Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
File:                     70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa (raw, json)
Hash identifier:          cwzYsndnCmd+iNyks2Mio4s1/M2fJ1q4v8TGRL2Id4M=
Subject key identifier:   46:9D:23:88:8E:40:34:DF:58:DA:86:D1:E3:69:EC:C5:E2:E4:A0:FE
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CC611FCE10C586A885F68BF00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     396375
IP address blocks:        216.30.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:fc:e1:0c:58:6a:88:5f:68:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=63bb7506-f629-4d68-83ee-3e71cc621409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:84:16:b9:51:64:6c:27:0d:bf:c6:1d:be:
                    b2:0a:27:0f:6e:36:c1:97:b8:c6:0c:ac:32:47:14:
                    be:32:f7:f8:7e:95:50:82:8d:78:4d:b2:28:83:8c:
                    d0:8c:3d:93:11:ae:bc:cd:5b:30:b3:01:58:36:63:
                    fd:97:a7:84:6d:1b:7a:35:d3:2b:91:1a:2b:20:cc:
                    9e:15:69:6e:a0:aa:0f:e9:46:b8:a7:8c:1d:a1:80:
                    ca:4c:d0:bf:ef:58:8f:9b:ba:4e:7f:cc:51:92:a2:
                    8f:58:b1:c0:d4:48:1d:cb:bb:e2:cd:6c:07:fa:3a:
                    cf:7a:9f:ed:2e:14:4e:36:ba:51:1e:ce:b3:dc:c2:
                    bb:ef:ee:99:c6:35:86:3a:60:dd:cb:cc:fe:e2:48:
                    99:c7:67:8a:09:7b:c3:57:c0:1d:7c:cb:29:a8:e8:
                    ef:aa:e7:95:17:59:7f:07:19:b2:7b:ce:ca:27:74:
                    37:cf:ed:33:9e:70:15:9e:51:da:18:d9:e7:1a:14:
                    03:2a:c4:e2:ff:56:ff:a8:a8:6e:81:2c:cf:be:9d:
                    d1:d9:86:13:b5:68:da:3c:71:04:f7:fc:c8:3a:83:
                    b2:d4:a2:55:6f:7e:fc:8f:39:84:08:fc:d6:47:8d:
                    18:81:22:99:e4:03:f4:83:6e:4e:a5:08:70:d8:fc:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9D:23:88:8E:40:34:DF:58:DA:86:D1:E3:69:EC:C5:E2:E4:A0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/70c136ea-0cb9-3ed3-a923-d617d9c8975b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:f7:f7:b0:92:ee:40:40:81:0d:75:4c:65:5b:26:fc:00:
         a3:13:bb:c9:97:aa:64:a5:eb:25:dc:75:d6:7f:61:9f:93:cc:
         a8:45:35:be:2b:dd:8a:12:35:32:30:85:ed:68:70:84:34:95:
         8c:03:ba:b8:fc:76:e7:fb:ea:f5:a4:bb:29:49:34:be:3c:e6:
         fe:5e:92:50:4b:09:1e:f9:06:d2:b3:75:f5:99:cd:f7:d1:6e:
         34:9f:38:cd:a7:6c:ca:d8:25:63:5b:50:62:f4:7c:ef:e8:b5:
         cd:69:3a:6e:97:40:de:3f:31:61:9c:54:b6:ae:87:5b:19:22:
         26:ba:9d:ff:02:54:d3:9c:bb:fa:4f:bc:52:4b:53:86:f8:89:
         b2:66:e4:79:cb:ea:97:a7:26:51:b8:82:1d:86:e6:b7:1c:9f:
         81:55:58:43:d0:b3:7f:9d:e0:c5:72:18:75:12:23:02:b0:d4:
         91:b1:f3:84:59:1d:ae:43:51:89:f1:c3:3a:1f:35:f1:d0:5c:
         ff:0d:2d:f6:7b:5e:41:9b:85:5c:e1:d6:80:f3:8b:9b:9f:4f:
         8f:12:ea:e8:f0:7b:2a:59:9c:8e:39:22:f6:e5:db:2a:55:32:
         2c:41:8a:5c:75:9b:10:3e:ed:3b:b5:82:27:45:d1:89:fa:98:
         7d:3c:00:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEfzhDFhqiF9ovwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
NjNiYjc1MDYtZjYyOS00ZDY4LTgzZWUtM2U3MWNjNjIxNDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXSEFrlRZGwnDb/GHb6yCicPbjbBl7jGDKwy
RxS+Mvf4fpVQgo14TbIog4zQjD2TEa68zVswswFYNmP9l6eEbRt6NdMrkRorIMye
FWluoKoP6Ua4p4wdoYDKTNC/71iPm7pOf8xRkqKPWLHA1Egdy7vizWwH+jrPep/t
LhRONrpRHs6z3MK77+6ZxjWGOmDdy8z+4kiZx2eKCXvDV8AdfMspqOjvqueVF1l/
Bxmye87KJ3Q3z+0znnAVnlHaGNnnGhQDKsTi/1b/qKhugSzPvp3R2YYTtWjaPHEE
9/zIOoOy1KJVb378jzmECPzWR40YgSKZ5AP0g25OpQhw2PzKSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEadI4iOQDTfWNqG0eNp7MXi5KD+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNzBjMTM2ZWEtMGNiOS0z
ZWQzLWE5MjMtZDYxN2Q5Yzg5NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2B6bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh/9/ewku5AQIENdUxlWyb8AKMTu8mXqmSl6yXcddZ/YZ+TzKhFNb4r
3YoSNTIwhe1ocIQ0lYwDurj8duf76vWkuylJNL485v5eklBLCR75BtKzdfWZzffR
bjSfOM2nbMrYJWNbUGL0fO/otc1pOm6XQN4/MWGcVLauh1sZIia6nf8CVNOcu/pP
vFJLU4b4ibJm5HnL6penJlG4gh2G5rccn4FVWEPQs3+d4MVyGHUSIwKw1JGx84RZ
Ha5DUYnxwzofNfHQXP8NLfZ7XkGbhVzh1oDzi5ufT48S6ujweypZnI45Ivbl2ypV
MixBilx1mxA+7Tu1gidF0Yn6mH08ACg=
-----END CERTIFICATE-----
Generated at Fri Feb 27 04:50:17 2026 by rpki-client