Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/2ae97fa8-6695-31fa-adbc-b60a670834d8.roa
File:                     2ae97fa8-6695-31fa-adbc-b60a670834d8.roa (raw, json)
Hash identifier:          G+h6VpXpejaiSJiNmgd3h+gqxuHW4+B5mK7RKPY77HY=
Subject key identifier:   B5:54:1D:E6:F8:F0:E2:E6:68:7D:B1:08:DC:44:E7:D6:07:2A:AE:87
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584CA5F70B9E23E6A02391553600
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/2ae97fa8-6695-31fa-adbc-b60a670834d8.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     19318
IP address blocks:        162.245.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:0b:9e:23:e6:a0:23:91:55:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=3ef371e2-2802-4a90-bd4d-347553dfbf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:fa:27:d4:53:cb:e6:4a:f4:a6:b5:c1:46:
                    36:10:64:f6:7e:17:db:e4:e1:54:b3:ec:26:1d:f0:
                    8f:ae:c2:92:74:71:a4:80:cf:12:ff:db:ae:0c:06:
                    07:c2:26:4c:98:f2:77:f4:9c:5d:7b:a0:c3:eb:e2:
                    46:55:7c:1a:f0:43:fc:73:a8:17:da:91:63:7d:1a:
                    ef:83:e3:93:aa:4c:13:5d:fb:35:68:e9:d0:44:f5:
                    ad:6c:6e:0a:a9:a5:c5:cb:c1:2b:a9:da:1b:0d:af:
                    f5:05:0a:f8:e3:31:a1:14:e6:b3:40:10:c1:8e:34:
                    ba:8c:5d:32:1b:21:0d:d3:ca:65:01:3c:d1:41:bc:
                    33:de:0e:91:d2:81:48:ec:92:fc:ab:f4:f6:47:8b:
                    4c:f1:78:e9:79:d8:e7:ee:a9:55:6c:57:f6:2a:e6:
                    80:d8:04:49:10:70:02:d9:b0:dd:62:e9:52:3b:f9:
                    ec:d2:de:65:6e:3e:cd:14:53:c4:6f:da:d9:6b:b5:
                    32:f5:06:3f:93:fd:cd:5d:74:d8:1e:89:f7:b6:68:
                    db:f7:69:e1:bc:97:c0:a3:ea:47:bb:54:17:e1:65:
                    67:20:de:76:96:f2:ff:0b:32:3b:14:77:1d:6e:7b:
                    70:3f:28:c0:2e:f0:c2:7f:59:5b:eb:f6:ba:ce:8d:
                    16:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:1D:E6:F8:F0:E2:E6:68:7D:B1:08:DC:44:E7:D6:07:2A:AE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/2ae97fa8-6695-31fa-adbc-b60a670834d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:a6:30:d9:76:10:72:a2:9c:88:7e:6f:19:cf:fe:45:a7:
         32:d4:a4:60:16:13:b7:57:21:a6:fb:53:01:d9:56:95:4c:19:
         dc:62:5e:85:2d:84:ae:82:78:18:b5:05:b1:db:47:c3:f2:8d:
         52:e3:85:3d:a3:ff:d7:9f:bf:73:0e:d6:11:77:1e:cc:9c:02:
         19:23:79:a3:7a:ac:5b:3b:ae:f2:23:27:60:0b:a5:24:9d:36:
         9c:ba:9a:98:b6:21:5d:16:1e:2d:30:08:31:ac:5a:c7:71:7c:
         ca:96:ba:7f:ea:b2:dc:6e:50:80:87:af:dd:6a:c5:d1:aa:55:
         9f:2b:a4:60:d4:e5:62:8f:88:01:4a:73:31:8d:f3:36:87:4b:
         3d:ba:bd:c6:9e:04:01:0c:e9:1f:aa:68:c0:cf:34:9b:12:d7:
         1f:2d:81:b7:c4:98:52:52:15:40:2f:a0:0e:51:cc:87:d5:ab:
         df:c6:42:66:37:c6:f9:88:11:56:00:44:03:93:67:1f:e9:22:
         2a:ff:e4:b7:80:2a:a2:e7:41:00:7b:e4:3e:fe:4c:fc:6a:c9:
         d8:ed:88:95:c1:a7:c4:05:0a:9a:49:2d:e2:bd:6f:5c:0a:9a:
         41:76:40:ca:4f:da:00:8f:1e:a9:c2:28:9a:8e:56:3a:49:94:
         af:9e:10:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wueI+agI5FVNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThjNzM3NDYtMThmNi00NjkyLTgwYzYtMWQ3YjNlOTM2
NTlhMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
M2VmMzcxZTItMjgwMi00YTkwLWJkNGQtMzQ3NTUzZGZiZjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpn6J9RTy+ZK9Ka1wUY2EGT2fhfb5OFUs+wm
HfCPrsKSdHGkgM8S/9uuDAYHwiZMmPJ39Jxde6DD6+JGVXwa8EP8c6gX2pFjfRrv
g+OTqkwTXfs1aOnQRPWtbG4KqaXFy8ErqdobDa/1BQr44zGhFOazQBDBjjS6jF0y
GyEN08plATzRQbwz3g6R0oFI7JL8q/T2R4tM8Xjpedjn7qlVbFf2KuaA2ARJEHAC
2bDdYulSO/ns0t5lbj7NFFPEb9rZa7Uy9QY/k/3NXXTYHon3tmjb92nhvJfAo+pH
u1QX4WVnIN52lvL/CzI7FHcdbntwPyjALvDCf1lb6/a6zo0WcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVUHeb48OLmaH2xCNxE59YHKq6HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3
Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdiM2U5MzY1OWEvMmFlOTdmYTgtNjY5NS0z
MWZhLWFkYmMtYjYwYTY3MDgzNGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZThjNzM3NDYtMThmNi00NjkyLTgw
YzYtMWQ3YjNlOTM2NTlhL2U4YzczNzQ2LTE4ZjYtNDY5Mi04MGM2LTFkN2IzZTkz
NjU5YS5jcmwwHwYDVR0jBBgwFoAUNwqXWXTVXmOGt2p3uKhHHC7BMdkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lOGM3Mzc0Ni0xOGY2LTQ2OTItODBjNi0xZDdi
M2U5MzY1OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovW5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIa8pjDZdhByopyIfm8Zz/5FpzLUpGAWE7dXIab7UwHZVpVMGdxiXoUt
hK6CeBi1BbHbR8PyjVLjhT2j/9efv3MO1hF3HsycAhkjeaN6rFs7rvIjJ2ALpSSd
Npy6mpi2IV0WHi0wCDGsWsdxfMqWun/qstxuUICHr91qxdGqVZ8rpGDU5WKPiAFK
czGN8zaHSz26vcaeBAEM6R+qaMDPNJsS1x8tgbfEmFJSFUAvoA5RzIfVq9/GQmY3
xvmIEVYARAOTZx/pIir/5LeAKqLnQQB75D7+TPxqydjtiJXBp8QFCppJLeK9b1wK
mkF2QMpP2gCPHqnCKJqOVjpJlK+eEAo=
-----END CERTIFICATE-----
Generated at Tue Feb 24 03:48:20 2026 by rpki-client