Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ebc015be-5a2e-357e-acd2-8027367f7488.roa
File:                     ebc015be-5a2e-357e-acd2-8027367f7488.roa (raw, json)
Hash identifier:          4b642tMVHjsWg1BFZDiHRvVxqnKJWStgyVpN4j/onIw=
Subject key identifier:   4D:D3:F9:3B:FD:6F:8A:70:7F:BD:A4:F3:A2:00:49:89:D2:BF:BA:A2
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584D3B34E01E0C591F5633106020
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ebc015be-5a2e-357e-acd2-8027367f7488.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     397849
IP address blocks:        169.148.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e0:1e:0c:59:1f:56:33:10:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=10b5c7a2-b124-4fe9-ab41-05e7627bc210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:8a:78:51:28:c8:f5:8a:ec:71:57:27:ad:
                    8a:6a:38:a2:a2:c7:45:28:c3:86:a4:df:3b:9f:9f:
                    93:48:68:9b:27:4b:16:c0:04:eb:b4:53:33:e1:39:
                    0f:b5:69:ab:a2:76:7f:ac:08:ae:56:45:3d:bd:5c:
                    63:d4:58:31:70:bd:db:35:c5:11:0e:7a:74:5b:de:
                    40:21:af:0b:26:9f:3a:14:0a:92:33:bd:11:f1:e9:
                    05:d2:7d:75:12:51:99:71:9f:35:99:f5:09:c6:15:
                    56:34:c2:de:e4:dd:42:80:44:4d:a7:35:27:bb:09:
                    d8:19:23:31:25:35:31:45:21:53:5b:0a:c8:92:9a:
                    df:58:5c:2d:3c:10:a9:83:78:9f:dc:ab:76:f1:bd:
                    1f:d8:50:61:f4:66:ce:33:2f:91:19:a2:37:b3:98:
                    07:4d:bb:59:3b:04:f7:0b:fb:1c:68:17:19:c5:fb:
                    d6:c3:7c:a2:c9:53:9f:72:74:d4:5c:9b:a2:8f:09:
                    14:7c:2d:ea:9b:6f:3f:0c:ee:05:71:b6:87:d3:fc:
                    4c:53:ba:ca:f9:65:2d:59:79:29:81:1a:ca:3d:61:
                    36:15:d3:8b:54:62:64:95:ee:5a:a7:a0:6a:b7:a5:
                    c5:e5:65:13:b0:be:11:c5:65:87:e4:02:6b:8f:e6:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:F9:3B:FD:6F:8A:70:7F:BD:A4:F3:A2:00:49:89:D2:BF:BA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/ebc015be-5a2e-357e-acd2-8027367f7488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.148.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:71:e1:15:22:b7:20:15:fe:26:88:2e:99:a9:5b:b4:e3:
         8a:9c:47:6b:29:61:71:66:b0:85:bb:cb:c2:b9:93:7d:6e:a9:
         60:88:07:1c:76:a3:9d:86:fd:2d:b6:b1:34:ef:cf:17:14:b8:
         d0:48:89:6d:cb:8c:a4:08:dd:95:ee:70:cc:63:02:4a:04:30:
         07:78:9b:ba:e5:82:f6:3d:3c:ff:02:9e:19:a6:9d:f5:f4:87:
         31:53:d3:b7:1e:d7:72:6d:7f:9a:3f:76:1b:76:f8:9e:0a:12:
         c7:fb:eb:ec:99:5d:cc:e8:b2:a3:ff:76:52:17:9f:1b:6c:ae:
         04:d4:48:d6:3b:3e:5c:1e:8a:78:07:cd:13:1c:ff:25:10:64:
         be:2d:f4:3f:3b:c7:94:44:7b:72:32:4a:be:b4:11:30:57:04:
         ab:8d:96:09:1a:49:2e:e1:42:1c:db:04:45:76:75:f5:4a:b7:
         8b:5c:96:9c:51:8c:8a:0b:14:95:54:72:f1:f1:43:7a:8d:77:
         64:6a:29:04:d7:3f:de:fb:c8:43:6f:c4:5a:05:9f:9a:3d:91:
         20:f9:b7:71:4d:e4:f4:f9:c4:c7:1c:3a:ed:2e:ba:fa:ff:30:
         64:7c:ce:86:63:e9:ab:f1:38:87:7d:17:d4:b2:a5:b1:40:13:
         47:f8:e3:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOAeDFkfVjMQYCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi
MmUwMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk
MTBiNWM3YTItYjEyNC00ZmU5LWFiNDEtMDVlNzYyN2JjMjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrWKeFEoyPWK7HFXJ62KajiiosdFKMOGpN87
n5+TSGibJ0sWwATrtFMz4TkPtWmronZ/rAiuVkU9vVxj1FgxcL3bNcURDnp0W95A
Ia8LJp86FAqSM70R8ekF0n11ElGZcZ81mfUJxhVWNMLe5N1CgERNpzUnuwnYGSMx
JTUxRSFTWwrIkprfWFwtPBCpg3if3Kt28b0f2FBh9GbOMy+RGaI3s5gHTbtZOwT3
C/scaBcZxfvWw3yiyVOfcnTUXJuijwkUfC3qm28/DO4FcbaH0/xMU7rK+WUtWXkp
gRrKPWE2FdOLVGJkle5ap6Bqt6XF5WUTsL4RxWWH5AJrj+bgvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3T+Tv9b4pwf72k86IASYnSv7qiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm
OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvZWJjMDE1YmUtNWEyZS0z
NTdlLWFjZDItODAyNzM2N2Y3NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5
ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx
YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw
ODM0MWIyZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqZSiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGCbceEVIrcgFf4miC6ZqVu044qcR2spYXFmsIW7y8K5k31uqWCIBxx2
o52G/S22sTTvzxcUuNBIiW3LjKQI3ZXucMxjAkoEMAd4m7rlgvY9PP8CnhmmnfX0
hzFT07ce13Jtf5o/dht2+J4KEsf76+yZXczosqP/dlIXnxtsrgTUSNY7PlweingH
zRMc/yUQZL4t9D87x5REe3IySr60ETBXBKuNlgkaSS7hQhzbBEV2dfVKt4tclpxR
jIoLFJVUcvHxQ3qNd2RqKQTXP977yENvxFoFn5o9kSD5t3FN5PT5xMccOu0uuvr/
MGR8zoZj6avxOId9F9SypbFAE0f444I=
-----END CERTIFICATE-----
Generated at Mon Mar 23 18:54:08 2026 by rpki-client