Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bbbb03cc-4525-351e-a713-87ced6b0efcc.roa
File:                     bbbb03cc-4525-351e-a713-87ced6b0efcc.roa (raw, json)
Hash identifier:          n6KaFRe/KNVFZlDyJYZNLj04jibpPbcv0fVl0Px2FJQ=
Subject key identifier:   2C:0B:09:57:72:6F:76:59:9A:41:F3:22:61:1D:55:92:C8:55:64:FC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D94C069B8B17F0C4E56E995B0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bbbb03cc-4525-351e-a713-87ced6b0efcc.roa
Signing time:             Tue 21 Apr 2026 14:48:54 +0000
ROA not before:           Tue 21 Apr 2026 14:48:54 +0000
ROA not after:            Mon 20 Jul 2026 14:48:54 +0000
asID:                     215294
IP address blocks:        76.9.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:c0:69:b8:b1:7f:0c:4e:56:e9:95:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 21 14:48:54 2026 GMT
            Not After : Jul 20 14:48:54 2026 GMT
        Subject: CN=ce8cdf71-dfb5-4a89-9612-4b1845d49db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:0b:64:e0:13:ad:44:53:f3:c7:1e:a6:e9:
                    59:ec:ea:dc:0b:b8:9c:6a:34:61:aa:39:14:21:ca:
                    35:fa:d8:7d:6e:20:b8:cd:60:d9:64:75:d9:99:35:
                    fa:a6:15:49:96:4f:93:1c:92:71:64:76:82:98:1a:
                    c5:4f:d9:95:7c:14:24:2b:ed:4a:61:51:40:68:ea:
                    03:d5:7b:c7:db:bb:48:06:8a:a6:04:55:ad:83:4d:
                    ab:7d:e6:fa:7e:06:3f:94:63:c6:ea:3a:18:60:06:
                    a5:de:e7:27:d4:d8:74:16:6b:7d:5c:0c:0e:a9:7d:
                    64:40:66:9e:6d:d1:0e:2d:ec:76:77:00:76:a6:55:
                    29:4d:59:4b:88:a0:69:ad:27:2e:30:73:ba:c6:ad:
                    71:54:08:43:01:4f:24:53:58:53:03:ed:42:21:8e:
                    c2:e4:e0:21:cb:1c:d5:38:d7:c7:7d:9e:72:f2:bf:
                    6d:b1:d3:60:2d:a3:62:60:46:37:72:74:fa:54:0e:
                    f1:b7:41:1a:8c:01:36:4d:4e:2c:c3:98:cb:37:e0:
                    85:49:a9:a7:54:e9:5f:f1:70:54:62:be:f5:0f:1b:
                    86:20:49:c4:cd:bb:f4:6e:6f:77:2c:91:d3:d2:41:
                    76:a2:00:d8:ed:48:6f:93:53:7d:03:ca:dc:05:ae:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:09:57:72:6F:76:59:9A:41:F3:22:61:1D:55:92:C8:55:64:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bbbb03cc-4525-351e-a713-87ced6b0efcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:76:d0:28:87:32:55:1e:e6:03:1c:95:3e:4e:ed:d4:ab:18:
         27:32:1f:6e:1f:6e:28:77:90:9a:89:e4:ea:0c:d1:ad:cc:c8:
         88:08:17:a3:1e:95:c3:92:c2:89:2d:4a:57:2c:e5:c0:96:53:
         b3:7a:a2:19:98:f6:45:a8:ae:9c:ff:5f:7a:26:61:25:90:e7:
         bc:91:6b:d6:67:5d:cd:a4:50:03:aa:de:a4:91:74:b1:5f:a0:
         5b:21:2d:34:94:c1:22:70:07:0d:8e:b6:fd:99:e4:39:81:22:
         47:aa:5d:c9:3c:7a:45:9d:81:14:33:d5:1f:7e:b3:51:f5:23:
         be:a9:82:1b:ba:40:8b:fc:5c:ba:80:32:ca:c1:9a:ec:3e:c4:
         ed:5e:e5:1d:6e:5e:33:18:d1:50:c6:ba:0a:4b:32:42:05:85:
         35:c6:79:26:0b:85:2d:4b:6b:dd:73:86:df:29:ca:2e:e5:dc:
         31:09:bf:9d:15:bb:f8:9c:fb:15:8c:59:79:ae:e8:0a:bb:10:
         ed:1d:be:b3:28:ab:45:3f:ca:07:fb:8d:ed:5c:49:61:f7:8a:
         bf:7f:f1:d7:23:c7:e0:e0:d4:e1:ae:90:5f:30:6e:14:47:58:
         7f:db:16:dc:ed:92:8e:e2:0b:35:92:32:d7:a8:de:bd:d9:22:
         18:18:bb:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UwGm4sX8MTlbplbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDQyMTE0NDg1NFoXDTI2MDcyMDE0NDg1NFowLzEtMCsGA1UEAxMk
Y2U4Y2RmNzEtZGZiNS00YTg5LTk2MTItNGIxODQ1ZDQ5ZGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKULZOATrURT88cepulZ7OrcC7icajRhqjkU
Ico1+th9biC4zWDZZHXZmTX6phVJlk+THJJxZHaCmBrFT9mVfBQkK+1KYVFAaOoD
1XvH27tIBoqmBFWtg02rfeb6fgY/lGPG6joYYAal3ucn1Nh0Fmt9XAwOqX1kQGae
bdEOLex2dwB2plUpTVlLiKBprScuMHO6xq1xVAhDAU8kU1hTA+1CIY7C5OAhyxzV
ONfHfZ5y8r9tsdNgLaNiYEY3cnT6VA7xt0EajAE2TU4sw5jLN+CFSamnVOlf8XBU
Yr71DxuGIEnEzbv0bm93LJHT0kF2ogDY7Uhvk1N9A8rcBa4gpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwLCVdyb3ZZmkHzImEdVZLIVWT8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmJiYjAzY2MtNDUyNS0z
NTFlLWE3MTMtODdjZWQ2YjBlZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATAlsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANF20CiHMlUe5gMclT5O7dSrGCcyH24fbih3kJqJ5OoM0a3MyIgIF6Me
lcOSwoktSlcs5cCWU7N6ohmY9kWorpz/X3omYSWQ57yRa9ZnXc2kUAOq3qSRdLFf
oFshLTSUwSJwBw2Otv2Z5DmBIkeqXck8ekWdgRQz1R9+s1H1I76pghu6QIv8XLqA
MsrBmuw+xO1e5R1uXjMY0VDGugpLMkIFhTXGeSYLhS1La91zht8pyi7l3DEJv50V
u/ic+xWMWXmu6Aq7EO0dvrMoq0U/ygf7je1cSWH3ir9/8dcjx+Dg1OGukF8wbhRH
WH/bFtztko7iCzWSMteo3r3ZIhgYu54=
-----END CERTIFICATE-----
Generated at Thu Apr 23 21:42:18 2026 by rpki-client