Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa
File:                     c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa (raw, json)
Hash identifier:          yW1V70H6NHmsasDhW1Q/8g0c/eBQkFei9AXhLQ5a5ZI=
Subject key identifier:   F8:F9:B6:96:BD:D4:0D:15:03:B3:D7:E8:3E:53:11:38:7E:6C:B0:70
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584DD8F06C388BDE1CF281D8F780
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     399244
IP address blocks:        170.205.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:6c:38:8b:de:1c:f2:81:d8:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=e500db93-c42b-4dd1-ac46-a3b27bb8ae22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:ca:fe:ac:36:a3:c0:54:6d:c9:18:f9:b9:
                    90:78:0c:65:2f:29:c4:19:ea:ce:f6:c8:5c:67:a3:
                    46:49:13:6a:0a:f5:53:de:ed:a9:d1:99:76:47:8a:
                    1a:bf:1f:2e:0b:ca:12:90:e2:46:92:fc:a9:9a:2f:
                    44:db:f8:b1:c2:be:8e:b2:bf:20:f5:ea:6c:51:0a:
                    17:30:60:08:27:35:c4:2b:cb:db:66:06:b9:ed:3a:
                    97:24:28:27:86:51:be:af:43:8b:d0:5e:df:05:c1:
                    e3:cf:32:8d:72:84:fa:b0:7c:bf:9d:2a:98:1e:f6:
                    bc:2b:38:48:39:2b:76:2d:eb:1d:4c:06:89:fa:39:
                    c1:de:1a:a0:f8:94:48:6b:f0:c8:01:02:f4:2e:b7:
                    fb:87:97:5e:2b:e0:70:97:a8:9c:46:60:57:83:c9:
                    d6:3f:ac:c9:81:ba:03:be:42:1f:02:ee:0d:d9:1c:
                    22:8b:ee:be:21:20:56:93:48:9d:bf:8a:8f:9f:fa:
                    92:e7:9b:fd:23:e5:0a:58:17:f8:0c:35:94:3d:1a:
                    73:a6:f5:ad:2d:07:a3:08:07:50:b8:5d:79:44:ef:
                    ac:b6:a5:6f:a5:35:b2:ee:b0:13:86:cb:12:8b:df:
                    08:b8:7c:cf:56:e9:bd:24:22:00:7c:cd:7c:a2:31:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F9:B6:96:BD:D4:0D:15:03:B3:D7:E8:3E:53:11:38:7E:6C:B0:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/c0d3c58d-80bf-3d09-aafc-4d5a1635fcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:1c:92:9e:79:4f:a5:aa:90:a5:f7:3b:44:b5:35:76:b3:
         55:79:55:26:75:90:8d:04:e5:c4:de:16:e9:75:3b:05:a3:73:
         82:fa:48:66:c9:20:ce:6b:d8:d8:e8:ca:ed:a6:8a:4e:01:4c:
         ec:91:01:99:d7:ae:f2:a9:37:b5:6e:2e:d8:bf:3f:5e:90:04:
         fd:28:f8:9f:76:7c:e0:ca:67:87:15:fc:24:6e:90:62:39:59:
         60:f6:20:ad:5a:5d:eb:d8:4b:ac:df:8b:47:41:d6:5d:12:27:
         8d:bb:c4:95:f4:fd:3c:5d:6d:c0:7e:27:14:25:96:1a:81:a9:
         53:51:62:50:9f:82:a5:f2:5c:8b:58:f1:7d:b1:ff:ee:40:6e:
         b9:6b:21:88:5b:6b:2f:55:f1:63:45:19:9c:a8:22:55:61:29:
         5d:26:14:0b:ee:b5:2d:4b:fc:5c:5d:ed:dc:32:3a:ef:c2:7e:
         1c:f2:34:ad:31:72:50:17:23:89:82:d1:c7:d7:d4:16:2e:fb:
         2e:18:73:68:17:a3:bd:5b:1e:4a:f2:f7:31:89:ba:74:90:f3:
         ab:08:87:b6:4c:ce:e4:02:ef:41:b9:7b:4a:ca:dd:e5:1c:24:
         18:f2:0f:2b:7d:7c:24:01:4c:61:41:c2:32:fd:23:8f:32:9e:
         e1:19:eb:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Gw4i94c8oHY94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
ZTUwMGRiOTMtYzQyYi00ZGQxLWFjNDYtYTNiMjdiYjhhZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQvK/qw2o8BUbckY+bmQeAxlLynEGerO9shc
Z6NGSRNqCvVT3u2p0Zl2R4oavx8uC8oSkOJGkvypmi9E2/ixwr6Osr8g9epsUQoX
MGAIJzXEK8vbZga57TqXJCgnhlG+r0OL0F7fBcHjzzKNcoT6sHy/nSqYHva8KzhI
OSt2LesdTAaJ+jnB3hqg+JRIa/DIAQL0Lrf7h5deK+Bwl6icRmBXg8nWP6zJgboD
vkIfAu4N2Rwii+6+ISBWk0idv4qPn/qS55v9I+UKWBf4DDWUPRpzpvWtLQejCAdQ
uF15RO+stqVvpTWy7rAThssSi98IuHzPVum9JCIAfM18ojGx2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPj5tpa91A0VA7PX6D5TETh+bLBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYzBkM2M1OGQtODBiZi0z
ZDA5LWFhZmMtNGQ1YTE2MzVmY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtcHJKeeU+lqpCl9ztEtTV2s1V5VSZ1kI0E5cTeFul1OwWjc4L6SGbJ
IM5r2Njoyu2mik4BTOyRAZnXrvKpN7VuLti/P16QBP0o+J92fODKZ4cV/CRukGI5
WWD2IK1aXevYS6zfi0dB1l0SJ427xJX0/TxdbcB+JxQllhqBqVNRYlCfgqXyXItY
8X2x/+5AbrlrIYhbay9V8WNFGZyoIlVhKV0mFAvutS1L/Fxd7dwyOu/CfhzyNK0x
clAXI4mC0cfX1BYu+y4Yc2gXo71bHkry9zGJunSQ86sIh7ZMzuQC70G5e0rK3eUc
JBjyDyt9fCQBTGFBwjL9I48ynuEZ65w=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:44 2026 by rpki-client