Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
File:                     dd732f92-179e-33d5-9832-59f3b948cc7c.roa (raw, json)
Hash identifier:          7ZwTBb3u4FM8wq3bjan5DJpv83gA9/e+qnlcO1O7DUI=
Subject key identifier:   A6:4F:1B:67:47:54:64:82:E5:17:D7:35:B6:56:FD:54:6D:A7:CC:C5
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584CE0977F29D93C66C568EA9F00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        67.20.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:7f:29:d9:3c:66:c5:68:ea:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=1e013368-14ea-4820-9ab1-420c6ce281ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:00:83:e3:79:a5:85:c6:33:74:70:91:e3:
                    45:f2:d2:4f:30:74:e6:29:fa:c2:e3:7e:35:85:fa:
                    e8:63:b9:7a:18:59:6c:14:12:e7:92:da:7b:c7:e6:
                    dd:b3:87:b4:9c:63:4a:f3:e7:01:27:19:73:00:6a:
                    5b:c7:ec:9b:02:60:1d:65:c8:98:4b:b6:85:c0:b0:
                    76:25:78:2d:8c:aa:0f:b2:57:58:20:07:d2:eb:30:
                    5f:1d:7e:c9:42:ff:c8:84:a9:20:29:14:69:be:b9:
                    13:4e:60:e2:66:71:79:45:de:29:67:1b:0b:d7:9d:
                    57:b1:b6:52:55:12:49:ab:1c:e5:25:d2:5f:a4:02:
                    4f:2e:24:93:27:c1:53:86:04:71:b8:e3:0e:ce:45:
                    ec:f4:bb:f1:76:b0:2e:a1:f4:4e:24:0e:05:a6:a8:
                    75:45:bf:87:41:5d:a5:36:3a:e5:71:1e:31:64:23:
                    32:58:cf:09:4b:a0:06:d7:f8:35:68:51:c1:5a:65:
                    e4:d3:71:de:1c:15:d7:39:16:10:16:7d:17:97:eb:
                    4b:8b:c7:f9:48:3a:1c:e5:a7:bd:e0:56:22:c8:cd:
                    23:f3:60:e8:18:56:3a:c3:3f:0a:b4:16:91:f2:c9:
                    a2:3b:80:8b:50:18:c7:31:ef:dd:0e:3b:da:34:83:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4F:1B:67:47:54:64:82:E5:17:D7:35:B6:56:FD:54:6D:A7:CC:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.20.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c3:6a:c7:6f:ed:c8:a9:be:32:51:9d:8a:06:a5:9c:a9:34:
         14:27:06:cd:f5:9b:a3:ff:01:de:bd:fc:a0:34:11:c4:09:4c:
         47:b2:18:bb:d4:b4:d6:c4:c4:1f:d9:67:c7:71:b1:d3:eb:90:
         d7:b0:96:70:77:d7:c3:70:7f:ef:f5:95:e2:8a:1b:8f:54:90:
         5f:44:77:a1:7b:b0:a1:9d:70:0e:f3:2d:70:3d:a3:17:72:90:
         ba:a8:85:26:41:a3:40:f1:cc:3f:52:fb:5c:85:6c:de:3e:cd:
         2d:9a:a1:87:13:23:d2:2d:21:5b:df:75:8f:f1:49:7b:78:1e:
         8a:3b:ba:c4:94:e8:7c:63:9b:31:6d:ec:c4:90:7e:f4:49:e2:
         af:30:4e:94:7e:cb:3b:dc:45:d3:90:e9:33:85:47:e1:5a:8f:
         97:fd:6a:75:3e:c6:ac:49:75:cd:76:51:1a:49:66:33:7f:2e:
         0f:6d:ab:79:7b:3c:9e:b1:2e:67:25:38:2c:35:25:bf:7f:b2:
         79:ed:bd:0d:9c:bb:ff:c3:bd:24:64:13:aa:f1:74:e7:20:50:
         a3:09:36:97:0c:90:9a:31:50:8e:ca:0e:bb:c5:17:ae:81:d2:
         c3:32:cf:0d:4c:d8:6c:07:d4:bf:e5:fb:28:97:f3:3a:fc:c7:
         8b:65:da:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl38p2TxmxWjqnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
MWUwMTMzNjgtMTRlYS00ODIwLTlhYjEtNDIwYzZjZTI4MWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp8Ag+N5pYXGM3RwkeNF8tJPMHTmKfrC4341
hfroY7l6GFlsFBLnktp7x+bds4e0nGNK8+cBJxlzAGpbx+ybAmAdZciYS7aFwLB2
JXgtjKoPsldYIAfS6zBfHX7JQv/IhKkgKRRpvrkTTmDiZnF5Rd4pZxsL151XsbZS
VRJJqxzlJdJfpAJPLiSTJ8FThgRxuOMOzkXs9LvxdrAuofROJA4Fpqh1Rb+HQV2l
NjrlcR4xZCMyWM8JS6AG1/g1aFHBWmXk03HeHBXXORYQFn0Xl+tLi8f5SDoc5ae9
4FYiyM0j82DoGFY6wz8KtBaR8smiO4CLUBjHMe/dDjvaNIPZLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZPG2dHVGSC5RfXNbZW/VRtp8zFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvZGQ3MzJmOTItMTc5ZS0z
M2Q1LTk4MzItNTlmM2I5NDhjYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQxRAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLDasdv7cipvjJRnYoGpZypNBQnBs31m6P/Ad69/KA0EcQJTEeyGLvU
tNbExB/ZZ8dxsdPrkNewlnB318Nwf+/1leKKG49UkF9Ed6F7sKGdcA7zLXA9oxdy
kLqohSZBo0DxzD9S+1yFbN4+zS2aoYcTI9ItIVvfdY/xSXt4Hoo7usSU6HxjmzFt
7MSQfvRJ4q8wTpR+yzvcRdOQ6TOFR+Faj5f9anU+xqxJdc12URpJZjN/Lg9tq3l7
PJ6xLmclOCw1Jb9/snntvQ2cu//DvSRkE6rxdOcgUKMJNpcMkJoxUI7KDrvFF66B
0sMyzw1M2GwH1L/l+yiX8zr8x4tl2jA=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:54 2026 by rpki-client