Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/eba1e5e5-5546-3112-99a4-70b94a66df87.roa
File:                     eba1e5e5-5546-3112-99a4-70b94a66df87.roa (raw, json)
Hash identifier:          De7H3OX6tk7QzRKP3fKFFLLscSxEjp+OjHNzIo9eO28=
Subject key identifier:   BE:93:BC:D4:DB:45:C2:82:89:D0:3F:3C:1E:B9:D8:FB:D4:7B:93:03
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584D53030858ABBC6D95D042E280
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/eba1e5e5-5546-3112-99a4-70b94a66df87.roa
Signing time:             Sun 29 Mar 2026 01:39:47 +0000
ROA not before:           Sun 29 Mar 2026 01:39:47 +0000
ROA not after:            Sat 27 Jun 2026 01:39:47 +0000
asID:                     834
IP address blocks:        207.180.43.0/24 maxlen: 24
                          207.180.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:53:03:08:58:ab:bc:6d:95:d0:42:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Mar 29 01:39:47 2026 GMT
            Not After : Jun 27 01:39:47 2026 GMT
        Subject: CN=027bce93-6d88-4572-8072-76d7c22d3c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:3b:63:b2:37:17:b7:16:8f:8d:1e:11:dc:
                    d2:b8:be:20:6a:a3:ee:67:1a:05:33:d8:de:3c:2e:
                    ad:31:79:a8:3c:f4:be:4c:0b:c5:56:82:4b:e7:b3:
                    b0:1b:a8:f1:27:bd:9e:b5:2c:ff:4a:29:32:c4:f4:
                    f8:c7:63:63:24:13:8b:0f:ed:59:51:87:b7:fa:ae:
                    7e:b7:f9:c8:de:60:33:e9:a0:0b:31:03:57:23:18:
                    ff:71:cc:7c:1b:bc:09:ae:39:3c:b0:cd:12:da:33:
                    e4:5c:f3:85:d4:bf:aa:65:19:ee:1f:03:f0:4c:64:
                    e9:f2:2b:25:fa:1c:0d:ce:a8:f0:21:4a:f2:2b:01:
                    52:60:fa:f5:60:80:45:0f:6b:85:fe:f4:5f:5f:e2:
                    f4:74:38:5c:2b:f3:22:94:98:9b:e8:81:51:e5:4b:
                    74:b8:82:f8:c3:44:c9:43:0b:97:3e:9c:6c:28:06:
                    ee:a5:0f:d9:8f:5b:5c:1b:7a:bf:fa:b0:f8:23:00:
                    6b:c5:be:9f:e3:72:05:32:78:cd:4c:58:15:f5:02:
                    b2:47:3b:51:f0:ba:a3:8a:7e:e3:ad:af:ce:fc:06:
                    b9:29:02:1f:0b:23:8f:c2:86:78:e7:ec:2b:0c:64:
                    7d:22:cb:3c:c0:b3:6b:4b:08:68:3f:e1:3f:d5:62:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:BC:D4:DB:45:C2:82:89:D0:3F:3C:1E:B9:D8:FB:D4:7B:93:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/eba1e5e5-5546-3112-99a4-70b94a66df87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.43.0/24
                  207.180.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f4:d9:30:c0:50:7a:7d:5f:2f:95:11:43:e4:77:88:c3:bf:
         df:11:e0:32:75:4a:bc:f3:51:d6:4a:9b:47:98:54:6a:48:91:
         e4:a2:15:a9:68:26:3d:05:4d:21:52:ac:37:3d:56:be:0f:cb:
         cb:53:c3:9f:72:b6:4a:d4:85:bc:48:51:0e:9d:16:e0:0d:50:
         a8:de:bd:c0:c2:79:18:5b:39:d9:c5:33:79:49:c7:97:df:20:
         f6:80:d1:4f:50:2d:43:ef:70:d2:d7:56:3d:53:9a:74:84:33:
         f1:c0:01:60:2d:81:d4:08:af:bf:dd:73:13:d0:bc:ac:c4:6f:
         71:a9:0a:1e:72:b0:5b:86:c7:ea:dd:b4:0f:98:be:9b:cf:89:
         2c:4a:7f:06:bf:14:d5:cd:4e:f0:31:5e:60:76:f9:4d:5b:20:
         bc:0b:68:d6:b2:d2:3b:6e:10:a5:9b:c8:fd:73:0e:91:73:b9:
         16:7b:61:29:1d:dc:77:8f:3d:27:e4:ce:f3:fd:60:80:f5:cf:
         6c:a8:5d:3e:d0:81:2e:d6:e1:07:61:2d:e3:93:d6:2e:01:99:
         0e:50:0e:6e:04:8a:a1:0c:08:dd:08:ff:a2:50:f0:38:ee:75:
         de:f8:ee:25:44:dd:4c:64:28:08:44:34:52:ad:32:4b:10:16:
         88:96:be:1d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1TAwhYq7xtldBC4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl
YTA4MB4XDTI2MDMyOTAxMzk0N1oXDTI2MDYyNzAxMzk0N1owLzEtMCsGA1UEAxMk
MDI3YmNlOTMtNmQ4OC00NTcyLTgwNzItNzZkN2MyMmQzYzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf87Y7I3F7cWj40eEdzSuL4gaqPuZxoFM9je
PC6tMXmoPPS+TAvFVoJL57OwG6jxJ72etSz/SikyxPT4x2NjJBOLD+1ZUYe3+q5+
t/nI3mAz6aALMQNXIxj/ccx8G7wJrjk8sM0S2jPkXPOF1L+qZRnuHwPwTGTp8isl
+hwNzqjwIUryKwFSYPr1YIBFD2uF/vRfX+L0dDhcK/MilJib6IFR5Ut0uIL4w0TJ
QwuXPpxsKAbupQ/Zj1tcG3q/+rD4IwBrxb6f43IFMnjNTFgV9QKyRztR8Lqjin7j
ra/O/Aa5KQIfCyOPwoZ45+wrDGR9Iss8wLNrSwhoP+E/1WJIBQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL6TvNTbRcKCidA/PB652PvUe5MDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy
MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZWJhMWU1ZTUtNTU0Ni0z
MTEyLTk5YTQtNzBiOTRhNjZkZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4
MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1
ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk
MWMzNWVhMDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz7QrAwQA
z7QtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACb02TDAUHp9Xy+VEUPkd4jDv98R4DJ1SrzzUdZKm0eYVGpI
keSiFaloJj0FTSFSrDc9Vr4Py8tTw59ytkrUhbxIUQ6dFuANUKjevcDCeRhbOdnF
M3lJx5ffIPaA0U9QLUPvcNLXVj1TmnSEM/HAAWAtgdQIr7/dcxPQvKzEb3GpCh5y
sFuGx+rdtA+YvpvPiSxKfwa/FNXNTvAxXmB2+U1bILwLaNay0jtuEKWbyP1zDpFz
uRZ7YSkd3HePPSfkzvP9YID1z2yoXT7QgS7W4QdhLeOT1i4BmQ5QDm4EiqEMCN0I
/6JQ8Djudd747iVE3UxkKAhENFKtMksQFoiWvh0=
-----END CERTIFICATE-----
Generated at Mon Mar 30 23:19:04 2026 by rpki-client