Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa
File:                     14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa (raw, json)
Hash identifier:          hvb685W/oDElcnOrdNgY/zHJmX9jDB0avTtaE00KuwU=
Subject key identifier:   C0:73:B0:69:BE:5A:2E:BD:CC:2E:59:38:C0:34:27:BE:50:8D:00:4C
Certificate issuer:       /CN=4d4940f4-61c2-4251-acdb-36be83cdc744
Certificate serial:       010D0C9F4328584CFB1CFF42A1E68D17A30349C0
Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     6407
IP address blocks:        108.63.18.0/23 maxlen: 24
                          108.63.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:ff:42:a1:e6:8d:17:a3:03:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=e6aab54f-c518-4814-988f-86651ad39af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:ee:97:12:e1:2e:0f:78:3f:af:71:35:1d:
                    f2:db:70:cc:75:96:2e:61:0f:2e:34:54:ec:a3:bc:
                    b5:c6:ac:63:9e:8b:e1:35:06:0e:8f:fe:4c:7a:76:
                    fb:11:d4:32:ec:31:3e:20:13:11:0f:66:5e:fa:7b:
                    18:97:ac:13:3c:15:76:40:d1:45:56:ab:3e:cd:fd:
                    3d:1d:9a:47:1f:0f:f4:2b:51:bf:84:a0:6f:9b:75:
                    0f:7c:0d:0d:ca:8f:bb:6c:93:78:25:2b:00:96:d3:
                    6d:16:fd:05:68:c4:db:f7:77:d2:15:2b:b5:33:38:
                    2c:67:f4:84:2c:2b:a8:1f:0b:4e:00:e9:25:33:55:
                    e0:5a:b0:50:3d:ff:df:68:e9:92:ac:03:ef:dc:bd:
                    8b:54:4e:4b:b6:bc:46:d5:b2:57:05:d1:55:e8:3d:
                    8d:71:0b:24:2b:a3:eb:8e:78:97:e5:ef:62:57:85:
                    f9:d0:61:34:4e:3a:01:98:20:37:0b:64:65:99:42:
                    5e:b8:dc:55:4b:d8:1b:0f:15:90:c4:c6:29:e6:7d:
                    6a:07:b3:6b:8f:82:68:90:f7:8a:e6:2e:1c:9d:2e:
                    a9:0f:f0:ae:11:1f:8c:cc:2c:83:7b:c2:f7:ab:1c:
                    68:1f:36:84:4d:53:cb:64:11:6c:16:6b:ff:e0:e7:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:B0:69:BE:5A:2E:BD:CC:2E:59:38:C0:34:27:BE:50:8D:00:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/14bb2815-17b3-36ca-b86b-40cc4786f2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl

            X509v3 Authority Key Identifier:
                keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.63.18.0-108.63.21.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:4a:6b:39:e1:79:16:7a:35:35:2f:ce:46:d8:14:7f:0b:
         07:09:52:c2:b9:aa:0e:d5:ad:1f:fa:6e:0a:3c:6e:85:15:14:
         17:e8:15:4a:b8:1c:8f:34:b5:b7:a0:6f:50:a1:34:91:fd:42:
         88:e9:df:09:2b:f5:6e:19:e5:35:6c:97:0b:30:b2:63:38:99:
         6d:d0:44:ad:3c:fd:26:b1:bf:a9:84:78:17:7a:53:b0:ad:2f:
         53:89:84:46:d8:73:4d:91:e1:02:1d:cd:76:08:3d:22:d1:df:
         df:89:f7:2f:cb:7e:ec:ce:57:e5:35:4e:12:70:96:7f:f3:2e:
         3d:00:fc:7d:4c:59:59:6c:42:f4:d4:64:33:08:c1:a6:80:2b:
         ce:6a:88:01:bf:8d:3f:f8:a0:21:c2:34:56:a1:3b:3e:56:0c:
         aa:4c:bb:ca:78:63:26:01:4b:8b:dd:d9:40:b6:a3:a2:80:14:
         9a:67:55:9a:46:26:6c:bc:b7:0f:cf:b4:fa:49:9c:e0:f4:88:
         8a:bf:89:72:3b:a7:9d:c2:07:44:b4:63:50:81:36:46:ed:11:
         ab:4a:aa:af:b1:ec:b2:2a:9a:aa:aa:03:ce:7a:e3:8b:57:44:
         83:5d:a0:6a:f1:fe:2d:ec:68:d7:74:cd:5f:a6:98:68:d0:e6:
         7e:b2:48:c7
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEz7HP9CoeaNF6MDScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj
NzQ0MB4XDTI2MDIyNTE0MDAzOVoXDTI2MDUyNjEzMDAzOVowLzEtMCsGA1UEAxMk
ZTZhYWI1NGYtYzUxOC00ODE0LTk4OGYtODY2NTFhZDM5YWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb7ulxLhLg94P69xNR3y23DMdZYuYQ8uNFTs
o7y1xqxjnovhNQYOj/5Menb7EdQy7DE+IBMRD2Ze+nsYl6wTPBV2QNFFVqs+zf09
HZpHHw/0K1G/hKBvm3UPfA0Nyo+7bJN4JSsAltNtFv0FaMTb93fSFSu1MzgsZ/SE
LCuoHwtOAOklM1XgWrBQPf/faOmSrAPv3L2LVE5LtrxG1bJXBdFV6D2NcQskK6Pr
jniX5e9iV4X50GE0TjoBmCA3C2RlmUJeuNxVS9gbDxWQxMYp5n1qB7Nrj4JokPeK
5i4cnS6pD/CuER+MzCyDe8L3qxxoHzaETVPLZBFsFmv/4OdluQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFMBzsGm+Wi69zC5ZOMA0J75QjQBMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5
NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMTRiYjI4MTUtMTdiMy0z
NmNhLWI4NmItNDBjYzQ3ODZmMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj
ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk
Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl
ODNjZGM3NDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFsPxID
BAFsPxQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAD7RKaznheRZ6NTUvzkbYFH8LBwlSwrmqDtWtH/puCjxu
hRUUF+gVSrgcjzS1t6BvUKE0kf1CiOnfCSv1bhnlNWyXCzCyYziZbdBErTz9JrG/
qYR4F3pTsK0vU4mERthzTZHhAh3Ndgg9ItHf34n3L8t+7M5X5TVOEnCWf/MuPQD8
fUxZWWxC9NRkMwjBpoArzmqIAb+NP/igIcI0VqE7PlYMqky7ynhjJgFLi93ZQLaj
ooAUmmdVmkYmbLy3D8+0+kmc4PSIir+JcjunncIHRLRjUIE2Ru0Rq0qqr7Hssiqa
qqoDznrji1dEg12gavH+Lexo13TNX6aYaNDmfrJIxw==
-----END CERTIFICATE-----
Generated at Fri Feb 27 15:36:57 2026 by rpki-client