Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa
File:                     939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa (raw, json)
Hash identifier:          TZGIWW994vk9UpiDIzcI2zACkgdI2CUZnz32bn/2ms4=
Subject key identifier:   64:85:3C:05:67:99:A6:DE:83:C6:3E:06:2E:B6:FD:C2:1C:7E:90:70
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584CEFF24AC55D46B4C3D3513680
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     395793
IP address blocks:        167.253.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:4a:c5:5d:46:b4:c3:d3:51:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=8bc9cf26-228f-4b92-88ad-7c51e9bd00c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:2d:64:7f:af:b3:20:81:38:6d:7e:a7:bc:
                    9e:c5:10:74:00:fe:4a:a1:6c:e4:60:52:b0:40:bc:
                    fa:a0:c8:46:a0:cf:31:57:2e:a4:99:7f:29:21:57:
                    54:12:da:2f:d2:cc:4c:e1:20:db:da:97:12:b8:0d:
                    df:18:62:cf:5a:0b:48:82:ed:6a:a5:59:50:3c:f0:
                    f1:38:48:95:2b:2e:36:48:48:4b:76:6e:39:7a:28:
                    6c:f9:d4:6c:60:b0:cf:3c:2d:07:92:fb:3f:d9:18:
                    d9:20:c7:91:68:16:cc:aa:61:d6:46:3b:73:38:a2:
                    bb:4d:2a:19:a9:2d:26:10:d2:41:57:f5:19:ec:fc:
                    23:90:fb:cb:a8:77:c4:53:7d:da:3f:43:58:6a:23:
                    a6:13:d0:41:89:7d:32:c6:3a:73:83:fb:ea:1a:3d:
                    6d:94:b1:42:c6:d2:2c:a6:b4:00:6e:98:03:80:0f:
                    11:d4:08:7a:03:b2:48:66:04:68:a9:23:3c:55:fa:
                    23:cd:a3:5d:09:33:e5:04:f5:95:06:3d:fc:a2:66:
                    c4:73:1b:26:9e:9a:d8:bf:94:ad:73:0e:f1:f7:6c:
                    cd:4f:be:5d:86:3e:9c:54:d9:6e:05:25:21:b1:6d:
                    e7:ff:ef:c1:51:a9:ec:fd:99:f3:40:53:3a:0b:dc:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:85:3C:05:67:99:A6:DE:83:C6:3E:06:2E:B6:FD:C2:1C:7E:90:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/939c2c2b-d77d-39a0-8b1e-70bca98cc82f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:4b:92:46:61:77:4f:0f:7c:44:d1:b1:33:ec:3b:25:9e:
         6b:b8:fe:bd:62:76:2a:78:28:29:dd:c8:3c:1a:6d:82:83:b9:
         b4:29:71:59:91:fd:ee:f9:cf:c5:5e:bd:8b:bb:77:3c:bc:b2:
         bc:c6:bf:53:a2:5a:52:8c:18:09:49:91:25:0d:23:10:3c:97:
         ea:0f:c0:0e:f4:cc:0a:f0:af:d5:56:4c:0d:60:68:7c:1c:6e:
         2f:9a:37:44:73:32:ac:42:27:c2:0c:73:bb:93:f5:0a:82:8c:
         f1:e1:fb:81:47:b5:15:09:0d:a0:93:ff:b9:9d:74:6f:61:cb:
         1e:34:76:fc:a1:87:4f:c4:7c:b8:60:7d:bd:09:a0:54:2e:72:
         9f:94:56:62:63:09:6f:49:e2:16:5e:c1:68:6d:1a:4d:a5:af:
         23:f3:49:25:96:b8:30:f2:d5:4d:88:60:59:de:99:32:68:62:
         1d:c8:14:13:0a:27:e5:f0:8b:43:f5:73:e3:86:54:08:48:8b:
         6b:43:56:8d:e0:9c:72:ad:fe:50:75:71:68:45:29:3b:8f:6c:
         5f:23:19:68:f4:41:ef:f4:59:6d:b8:f7:a7:89:8d:ed:c9:63:
         f3:01:e2:b1:57:48:6e:88:48:d1:a1:81:b0:f0:ea:b2:4a:5f:
         da:bc:51:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8krFXUa0w9NRNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkwMzk5MzUtNDYyYS00YjE0LThlOTYtNzg3OTgyODNl
ZWZmMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
OGJjOWNmMjYtMjI4Zi00YjkyLTg4YWQtN2M1MWU5YmQwMGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v4tZH+vsyCBOG1+p7yexRB0AP5KoWzkYFKw
QLz6oMhGoM8xVy6kmX8pIVdUEtov0sxM4SDb2pcSuA3fGGLPWgtIgu1qpVlQPPDx
OEiVKy42SEhLdm45eihs+dRsYLDPPC0Hkvs/2RjZIMeRaBbMqmHWRjtzOKK7TSoZ
qS0mENJBV/UZ7PwjkPvLqHfEU33aP0NYaiOmE9BBiX0yxjpzg/vqGj1tlLFCxtIs
prQAbpgDgA8R1Ah6A7JIZgRoqSM8VfojzaNdCTPlBPWVBj38ombEcxsmnprYv5St
cw7x92zNT75dhj6cVNluBSUhsW3n/+/BUans/ZnzQFM6C9wp9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSFPAVnmabeg8Y+Bi62/cIcfpBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xOTAz
OTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5ODI4M2VlZmYvOTM5YzJjMmItZDc3ZC0z
OWEwLThiMWUtNzBiY2E5OGNjODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTkwMzk5MzUtNDYyYS00YjE0LThl
OTYtNzg3OTgyODNlZWZmLzE5MDM5OTM1LTQ2MmEtNGIxNC04ZTk2LTc4Nzk4Mjgz
ZWVmZi5jcmwwHwYDVR0jBBgwFoAUMCKfdKNrwtqpZkAI0cw8U5Df3pkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xOTAzOTkzNS00NjJhLTRiMTQtOGU5Ni03ODc5
ODI4M2VlZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/0kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGbS5JGYXdPD3xE0bEz7Dslnmu4/r1idip4KCndyDwabYKDubQpcVmR
/e75z8VevYu7dzy8srzGv1OiWlKMGAlJkSUNIxA8l+oPwA70zArwr9VWTA1gaHwc
bi+aN0RzMqxCJ8IMc7uT9QqCjPHh+4FHtRUJDaCT/7mddG9hyx40dvyhh0/EfLhg
fb0JoFQucp+UVmJjCW9J4hZewWhtGk2lryPzSSWWuDDy1U2IYFnemTJoYh3IFBMK
J+Xwi0P1c+OGVAhIi2tDVo3gnHKt/lB1cWhFKTuPbF8jGWj0Qe/0WW2496eJje3J
Y/MB4rFXSG6ISNGhgbDw6rJKX9q8UYo=
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:20:31 2026 by rpki-client