Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c636b0ae-e028-3099-8047-a0fc908ca13f.roa
File:                     c636b0ae-e028-3099-8047-a0fc908ca13f.roa (raw, json)
Hash identifier:          Kgpya/PJIkyxLDhOOWFJkW2A7JmlBs7yPLk+rHlTvf8=
Subject key identifier:   D1:A0:01:04:C0:50:81:6C:A4:F1:DF:2B:2C:26:98:D3:15:1C:81:2F
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584D24E028DE8939234ECCF28380
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c636b0ae-e028-3099-8047-a0fc908ca13f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        207.126.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:28:de:89:39:23:4e:cc:f2:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=801c4b2c-2761-4cd9-8033-82062f528ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:8e:a8:49:a7:07:0f:b4:2d:d9:15:0d:78:
                    99:25:37:5a:fd:ad:96:0f:94:63:ca:cb:b9:71:9e:
                    6e:1b:b3:43:4a:54:f1:31:f1:0e:64:02:da:84:54:
                    a7:22:37:b0:fe:a0:16:09:78:97:6a:93:b9:11:be:
                    d8:52:b1:23:7c:e3:76:a5:a7:10:88:ba:43:79:6f:
                    d4:41:2e:23:b6:38:9a:92:91:cb:fa:ff:c9:b7:49:
                    2f:d8:40:14:7a:80:f6:49:40:11:bc:0e:97:d5:0e:
                    96:68:84:93:bb:81:7d:dc:1d:86:93:20:ac:69:6f:
                    d0:8b:c4:0e:2d:ae:e8:9e:19:a7:e7:75:f3:ec:dc:
                    41:39:4e:d1:84:13:cb:34:97:83:5f:09:82:51:5d:
                    6a:95:c1:e7:10:4c:4c:44:31:e2:fe:80:b0:3b:c0:
                    6d:38:89:54:cc:4d:5e:b7:f9:03:8f:73:d6:b5:2e:
                    be:81:73:a7:ac:6d:d0:9d:9c:b2:52:c5:8b:e5:78:
                    b0:b7:a2:d6:2a:a9:da:c0:a7:ad:f3:2b:80:1f:82:
                    7b:86:74:64:94:98:fe:0a:d6:f9:1e:c9:7e:b9:71:
                    2f:12:e6:51:1a:8b:61:f3:4a:69:d9:3e:f2:45:7d:
                    4a:c5:da:73:73:20:2e:0d:3f:ba:40:54:91:2e:83:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:01:04:C0:50:81:6C:A4:F1:DF:2B:2C:26:98:D3:15:1C:81:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c636b0ae-e028-3099-8047-a0fc908ca13f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:08:6a:26:7b:a6:fe:c0:b7:82:2a:1a:78:de:3c:b0:49:2e:
         dc:e9:e2:44:fe:07:9c:29:cb:4a:e1:8b:bb:1c:99:69:11:de:
         f2:8d:9a:31:ee:3c:82:88:a2:2d:dc:9d:e2:42:1f:d3:8e:2b:
         5a:48:6d:76:35:7c:8c:da:60:2e:32:12:3f:f1:a2:e6:2a:49:
         2e:95:ac:cb:8f:1d:2e:a6:55:22:8c:66:21:24:52:d4:f7:a7:
         9c:7b:b0:d2:92:44:ee:cd:fb:cd:d3:1e:63:01:0e:fc:2e:7d:
         00:3f:09:e7:9a:96:1b:fa:ed:cb:60:81:96:16:ed:c0:d8:49:
         a3:f2:cf:50:8e:4f:de:d3:3c:66:b1:3f:57:4d:4d:91:65:49:
         ad:2b:88:f1:bb:57:3e:4e:0c:61:96:bd:b7:c0:e1:ff:02:7f:
         08:6f:d6:48:a2:bb:8d:a8:f3:9a:d2:a0:c7:e0:0e:a9:7a:4b:
         f2:70:0e:9c:38:1d:ca:b9:00:07:0f:9a:ed:35:98:40:77:7d:
         55:0e:e9:1a:aa:25:c0:af:41:d4:63:5b:d1:18:bf:db:b4:b0:
         72:6a:ad:aa:ec:71:02:3d:c2:06:5a:bd:0d:ea:a9:9a:ff:d8:
         52:9e:ed:30:62:9d:ab:e0:2d:4c:d7:16:50:db:0c:d0:c6:8a:
         3d:db:f8:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CjeiTkjTszyg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ODAxYzRiMmMtMjc2MS00Y2Q5LTgwMzMtODIwNjJmNTI4YWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRSOqEmnBw+0LdkVDXiZJTda/a2WD5Rjysu5
cZ5uG7NDSlTxMfEOZALahFSnIjew/qAWCXiXapO5Eb7YUrEjfON2pacQiLpDeW/U
QS4jtjiakpHL+v/Jt0kv2EAUeoD2SUARvA6X1Q6WaISTu4F93B2GkyCsaW/Qi8QO
La7onhmn53Xz7NxBOU7RhBPLNJeDXwmCUV1qlcHnEExMRDHi/oCwO8BtOIlUzE1e
t/kDj3PWtS6+gXOnrG3QnZyyUsWL5Xiwt6LWKqnawKet8yuAH4J7hnRklJj+Ctb5
Hsl+uXEvEuZRGoth80pp2T7yRX1KxdpzcyAuDT+6QFSRLoNv3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNGgAQTAUIFspPHfKywmmNMVHIEvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvYzYzNmIwYWUtZTAyOC0z
MDk5LTgwNDctYTBmYzkwOGNhMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz36QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAIaiZ7pv7At4IqGnjePLBJLtzp4kT+B5wpy0rhi7scmWkR3vKNmjHu
PIKIoi3cneJCH9OOK1pIbXY1fIzaYC4yEj/xouYqSS6VrMuPHS6mVSKMZiEkUtT3
p5x7sNKSRO7N+83THmMBDvwufQA/Ceealhv67ctggZYW7cDYSaPyz1COT97TPGax
P1dNTZFlSa0riPG7Vz5ODGGWvbfA4f8Cfwhv1kiiu42o85rSoMfgDql6S/JwDpw4
Hcq5AAcPmu01mEB3fVUO6RqqJcCvQdRjW9EYv9u0sHJqrarscQI9wgZavQ3qqZr/
2FKe7TBinavgLUzXFlDbDNDGij3b+OA=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:08 2026 by rpki-client