Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
File:                     67818fc7-8ab6-3138-abb2-01b0da986df0.roa (raw, json)
Hash identifier:          xWLvQcedetHe5+7eNshHG0ybYm160tjyXpMbdpjLQOA=
Subject key identifier:   BE:BC:08:F1:12:8A:E2:80:8C:28:84:CE:63:7C:6A:90:30:8E:6E:3A
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584D571F95BE390367DA347C5980
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     25655
IP address blocks:        173.241.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:95:be:39:03:67:da:34:7c:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=5bab306f-327b-48fd-8145-65026ac14be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:76:2f:33:d9:d3:c7:f5:58:75:66:e9:27:ba:
                    c1:5f:bb:79:97:6f:32:4f:2a:d8:e7:13:e2:6d:2c:
                    10:ce:b9:5c:a3:ff:bc:90:2f:a1:3e:e5:a5:14:a9:
                    81:fd:70:d0:77:22:17:d5:9c:93:f6:f7:3b:3c:de:
                    b5:d1:26:42:56:50:e9:3f:f9:2e:79:57:51:4e:cb:
                    25:27:a5:ed:41:65:1c:55:fb:c2:ee:9b:57:27:ee:
                    5d:7b:7b:e9:1a:3b:95:ca:85:8c:a8:c3:d2:3d:90:
                    2a:5f:e3:32:b0:71:e5:b7:52:bf:75:a4:c8:a3:d5:
                    03:cd:c2:6e:61:ad:ac:fb:c7:4d:ed:92:46:93:ef:
                    76:87:c3:b6:67:84:0c:4e:9e:24:63:e7:3d:89:9a:
                    82:7a:13:79:ec:c8:06:19:c7:b9:71:b1:3e:76:03:
                    99:c0:32:b4:88:15:f4:a2:8c:55:7c:de:54:0c:97:
                    c9:b1:19:29:8a:d1:d3:b4:53:e9:ca:63:9a:a5:46:
                    da:63:8c:40:7d:85:12:0d:18:e9:ce:38:77:e0:76:
                    c1:93:e5:02:c0:37:13:58:85:ea:cd:ea:9e:2c:36:
                    26:8c:86:38:b0:9e:ec:9b:11:61:7d:66:21:62:aa:
                    cb:b4:61:fa:a0:34:a2:07:fb:7b:08:11:b8:55:61:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:08:F1:12:8A:E2:80:8C:28:84:CE:63:7C:6A:90:30:8E:6E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:c9:3b:e4:ca:3e:f3:28:c5:ca:bf:85:de:05:80:49:01:
         86:04:06:91:a9:51:e3:79:62:17:da:47:6d:2a:eb:f3:d2:cb:
         d9:2d:cf:7f:bb:ac:ed:b1:8c:3e:c9:75:49:aa:8e:51:b7:f6:
         22:a5:e5:2d:fb:66:13:8c:48:96:b5:92:26:60:b3:d8:b5:fd:
         7b:18:f1:17:74:30:20:64:77:40:06:89:cb:0f:d4:f8:2b:6c:
         cf:85:b6:34:77:98:67:8c:90:f7:de:ab:42:40:60:72:5e:2f:
         44:77:4a:db:00:1a:00:cd:c1:d8:5c:65:5f:cf:c4:d3:02:16:
         5c:eb:e5:c1:b5:47:dd:c4:89:fd:f4:8e:a5:69:0b:90:f7:ce:
         3f:e1:5e:f9:a2:65:70:ff:b5:3e:cd:72:68:5d:32:9b:57:e8:
         70:b1:6a:dc:23:f1:f9:f0:07:82:3a:ba:92:ac:73:36:58:58:
         ac:e3:e7:cf:7f:02:77:f9:f7:05:44:8c:fe:90:76:f0:d8:32:
         ef:49:31:e3:86:8d:0b:66:9e:68:a7:14:b1:c7:0e:7c:1a:5e:
         84:59:cc:71:b0:4c:40:5b:a1:c8:9a:56:6a:21:12:0f:85:84:
         5b:6d:79:0a:c5:8e:8c:fb:d8:46:af:6c:c3:d1:9d:bd:c0:bc:
         f5:38:37:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5W+OQNn2jR8WYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx
ZDYyMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
NWJhYjMwNmYtMzI3Yi00OGZkLTgxNDUtNjUwMjZhYzE0YmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinYvM9nTx/VYdWbpJ7rBX7t5l28yTyrY5xPi
bSwQzrlco/+8kC+hPuWlFKmB/XDQdyIX1ZyT9vc7PN610SZCVlDpP/kueVdRTssl
J6XtQWUcVfvC7ptXJ+5de3vpGjuVyoWMqMPSPZAqX+MysHHlt1K/daTIo9UDzcJu
Ya2s+8dN7ZJGk+92h8O2Z4QMTp4kY+c9iZqCehN57MgGGce5cbE+dgOZwDK0iBX0
ooxVfN5UDJfJsRkpitHTtFPpymOapUbaY4xAfYUSDRjpzjh34HbBk+UCwDcTWIXq
zeqeLDYmjIY4sJ7smxFhfWYhYqrLtGH6oDSiB/t7CBG4VWFCDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL68CPESiuKAjCiEzmN8apAwjm46MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5
NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvNjc4MThmYzctOGFiNi0z
MTM4LWFiYjItMDFiMGRhOTg2ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl
NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh
MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk
ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATYyTvkyj7zKMXKv4XeBYBJAYYEBpGpUeN5YhfaR20q6/PSy9ktz3+7
rO2xjD7JdUmqjlG39iKl5S37ZhOMSJa1kiZgs9i1/XsY8Rd0MCBkd0AGicsP1Pgr
bM+FtjR3mGeMkPfeq0JAYHJeL0R3StsAGgDNwdhcZV/PxNMCFlzr5cG1R93Eif30
jqVpC5D3zj/hXvmiZXD/tT7NcmhdMptX6HCxatwj8fnwB4I6upKsczZYWKzj589/
Anf59wVEjP6QdvDYMu9JMeOGjQtmnminFLHHDnwaXoRZzHGwTEBbociaVmohEg+F
hFtteQrFjoz72EavbMPRnb3AvPU4N5E=
-----END CERTIFICATE-----
Generated at Wed Apr 15 16:12:49 2026 by rpki-client