Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
File:                     4a48ae92-64c5-3e26-981f-085a604cbb12.roa (raw, json)
Hash identifier:          nuqaDWOhVV0mxmIc+zGNMNu2Q67z2/++z8skzn6n2h4=
Subject key identifier:   31:0D:43:E9:BF:80:2E:EC:12:4C:D8:6B:5F:5E:04:44:F1:EB:8B:E6
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584CB81C7FAF18B14E11C11D8480
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        144.25.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:7f:af:18:b1:4e:11:c1:1d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=95a99841-ae6b-4b14-bf6f-03c3b799775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:da:cf:90:a7:29:e4:35:b2:9c:22:59:60:
                    ab:c4:43:6f:35:b2:0a:3a:e0:3d:84:89:56:6e:e8:
                    01:87:89:fe:18:9a:8e:d9:ad:88:35:49:6e:de:57:
                    68:b6:72:cd:3f:cd:a3:c4:57:b2:25:29:81:1f:7d:
                    34:0a:72:bf:21:5a:6d:3a:a4:fb:b6:bc:73:5d:4b:
                    3a:92:33:72:7b:da:26:1f:6f:56:b4:4e:bf:50:1d:
                    ea:b2:c1:b6:27:80:09:46:64:da:f9:2c:82:3a:4b:
                    d1:b5:54:6b:6d:21:78:b7:33:71:ee:6f:7c:a3:e3:
                    17:11:0b:7d:16:24:18:9c:52:7d:b8:37:e8:11:c9:
                    76:c8:be:a4:45:4c:34:9e:ea:59:26:ca:15:e3:9f:
                    78:8e:e6:7f:df:91:c4:91:13:8c:ce:8d:73:37:3d:
                    b4:1c:51:88:dc:fe:af:b3:66:12:17:82:e5:d6:bf:
                    29:42:dd:17:ff:71:dc:c8:17:cd:81:72:2e:1f:7c:
                    7d:95:65:ad:39:39:f6:78:d8:16:ee:7e:ee:a0:c5:
                    0f:e3:f8:b3:08:5d:06:92:7a:3f:bd:a8:5a:d1:93:
                    9f:1e:ee:27:c4:08:25:0e:e3:ca:3c:ce:3a:0f:06:
                    4b:8c:a7:66:3e:53:a0:9b:29:1c:50:3e:5a:d2:ba:
                    dd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0D:43:E9:BF:80:2E:EC:12:4C:D8:6B:5F:5E:04:44:F1:EB:8B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.25.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:da:17:e7:15:0f:00:a9:7f:b1:c2:4c:98:cd:b8:8a:42:b9:
         2b:1f:28:49:f6:b2:51:05:f7:f4:59:a4:bc:dd:ce:5a:66:e4:
         6f:0c:81:6b:c3:f3:0c:57:cb:7e:86:a2:a4:7c:ec:ba:a6:24:
         2e:5b:f7:b8:62:59:07:97:3f:ea:98:a8:a9:c5:0e:5e:27:3f:
         74:66:d7:80:ba:ea:03:cd:e6:0f:29:15:b3:0e:f2:03:8b:da:
         ce:35:c7:e3:9b:06:ad:bb:81:c7:53:d6:7d:88:27:9b:92:39:
         0a:5a:a0:61:ee:14:34:a0:94:89:e2:a1:98:c6:bf:41:a1:e6:
         f6:65:a4:34:15:68:ba:32:19:6d:b4:ef:c3:4f:ab:1b:cf:11:
         e5:ee:b5:aa:83:f7:80:56:75:e3:1b:3d:21:70:a2:25:f4:9c:
         32:7a:bf:07:53:28:e6:36:55:e1:5c:f5:d7:47:ac:72:6c:55:
         52:63:c6:05:08:2e:e0:44:15:e9:a9:17:88:35:f6:d0:47:d9:
         ff:68:68:9c:c1:bc:48:d3:35:3e:1b:98:9f:db:e5:cf:8d:e4:
         b9:9e:42:10:c1:1f:0d:98:76:61:ec:53:cd:e4:ff:66:d2:5a:
         aa:42:96:56:97:b0:81:4d:00:ad:bc:23:a3:e3:90:8f:74:09:
         c1:df:cc:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HH+vGLFOEcEdhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk
OTVhOTk4NDEtYWU2Yi00YjE0LWJmNmYtMDNjM2I3OTk3NzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQHaz5CnKeQ1spwiWWCrxENvNbIKOuA9hIlW
bugBh4n+GJqO2a2INUlu3ldotnLNP82jxFeyJSmBH300CnK/IVptOqT7trxzXUs6
kjNye9omH29WtE6/UB3qssG2J4AJRmTa+SyCOkvRtVRrbSF4tzNx7m98o+MXEQt9
FiQYnFJ9uDfoEcl2yL6kRUw0nupZJsoV4594juZ/35HEkROMzo1zNz20HFGI3P6v
s2YSF4Ll1r8pQt0X/3HcyBfNgXIuH3x9lWWtOTn2eNgW7n7uoMUP4/izCF0Gkno/
vaha0ZOfHu4nxAglDuPKPM46DwZLjKdmPlOgmykcUD5a0rrdPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDENQ+m/gC7sEkzYa19eBETx64vmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNGE0OGFlOTItNjRjNS0z
ZTI2LTk4MWYtMDg1YTYwNGNiYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXaF+cVDwCpf7HCTJjNuIpCuSsfKEn2slEF9/RZpLzdzlpm5G8MgWvD
8wxXy36GoqR87LqmJC5b97hiWQeXP+qYqKnFDl4nP3Rm14C66gPN5g8pFbMO8gOL
2s41x+ObBq27gcdT1n2IJ5uSOQpaoGHuFDSglInioZjGv0Gh5vZlpDQVaLoyGW20
78NPqxvPEeXutaqD94BWdeMbPSFwoiX0nDJ6vwdTKOY2VeFc9ddHrHJsVVJjxgUI
LuBEFempF4g19tBH2f9oaJzBvEjTNT4bmJ/b5c+N5LmeQhDBHw2YdmHsU83k/2bS
WqpCllaXsIFNAK28I6PjkI90CcHfzA8=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:49 2026 by rpki-client