Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1abfb895-2b7d-37c3-a600-980b35057f17.roa
File:                     1abfb895-2b7d-37c3-a600-980b35057f17.roa (raw, json)
Hash identifier:          dEGmJyo5sMHz9JwcYxCf/+3Ey7gdN/HZj/qP6fX8i5M=
Subject key identifier:   C9:26:C2:19:A8:53:41:90:9B:EE:69:EA:AC:A2:63:85:96:0B:8E:A6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584CA32C5BFD1C04C77287ABFE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1abfb895-2b7d-37c3-a600-980b35057f17.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     36522
IP address blocks:        67.69.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:5b:fd:1c:04:c7:72:87:ab:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=1a26fdfe-62f7-45ce-a9c5-7989d7b8c9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:ea:8f:2d:f1:b5:a9:07:14:83:66:0a:ad:
                    df:36:ef:4a:6b:e6:38:9f:89:e3:b3:87:0a:42:f4:
                    45:b8:f1:0c:53:fe:92:23:90:9f:a3:62:b1:79:19:
                    5d:89:6f:af:97:96:a8:98:6a:36:5a:4c:28:51:8c:
                    c5:71:24:4e:19:7a:49:c9:c3:67:f7:5b:ed:5e:98:
                    5c:1e:15:ab:1e:c8:75:eb:f0:b5:64:d2:43:51:5a:
                    31:4f:c8:bd:38:48:70:73:b3:d5:da:16:ab:3a:ca:
                    a9:08:20:93:29:df:68:b6:3c:ac:d2:ea:fb:63:d8:
                    97:f6:ca:52:e3:dc:c5:8f:8c:40:4f:83:32:6e:a1:
                    1a:7e:41:78:c5:f2:b0:88:79:8e:8f:94:ad:1f:03:
                    75:87:10:d6:e6:0b:62:96:08:89:ba:9f:86:ae:ae:
                    55:c3:da:8c:57:7b:45:ee:c9:08:d2:c1:10:fe:c7:
                    50:95:fd:b1:df:68:e4:b1:73:28:f4:4f:f2:c5:b2:
                    25:8a:83:3b:87:28:22:ca:4a:96:7b:d0:7e:79:b2:
                    3d:9e:51:03:61:52:f7:59:f3:1f:d9:d5:fc:3a:b2:
                    cf:4e:ef:82:66:50:6f:d0:9c:98:bc:d2:ff:cd:4e:
                    ed:f1:f7:64:96:51:a2:87:47:38:1f:ad:78:a4:85:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:26:C2:19:A8:53:41:90:9B:EE:69:EA:AC:A2:63:85:96:0B:8E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1abfb895-2b7d-37c3-a600-980b35057f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:37:88:c7:3b:4d:2b:3a:2b:a2:87:e6:15:71:26:5c:24:b1:
         2d:bf:8f:f5:8b:e1:9b:c4:52:60:79:35:17:42:ac:bb:49:60:
         72:5d:72:cd:83:df:a3:df:60:6b:5b:3e:96:c0:a6:6a:a2:ff:
         9c:b3:ef:57:ad:00:1c:33:ed:30:88:55:2c:24:8d:15:d4:be:
         09:1c:38:b6:1c:92:c3:9f:1b:12:4f:8b:92:56:f5:80:89:c3:
         27:c1:8d:44:a1:0c:49:74:ce:8f:11:e7:30:8f:15:58:92:62:
         eb:d3:58:ee:47:cb:a7:4b:be:cb:f1:2f:a6:0b:9c:6a:21:68:
         64:96:59:00:49:db:ca:4d:da:78:f4:94:98:07:d7:54:fd:94:
         f8:bb:12:46:e3:90:a9:f7:cf:da:a3:6a:5f:d5:a4:42:ef:ec:
         0a:6e:29:e0:d0:a9:33:11:42:f2:84:d7:04:f0:57:cb:9b:e3:
         cc:6f:f1:d3:8b:72:08:ba:be:21:77:5e:64:d0:53:3f:52:c7:
         8c:07:3a:7c:f3:e0:4e:13:39:10:7a:30:ff:d6:b2:34:a0:05:
         9a:2b:fc:3e:70:ed:02:d9:a7:62:b0:9b:15:e1:34:c3:b7:07:
         fa:4c:45:b0:4e:b6:ca:a5:3b:a9:b7:5b:5a:b2:fd:f3:90:09:
         78:eb:c1:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLFv9HATHcoer/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MWEyNmZkZmUtNjJmNy00NWNlLWE5YzUtNzk4OWQ3YjhjOWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVHqjy3xtakHFINmCq3fNu9Ka+Y4n4njs4cK
QvRFuPEMU/6SI5Cfo2KxeRldiW+vl5aomGo2WkwoUYzFcSROGXpJycNn91vtXphc
HhWrHsh16/C1ZNJDUVoxT8i9OEhwc7PV2harOsqpCCCTKd9otjys0ur7Y9iX9spS
49zFj4xAT4MybqEafkF4xfKwiHmOj5StHwN1hxDW5gtilgiJup+Grq5Vw9qMV3tF
7skI0sEQ/sdQlf2x32jksXMo9E/yxbIlioM7hygiykqWe9B+ebI9nlEDYVL3WfMf
2dX8OrLPTu+CZlBv0JyYvNL/zU7t8fdkllGih0c4H614pIXfswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkmwhmoU0GQm+5p6qyiY4WWC46mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWFiZmI4OTUtMmI3ZC0z
N2MzLWE2MDAtOTgwYjM1MDU3ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ0VHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAE3iMc7TSs6K6KH5hVxJlwksS2/j/WL4ZvEUmB5NRdCrLtJYHJdcs2D
36PfYGtbPpbApmqi/5yz71etABwz7TCIVSwkjRXUvgkcOLYcksOfGxJPi5JW9YCJ
wyfBjUShDEl0zo8R5zCPFViSYuvTWO5Hy6dLvsvxL6YLnGohaGSWWQBJ28pN2nj0
lJgH11T9lPi7EkbjkKn3z9qjal/VpELv7ApuKeDQqTMRQvKE1wTwV8ub48xv8dOL
cgi6viF3XmTQUz9Sx4wHOnzz4E4TORB6MP/WsjSgBZor/D5w7QLZp2KwmxXhNMO3
B/pMRbBOtsqlO6m3W1qy/fOQCXjrwWA=
-----END CERTIFICATE-----
Generated at Fri Feb 27 04:54:31 2026 by rpki-client