa:dd:c2:bc:6a:6c:3c:
         57:17:22:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UeuARwjCw3B2CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk
YzIzNDE4MTItYjZkNy00YjgwLTk2NjctNjAwZjU0YmFhMTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1E5BDH+hjz6juYrlhXSTSko+J5tDG/gGEt4
qoNNP2sonBsdiABWrT1p70b/YJj1/T1GiqIiMAmjA9AjBm1+ggKgCFiEBfeVw49d
6r1qG0wN9FmKszsb9wQscwo9ziPhD0SR7GRmgKdWyS1bD9f36ZvP190e67LlGI9a
ZPCSqOF/2W4J/HgwaglZfnHEAlQR6EWrhzfqMyHb3JyBKeW3MHLXiOdmsV12qtxD
UMG7GMdrVVAW9/IsQuM3Gv4kRCSZQED3jjmJzENF7u3D1vMadGvW62Jah5TYIZR9
Ux2r/GDbbSrtW0ASr31T8XQL4KV5hewoWBIq0Fdo7foPd5jyUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFH8s9I1aoGOO43uU9hHGQu4XLtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMmE2MjJkYWItM2EwZS0z
ZDM4LTgyNjEtMDIwY2RlN2FjYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSoHonvPsOkfrNcIxNQAsXdB0k9hGe1W23MY6erQjWl7yrsOHSKkv2Y
6qQVQOgItHowMtrf2qV9eq7Q3/ptSsqFaoHDEApQHvHA4PbUPmmE9M3/JUu3mLpC
7oZJAPpgOmmgwk7PTMxS1jV/b+3rD/X0PW2NhlrH9txDeso3JvD+7E+vi9/eYJwJ
9oGFjsimLEeBDvQIMuKqJhrqGPGPHrkPMW5zsG0KlmgEAcfhD4qTPbeoW8lLcR8o
YWNubHTJKPV+nDZKn5QHXdKVjVqO/QGVI7oGcl1Cb5XM2O5kzH6FcPDfyhYNjwuu
+fEZXsTFWg2/KooK+t3CvGpsPFcXIlQ=
-----END CERTIFICATE-----
Generated at Wed Feb 18 23:19:39 2026 by rpki-client