Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/ff07aff8-579a-3d70-afd4-ab27ed697392.roa
File:                     ff07aff8-579a-3d70-afd4-ab27ed697392.roa (raw, json)
Hash identifier:          rhaqFiVPmZz2C5xK/6ZFwtGsRK7VFl4wkEzyzZVK87s=
Subject key identifier:   B3:8B:96:FF:55:3A:A8:24:77:55:F6:71:D2:2A:8F:4D:8C:03:FB:A5
Certificate issuer:       /CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
Certificate serial:       010D0C9F4328584D52434377681216033CD98960
Authority key identifier: BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/ff07aff8-579a-3d70-afd4-ab27ed697392.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     10965
IP address blocks:        192.139.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:43:77:68:12:16:03:3c:d9:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=c7beddda-14fc-4466-87d5-39c0ea2cbb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:95:66:42:e2:7e:c0:04:1d:90:c4:6e:7c:
                    83:18:8f:70:04:6a:34:e5:70:2d:10:fa:72:17:0e:
                    fc:65:01:07:2a:58:50:46:0d:23:86:ff:58:6c:24:
                    81:06:ac:2e:fe:37:51:8d:3e:18:9e:64:f8:af:36:
                    6f:ba:64:01:46:7d:c9:81:69:89:d6:cb:2c:ae:59:
                    db:55:e2:7c:64:9b:a9:84:3c:9f:3d:98:9d:aa:b0:
                    63:4e:78:86:d8:08:44:b6:bf:12:9e:67:3b:d9:18:
                    24:b4:c1:32:ae:4d:1b:ae:e5:27:e4:ab:d1:a9:b2:
                    b3:6a:84:af:dc:e4:1e:9b:df:50:7f:87:95:cb:33:
                    ef:31:d1:94:dd:3c:94:fe:c9:bb:bc:13:90:a2:13:
                    de:e0:34:74:c0:de:f6:c7:3d:8b:78:16:2a:74:2c:
                    8b:7c:45:dd:46:92:23:b3:fd:e1:fc:4a:8e:d2:cb:
                    52:fd:41:61:3e:61:27:10:67:5e:6b:ad:a1:dd:b4:
                    d1:ef:12:95:00:e2:ad:15:de:86:83:41:38:e2:b0:
                    cd:dd:26:e3:63:b4:95:cd:eb:3e:d5:77:18:17:56:
                    2f:93:87:0f:cf:c0:1e:49:9e:9d:bf:04:1b:9b:e6:
                    1a:5d:4f:f5:75:b3:25:f1:a9:70:33:65:84:42:7e:
                    4b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:96:FF:55:3A:A8:24:77:55:F6:71:D2:2A:8F:4D:8C:03:FB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/ff07aff8-579a-3d70-afd4-ab27ed697392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:37:d7:6b:ac:e2:ef:24:60:19:e2:a5:08:06:f9:7e:2c:
         b4:b2:fb:71:75:25:1f:30:8a:06:12:7e:20:69:86:96:4d:89:
         5e:f3:58:ae:76:cd:4e:3a:20:78:17:c0:d7:3d:f3:48:1b:f5:
         51:3b:b3:be:0f:78:89:87:94:c2:f8:81:bd:d4:25:11:24:f3:
         6c:1f:46:cc:d7:e0:64:09:4b:b7:4f:1a:04:c2:bf:3e:b4:91:
         c9:85:af:aa:0e:43:9f:22:d4:91:ad:80:89:8c:89:25:96:3c:
         a3:76:88:af:ab:d0:de:c2:56:4a:54:91:31:bb:f6:39:2b:8a:
         f8:d5:0b:6c:9e:f4:39:f6:53:74:39:c9:b2:80:b9:df:24:ee:
         a1:50:8d:05:cb:78:69:80:01:c5:ac:fe:c2:bf:59:dd:d0:ad:
         e5:6c:c1:0e:0b:18:70:93:bc:6d:d2:06:ba:7b:af:a1:13:0c:
         a7:91:90:b8:93:c6:27:3d:3b:dd:55:5c:ed:b2:81:2b:9f:58:
         ed:06:95:35:7d:7b:47:de:67:3e:17:5e:7b:dd:23:e6:d3:28:
         9e:07:18:5d:9a:18:01:26:6d:5e:73:75:1e:ea:99:07:51:1b:
         da:80:3e:d7:fe:db:6f:d9:d2:1b:07:20:98:45:3f:32:28:8f:
         01:4e:1d:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0N3aBIWAzzZiWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ2NDY2MGUtYWRiOS00ZGMzLWEwMmItZDAyZDBkNWQ5
NjI5MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
YzdiZWRkZGEtMTRmYy00NDY2LTg3ZDUtMzljMGVhMmNiYjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcCVZkLifsAEHZDEbnyDGI9wBGo05XAtEPpy
Fw78ZQEHKlhQRg0jhv9YbCSBBqwu/jdRjT4YnmT4rzZvumQBRn3JgWmJ1sssrlnb
VeJ8ZJuphDyfPZidqrBjTniG2AhEtr8Snmc72RgktMEyrk0bruUn5KvRqbKzaoSv
3OQem99Qf4eVyzPvMdGU3TyU/sm7vBOQohPe4DR0wN72xz2LeBYqdCyLfEXdRpIj
s/3h/EqO0stS/UFhPmEnEGdea62h3bTR7xKVAOKtFd6Gg0E44rDN3SbjY7SVzes+
1XcYF1Yvk4cPz8AeSZ6dvwQbm+YaXU/1dbMl8alwM2WEQn5LGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOLlv9VOqgkd1X2cdIqj02MA/ulMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZDY0
NjYwZS1hZGI5LTRkYzMtYTAyYi1kMDJkMGQ1ZDk2MjkvZmYwN2FmZjgtNTc5YS0z
ZDcwLWFmZDQtYWIyN2VkNjk3MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWQ2NDY2MGUtYWRiOS00ZGMzLWEw
MmItZDAyZDBkNWQ5NjI5LzVkNjQ2NjBlLWFkYjktNGRjMy1hMDJiLWQwMmQwZDVk
OTYyOS5jcmwwHwYDVR0jBBgwFoAUvulMlw0L87ZVDtbi5jaytUfBL5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZDY0NjYwZS1hZGI5LTRkYzMtYTAyYi1kMDJk
MGQ1ZDk2MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwItFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGD4N9drrOLvJGAZ4qUIBvl+LLSy+3F1JR8wigYSfiBphpZNiV7zWK52
zU46IHgXwNc980gb9VE7s74PeImHlML4gb3UJREk82wfRszX4GQJS7dPGgTCvz60
kcmFr6oOQ58i1JGtgImMiSWWPKN2iK+r0N7CVkpUkTG79jkrivjVC2ye9Dn2U3Q5
ybKAud8k7qFQjQXLeGmAAcWs/sK/Wd3QreVswQ4LGHCTvG3SBrp7r6ETDKeRkLiT
xic9O91VXO2ygSufWO0GlTV9e0feZz4XXnvdI+bTKJ4HGF2aGAEmbV5zdR7qmQdR
G9qAPtf+22/Z0hsHIJhFPzIojwFOHdY=
-----END CERTIFICATE-----
Generated at Mon Apr 13 20:03:06 2026 by rpki-client