Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/21204d05-6682-3237-a4b6-690945c97a2f.roa
File:                     21204d05-6682-3237-a4b6-690945c97a2f.roa (raw, json)
Hash identifier:          H8/COt4RcX6Na19AoG+oIIyNOlOYhwqU4xA63GRqAMo=
Subject key identifier:   F4:88:30:8B:22:1B:11:A4:1F:02:02:C8:0D:48:3F:A0:8C:4B:C1:8F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D66E9C1975BB93A7976D26E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/21204d05-6682-3237-a4b6-690945c97a2f.roa
Signing time:             Sun 05 Apr 2026 04:45:01 +0000
ROA not before:           Sun 05 Apr 2026 04:45:01 +0000
ROA not after:            Sat 04 Jul 2026 04:45:01 +0000
asID:                     834
IP address blocks:        64.69.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:e9:c1:97:5b:b9:3a:79:76:d2:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  5 04:45:01 2026 GMT
            Not After : Jul  4 04:45:01 2026 GMT
        Subject: CN=7d4ca748-80c9-4bdb-b54a-3a4a7ad87944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:73:0e:6a:56:80:4c:da:46:01:bf:54:69:
                    ce:f0:1d:da:6e:44:8f:fb:20:68:57:f5:a0:f8:01:
                    7f:3d:5a:d1:70:0e:5e:cd:35:22:61:0f:9c:c8:85:
                    e4:d6:c1:47:09:ec:ce:e7:54:cc:01:e3:a0:95:11:
                    87:7e:99:c8:f2:d7:12:ad:ea:22:cb:81:c7:ac:50:
                    0d:57:47:6e:b2:6c:74:9d:7c:39:6e:65:c7:30:c0:
                    0d:c3:4c:ec:51:08:89:fe:d5:04:79:ba:2d:26:72:
                    35:13:44:68:05:27:b2:23:f6:64:10:f4:0a:e2:83:
                    bd:95:e7:8b:2e:2b:f9:ac:5b:bc:b8:0f:e3:f3:2c:
                    16:35:d9:f5:72:44:f1:24:e4:b6:ea:4c:04:d9:58:
                    13:31:cd:79:94:c4:66:24:0f:5b:f5:ed:80:6f:45:
                    01:4a:a9:8c:52:7b:fa:df:1e:9c:fb:e2:3c:e4:2d:
                    18:26:59:98:8c:ba:41:4b:23:57:e0:9e:cc:ae:d0:
                    bd:86:a9:f2:3f:76:df:42:8f:3e:11:24:9b:2f:20:
                    d2:59:66:8e:99:89:62:95:6b:01:0f:4d:2a:15:49:
                    99:99:58:60:87:35:8e:8b:c8:d8:9e:e4:91:d8:d0:
                    36:31:df:67:79:21:44:d8:ee:a8:d5:de:52:c8:62:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:30:8B:22:1B:11:A4:1F:02:02:C8:0D:48:3F:A0:8C:4B:C1:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/21204d05-6682-3237-a4b6-690945c97a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:a3:02:40:48:2c:8d:cd:81:ff:ff:7c:01:91:f4:f6:2d:
         57:d2:3c:e8:fd:32:4b:84:2c:5d:d8:f8:76:16:66:d3:02:03:
         ae:ee:b0:09:13:85:aa:a5:db:b0:89:07:8f:16:eb:26:26:4c:
         2b:16:e7:b3:5c:9a:d5:fc:c7:59:21:f5:5f:2c:e0:71:d2:29:
         75:45:45:6c:a1:b4:98:1f:1f:8f:cd:ad:cc:ab:c0:d8:26:8c:
         df:76:57:ff:e5:ae:7d:ed:48:3c:78:6e:1c:e0:c1:fb:22:a6:
         16:14:07:cc:40:da:81:cc:b4:73:9c:7e:c2:6f:c7:33:bb:ea:
         c1:03:35:c5:d8:26:15:b9:43:f2:19:43:12:24:c9:d6:51:39:
         2b:34:d5:ea:c2:88:10:5c:63:a2:d5:52:a5:27:42:78:6e:96:
         a7:4b:cf:bf:2c:3c:81:4c:b4:02:88:f8:56:ff:1a:ad:fc:3c:
         7c:a6:3d:4b:a3:f8:30:33:1b:cd:e8:54:18:e5:e0:be:13:49:
         b3:f0:6d:a9:db:35:a4:6e:b7:8d:71:e6:26:24:82:f8:cd:b4:
         9e:e5:84:ca:59:be:0c:16:28:c9:07:1e:fe:bb:46:e1:04:2d:
         da:f4:8f:3e:78:79:56:14:5b:44:75:57:14:e0:81:72:29:eb:
         17:0c:85:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1m6cGXW7k6eXbSbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDQwNTA0NDUwMVoXDTI2MDcwNDA0NDUwMVowLzEtMCsGA1UEAxMk
N2Q0Y2E3NDgtODBjOS00YmRiLWI1NGEtM2E0YTdhZDg3OTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaVzDmpWgEzaRgG/VGnO8B3abkSP+yBoV/Wg
+AF/PVrRcA5ezTUiYQ+cyIXk1sFHCezO51TMAeOglRGHfpnI8tcSreoiy4HHrFAN
V0dusmx0nXw5bmXHMMANw0zsUQiJ/tUEebotJnI1E0RoBSeyI/ZkEPQK4oO9leeL
Liv5rFu8uA/j8ywWNdn1ckTxJOS26kwE2VgTMc15lMRmJA9b9e2Ab0UBSqmMUnv6
3x6c++I85C0YJlmYjLpBSyNX4J7MrtC9hqnyP3bfQo8+ESSbLyDSWWaOmYlilWsB
D00qFUmZmVhghzWOi8jYnuSR2NA2Md9neSFE2O6o1d5SyGJuSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPSIMIsiGxGkHwICyA1IP6CMS8GPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjEyMDRkMDUtNjY4Mi0z
MjM3LWE0YjYtNjkwOTQ1Yzk3YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEV/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADdSowJASCyNzYH//3wBkfT2LVfSPOj9MkuELF3Y+HYWZtMCA67usAkT
haql27CJB48W6yYmTCsW57NcmtX8x1kh9V8s4HHSKXVFRWyhtJgfH4/NrcyrwNgm
jN92V//lrn3tSDx4bhzgwfsiphYUB8xA2oHMtHOcfsJvxzO76sEDNcXYJhW5Q/IZ
QxIkydZROSs01erCiBBcY6LVUqUnQnhulqdLz78sPIFMtAKI+Fb/Gq38PHymPUuj
+DAzG83oVBjl4L4TSbPwbanbNaRut41x5iYkgvjNtJ7lhMpZvgwWKMkHHv67RuEE
Ldr0jz54eVYUW0R1VxTggXIp6xcMhSI=
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:11:32 2026 by rpki-client