Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa
File:                     a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa (raw, json)
Hash identifier:          DM3+T8gUVt9Znf01aNY2NEqFghV1iX7Xcv3vMfIdnoE=
Subject key identifier:   11:02:4C:0C:78:CB:41:FE:76:68:9E:14:0F:09:CA:2F:F9:AE:71:E1
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D1F4A768AE8B62D1492AE84C0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        104.237.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:76:8a:e8:b6:2d:14:92:ae:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=deae294a-4906-427b-be8a-715cb10e5901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:89:89:8a:46:2e:e7:9f:5a:e4:dd:c4:74:
                    46:c0:c7:ca:92:f1:64:6a:40:aa:98:38:d0:6c:01:
                    6f:b6:21:e3:47:3f:99:7e:6c:c9:51:f9:cb:ef:27:
                    9e:5a:2e:96:67:7e:03:1b:85:7b:d6:2b:6b:4f:25:
                    b5:d1:28:8b:b2:88:53:74:52:09:ed:39:99:82:47:
                    34:ae:00:50:ed:67:a9:08:72:a3:78:b1:f2:63:ec:
                    13:ab:a2:66:66:b8:85:ed:e1:5e:1d:e1:43:3c:66:
                    90:b3:cd:0a:e5:ca:c0:5b:22:97:ae:54:e1:ff:2f:
                    7b:8d:e5:16:63:77:f4:3e:f2:e1:56:c8:de:3a:ad:
                    bf:4c:87:4f:4c:df:fd:73:7a:07:90:76:d5:6d:7f:
                    8b:2a:c5:bb:cc:a9:ac:67:fe:16:33:5c:03:02:26:
                    bd:98:2b:4f:ec:77:a1:57:ba:37:71:79:cf:e2:53:
                    bc:10:ab:ce:53:c1:46:cf:07:7d:56:a7:ec:64:11:
                    e7:55:c0:1e:ab:ea:8a:57:9c:bb:f6:e1:64:37:a3:
                    69:06:ba:4c:60:1c:bb:14:71:38:70:2b:b5:18:da:
                    8f:a1:02:ee:f4:78:11:1a:4b:85:f3:c1:a2:a8:eb:
                    a7:0f:16:eb:65:90:79:03:cf:07:fc:aa:6f:cb:f9:
                    bd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:02:4C:0C:78:CB:41:FE:76:68:9E:14:0F:09:CA:2F:F9:AE:71:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a1e4c146-0d89-3f2f-90e3-39b6dacb84e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f4:05:f0:f2:7c:41:fb:24:c6:99:0f:7e:e4:33:94:26:40:
         75:2b:8b:9e:ea:0b:59:ff:d0:7a:cc:16:33:f2:ba:df:b0:b3:
         e3:e2:9a:1b:d0:0c:89:f2:b9:46:4e:50:bc:e6:53:9b:0c:64:
         80:4e:42:ea:9c:ea:cd:e3:97:83:29:d7:df:4e:1f:c9:38:43:
         88:68:d5:10:f3:d8:70:06:49:4d:21:6e:ef:37:0e:9f:47:d4:
         1c:ce:dd:cb:7a:6f:5b:25:b4:23:47:fa:2f:f0:ef:7e:89:08:
         bd:20:cf:02:fd:fe:a7:5c:bb:26:fa:0a:e0:67:54:4d:fa:b7:
         84:70:f1:5f:d7:5c:e1:7c:7c:e9:12:ad:d6:7e:b0:72:30:7a:
         43:ec:95:fd:04:2d:36:8b:43:fc:4a:f2:20:78:a1:9a:5f:fb:
         a0:c3:ec:9c:30:ed:2a:88:67:6f:f5:47:2d:b9:77:39:3d:21:
         4c:c8:b6:7b:c0:69:ac:26:ca:39:29:07:63:66:e5:12:cc:54:
         21:b6:b1:a5:d7:0e:3b:a7:e4:ae:e9:a5:34:9b:a0:8c:25:e2:
         0e:30:60:e8:c9:fd:5c:0f:60:b4:14:c7:79:be:d6:c4:60:23:
         98:ce:f6:0c:56:aa:92:5f:aa:ad:42:30:f5:6c:8b:99:bb:13:
         f0:2b:a4:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnaK6LYtFJKuhMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZGVhZTI5NGEtNDkwNi00MjdiLWJlOGEtNzE1Y2IxMGU1OTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK+JiYpGLuefWuTdxHRGwMfKkvFkakCqmDjQ
bAFvtiHjRz+ZfmzJUfnL7yeeWi6WZ34DG4V71itrTyW10SiLsohTdFIJ7TmZgkc0
rgBQ7WepCHKjeLHyY+wTq6JmZriF7eFeHeFDPGaQs80K5crAWyKXrlTh/y97jeUW
Y3f0PvLhVsjeOq2/TIdPTN/9c3oHkHbVbX+LKsW7zKmsZ/4WM1wDAia9mCtP7Heh
V7o3cXnP4lO8EKvOU8FGzwd9VqfsZBHnVcAeq+qKV5y79uFkN6NpBrpMYBy7FHE4
cCu1GNqPoQLu9HgRGkuF88GiqOunDxbrZZB5A88H/Kpvy/m9bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBECTAx4y0H+dmieFA8Jyi/5rnHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTFlNGMxNDYtMGQ4OS0z
ZjJmLTkwZTMtMzliNmRhY2I4NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO2oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKj0BfDyfEH7JMaZD37kM5QmQHUri57qC1n/0HrMFjPyut+ws+PimhvQ
DInyuUZOULzmU5sMZIBOQuqc6s3jl4Mp199OH8k4Q4ho1RDz2HAGSU0hbu83Dp9H
1BzO3ct6b1sltCNH+i/w736JCL0gzwL9/qdcuyb6CuBnVE36t4Rw8V/XXOF8fOkS
rdZ+sHIwekPslf0ELTaLQ/xK8iB4oZpf+6DD7Jww7SqIZ2/1Ry25dzk9IUzItnvA
aawmyjkpB2Nm5RLMVCG2saXXDjun5K7ppTSboIwl4g4wYOjJ/VwPYLQUx3m+1sRg
I5jO9gxWqpJfqq1CMPVsi5m7E/ArpHk=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:58:54 2026 by rpki-client