Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/18d278c5-b20f-3e96-af08-a812fd5a7b39.roa
File:                     18d278c5-b20f-3e96-af08-a812fd5a7b39.roa (raw, json)
Hash identifier:          oPv3kK2Wx/p2G48t2Sr8RmXXl0EEdOiBzdXJq/8uHi0=
Subject key identifier:   48:4E:F8:BE:25:39:30:A6:E5:5A:0B:96:19:CE:CC:9F:1C:78:FB:31
Certificate issuer:       /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
Certificate serial:       010D0C9F4328584EC5A4E5257E3BAF7299460500
Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/18d278c5-b20f-3e96-af08-a812fd5a7b39.roa
Signing time:             Sat 08 Aug 2026 19:55:00 +0000
ROA not before:           Sat 08 Aug 2026 19:55:00 +0000
ROA not after:            Fri 06 Nov 2026 20:44:50 +0000
asID:                     54624
IP address blocks:        149.24.27.0/24 maxlen: 24
                          149.24.64.0/20 maxlen: 20
                          149.24.77.0/24 maxlen: 24
                          149.24.160.0/24 maxlen: 24
                          149.24.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c5:a4:e5:25:7e:3b:af:72:99:46:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
        Validity
            Not Before: Aug  8 19:55:00 2026 GMT
            Not After : Nov  6 20:44:50 2026 GMT
        Subject: CN=b8720ba4-f8d6-4a21-803c-ecc2de6a742b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:18:7d:49:55:00:6b:fa:e8:07:32:59:9d:
                    50:fb:b1:28:68:7e:b3:9d:bb:15:ff:9e:48:f0:b3:
                    bf:80:06:33:7e:e3:fb:43:00:d7:77:68:5b:f6:c0:
                    7f:42:67:cc:74:62:ca:fc:7f:c9:d7:c4:1f:a1:d8:
                    ef:35:91:05:18:33:5f:9c:f4:40:2a:1a:89:4a:75:
                    e8:b2:0b:6a:d4:63:8f:55:e7:a4:26:5a:75:8b:75:
                    98:54:15:1f:a6:73:47:dd:11:28:4e:4e:8c:41:93:
                    76:90:c0:a0:90:60:3e:e3:26:78:68:42:a3:36:ca:
                    45:92:20:65:81:f4:62:cd:3b:b8:82:8b:05:a0:a0:
                    d2:cb:b4:d0:f7:48:ca:17:2f:1f:a8:e4:51:71:dc:
                    5f:32:a1:9f:f3:c8:0c:70:3a:22:06:c6:61:89:c9:
                    1e:a2:ca:aa:07:8c:8b:85:0f:55:d6:11:ec:89:70:
                    a5:d7:e2:f3:06:78:6a:c4:bc:d4:59:3b:c6:d4:6f:
                    95:22:80:0e:3f:e5:40:9d:ad:3b:a4:55:69:aa:16:
                    fc:ff:ae:1f:f0:ce:6d:f6:98:1f:3c:74:67:af:b9:
                    3b:c9:03:94:c8:8d:49:e8:ca:31:ae:34:df:21:ae:
                    a0:cc:5f:da:51:39:66:94:7c:7c:e4:62:69:c9:c5:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:F8:BE:25:39:30:A6:E5:5A:0B:96:19:CE:CC:9F:1C:78:FB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/18d278c5-b20f-3e96-af08-a812fd5a7b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl

            X509v3 Authority Key Identifier:
                keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.24.27.0/24
                  149.24.64.0/20
                  149.24.160.0/24
                  149.24.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6f:21:72:ee:b0:c7:a4:95:9a:2a:cf:3b:00:2e:46:ac:93:
         fc:ed:b7:bc:7a:b3:7d:2f:bc:c8:43:e0:03:13:e1:66:a3:08:
         64:ea:3b:59:b6:fa:86:0c:ba:bb:e8:10:4f:68:2e:97:ff:5d:
         ee:5a:50:90:10:6c:b8:1b:74:e0:a4:a0:c2:4c:58:8d:a8:d2:
         a1:df:76:4c:cb:a5:0e:4a:d5:52:40:85:d7:2d:6a:6b:7b:37:
         6c:ba:44:fb:7b:e5:2a:e0:22:1b:f0:94:ff:89:2d:3b:bf:79:
         51:24:f9:5e:46:08:05:e4:25:ea:88:4b:a4:37:20:e5:9d:4b:
         5e:8d:1d:5e:55:23:4c:1d:46:96:7e:68:6a:92:4d:d3:88:e7:
         e6:b7:e1:04:e0:81:a2:d2:51:27:05:4b:e2:4a:9d:6a:a9:66:
         c3:9e:09:10:38:53:65:53:42:91:80:2a:d5:37:d6:c9:a5:4e:
         b6:47:ef:f5:d0:b8:62:e5:c5:1e:0e:cd:49:0f:b1:5a:c1:d4:
         f0:2e:65:c8:3c:31:0d:83:3e:57:e1:d5:7b:2d:6a:bb:e2:d5:
         ef:dc:46:22:58:d1:2e:55:f9:15:9f:5b:21:9b:4e:09:dc:d9:
         2f:72:7c:af:70:11:15:b9:73:51:c1:6f:34:2f:af:82:7e:0c:
         3e:42:34:9d
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE7FpOUlfjuvcplGBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQz
NzQ0MB4XDTI2MDgwODE5NTUwMFoXDTI2MTEwNjIwNDQ1MFowLzEtMCsGA1UEAxMk
Yjg3MjBiYTQtZjhkNi00YTIxLTgwM2MtZWNjMmRlNmE3NDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSQYfUlVAGv66AcyWZ1Q+7EoaH6znbsV/55I
8LO/gAYzfuP7QwDXd2hb9sB/QmfMdGLK/H/J18QfodjvNZEFGDNfnPRAKhqJSnXo
sgtq1GOPVeekJlp1i3WYVBUfpnNH3REoTk6MQZN2kMCgkGA+4yZ4aEKjNspFkiBl
gfRizTu4gosFoKDSy7TQ90jKFy8fqORRcdxfMqGf88gMcDoiBsZhickeosqqB4yL
hQ9V1hHsiXCl1+LzBnhqxLzUWTvG1G+VIoAOP+VAna07pFVpqhb8/64f8M5t9pgf
PHRnr7k7yQOUyI1J6MoxrjTfIa6gzF/aUTlmlHx85GJpycUEHQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFEhO+L4lOTCm5VoLlhnOzJ8cePsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4
ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvMThkMjc4YzUtYjIwZi0z
ZTk2LWFmMDgtYTgxMmZkNWE3YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc2OGYyYzEtZjU1Yi00YWU4LWE0
NGMtYjliNjA2MmQzNzQ0L2M3NjhmMmMxLWY1NWItNGFlOC1hNDRjLWI5YjYwNjJk
Mzc0NC5jcmwwHwYDVR0jBBgwFoAU7k9Fo7URssO3gzYRQV66lfbLbZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2
MDYyZDM3NDQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAlRgbAwQE
lRhAAwQAlRigAwQClRikMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG5vIXLusMeklZoqzzsALkask/ztt7x6
s30vvMhD4AMT4WajCGTqO1m2+oYMurvoEE9oLpf/Xe5aUJAQbLgbdOCkoMJMWI2o
0qHfdkzLpQ5K1VJAhdctamt7N2y6RPt75SrgIhvwlP+JLTu/eVEk+V5GCAXkJeqI
S6Q3IOWdS16NHV5VI0wdRpZ+aGqSTdOI5+a34QTggaLSUScFS+JKnWqpZsOeCRA4
U2VTQpGAKtU31smlTrZH7/XQuGLlxR4OzUkPsVrB1PAuZcg8MQ2DPlfh1Xstarvi
1e/cRiJY0S5V+RWfWyGbTgnc2S9yfK9wERW5c1HBbzQvr4J+DD5CNJ0=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:43:44 2026 by rpki-client