Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97060b1e-ac1e-35df-a1b5-ab1f1fb0aed0.roa
File:                     97060b1e-ac1e-35df-a1b5-ab1f1fb0aed0.roa (raw, json)
Hash identifier:          IuG1ConrQoXZn9DzdyRPOazWzgJYT8ZoTrDbJzPEwTk=
Subject key identifier:   87:0A:75:A7:A2:4D:3F:02:28:7B:65:55:CA:17:6D:CB:8D:26:CD:C8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D0D425754868510B49AF71680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97060b1e-ac1e-35df-a1b5-ab1f1fb0aed0.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     15247
IP address blocks:        208.181.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:57:54:86:85:10:b4:9a:f7:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=48628ab2-dc31-4d1e-8846-796003c83c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:f4:6c:d1:56:d0:1b:64:c0:8f:14:3b:fa:
                    d6:d4:b5:17:3c:dc:21:da:dd:cc:19:af:97:15:47:
                    ac:90:3b:68:b1:f4:cd:e1:9b:b6:37:08:90:fa:48:
                    2b:c7:3d:ad:75:3b:2c:dc:42:41:6a:77:6d:d7:dd:
                    03:d3:3b:8b:d9:97:f9:ca:05:48:6f:d1:41:a9:ff:
                    d0:de:9b:bd:9c:13:d3:96:22:68:c9:3d:bd:b3:f0:
                    9b:dc:9e:fd:a1:e3:dc:c5:1e:7f:0c:69:c7:af:a4:
                    07:4b:1a:56:44:84:73:10:85:87:55:b2:1c:80:6d:
                    89:2e:aa:c6:63:76:53:43:47:e2:6d:9c:40:45:19:
                    1e:d4:cc:7a:4e:13:a1:09:87:ff:9c:93:d6:6b:58:
                    a5:cf:9e:b9:81:0f:4e:6f:d8:32:ba:3a:ac:c0:64:
                    aa:95:e1:fd:60:b2:f0:33:97:5b:97:b9:00:72:ed:
                    5d:54:52:6f:03:98:38:c2:77:27:cd:9a:cb:5f:b8:
                    bc:90:14:72:2b:02:82:53:ab:6a:f5:3a:23:20:77:
                    34:10:32:dd:db:a7:86:91:08:5b:0d:e2:d3:3c:61:
                    01:c4:39:ff:33:31:3b:eb:51:4d:dc:ca:e9:6c:f2:
                    cc:ee:69:b6:ff:27:5b:e6:de:71:51:fc:0b:e0:20:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0A:75:A7:A2:4D:3F:02:28:7B:65:55:CA:17:6D:CB:8D:26:CD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97060b1e-ac1e-35df-a1b5-ab1f1fb0aed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:6d:ee:97:0b:b6:4c:7e:f4:28:c2:6b:c4:0b:e9:06:a4:
         7d:26:c3:51:89:a9:ee:52:32:a1:65:62:d7:69:be:ca:19:17:
         e7:5a:d3:20:34:84:19:e0:5c:4a:bf:d0:23:7a:56:e6:68:25:
         fb:20:5e:52:83:af:8a:c7:42:3d:da:48:97:37:e1:b8:4c:ae:
         34:87:c7:d9:12:cd:7c:31:30:94:6b:dc:91:ed:48:48:6e:6c:
         f4:ce:22:f5:c8:9f:09:ab:f5:5d:00:d6:b8:8d:5e:d2:01:a0:
         8c:33:c0:b7:8e:a9:0c:91:70:f6:5a:c7:23:e3:28:61:65:b4:
         c6:83:c9:5d:98:93:a0:89:81:7c:08:ec:3e:30:f0:d8:65:ad:
         7d:08:a7:69:ef:44:ca:ac:6e:1b:8e:ac:4a:ba:b1:92:a1:40:
         83:ce:b8:92:2f:ec:60:09:5c:8d:8d:78:ec:65:56:a1:47:95:
         f8:e8:9e:bc:91:9e:df:07:29:4e:a4:6f:ab:ff:de:80:6c:0d:
         52:a2:77:94:a6:92:40:bc:38:47:46:7c:ad:1f:c2:16:6d:a4:
         d5:df:49:b5:86:ab:31:57:25:f7:2e:38:25:8b:17:1b:55:b4:
         ee:d6:0e:69:f6:a9:93:f0:b0:99:9a:58:01:88:07:4f:4c:1f:
         65:a8:8c:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQldUhoUQtJr3FoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NDg2MjhhYjItZGMzMS00ZDFlLTg4NDYtNzk2MDAzYzgzYzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ70bNFW0BtkwI8UO/rW1LUXPNwh2t3MGa+X
FUeskDtosfTN4Zu2NwiQ+kgrxz2tdTss3EJBandt190D0zuL2Zf5ygVIb9FBqf/Q
3pu9nBPTliJoyT29s/Cb3J79oePcxR5/DGnHr6QHSxpWRIRzEIWHVbIcgG2JLqrG
Y3ZTQ0fibZxARRke1Mx6ThOhCYf/nJPWa1ilz565gQ9Ob9gyujqswGSqleH9YLLw
M5dbl7kAcu1dVFJvA5g4wncnzZrLX7i8kBRyKwKCU6tq9TojIHc0EDLd26eGkQhb
DeLTPGEBxDn/MzE761FN3MrpbPLM7mm2/ydb5t5xUfwL4CAN/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIcKdaeiTT8CKHtlVcoXbcuNJs3IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTcwNjBiMWUtYWMxZS0z
NWRmLWExYjUtYWIxZjFmYjBhZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LWUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsibe6XC7ZMfvQowmvEC+kGpH0mw1GJqe5SMqFlYtdpvsoZF+da0yA0
hBngXEq/0CN6VuZoJfsgXlKDr4rHQj3aSJc34bhMrjSHx9kSzXwxMJRr3JHtSEhu
bPTOIvXInwmr9V0A1riNXtIBoIwzwLeOqQyRcPZaxyPjKGFltMaDyV2Yk6CJgXwI
7D4w8NhlrX0Ip2nvRMqsbhuOrEq6sZKhQIPOuJIv7GAJXI2NeOxlVqFHlfjonryR
nt8HKU6kb6v/3oBsDVKid5SmkkC8OEdGfK0fwhZtpNXfSbWGqzFXJfcuOCWLFxtV
tO7WDmn2qZPwsJmaWAGIB09MH2WojGc=
-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:55 2026 by rpki-client