Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa
File:                     48a9e343-3956-34bd-9048-412486df0413.roa (raw, json)
Hash identifier:          seLlm9/iGthJoSpOERPk4x0SkNAAjLCZ416z0Jm1Ok4=
Subject key identifier:   BE:A8:18:67:79:E8:52:C7:05:54:6A:73:76:EA:42:C0:27:99:61:A5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB2170B9C5A8B3B1B64FBE0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        144.33.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:17:0b:9c:5a:8b:3b:1b:64:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=69424cca-061b-44b1-bb1e-6cd24d01eb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:0e:e1:e3:fa:5e:ee:8d:03:f5:b4:30:1c:
                    0e:8e:57:d9:74:38:19:97:32:4a:d4:e9:e0:bc:79:
                    57:c6:da:b2:3c:ee:6f:63:ce:e9:aa:b8:82:7a:ca:
                    51:29:8a:44:c6:ca:c2:cb:c7:64:cc:08:50:1c:59:
                    65:8b:12:c3:cf:79:b8:fb:4e:5f:a2:f0:cc:58:3e:
                    84:f7:cf:94:42:94:c6:9e:94:b3:60:d5:05:76:62:
                    30:0f:bf:73:e9:a4:d2:3f:64:67:bb:ee:93:89:81:
                    bd:4f:06:bb:15:14:83:a6:97:04:19:68:ea:01:27:
                    8d:b7:1c:74:f9:9e:fb:e3:fa:bf:2f:0a:e0:c0:5f:
                    61:3f:12:78:68:23:b8:6d:7e:42:c1:dc:b0:b3:09:
                    b2:0f:5d:96:af:8c:c7:da:2a:58:99:27:69:a8:4d:
                    22:a3:6c:a4:24:24:00:99:7c:79:63:72:ba:2b:8d:
                    a0:ac:08:c5:ea:82:9b:8a:3d:44:6d:55:bf:d2:45:
                    aa:52:90:e5:72:4b:a2:4b:07:a3:9d:a8:fb:bd:da:
                    32:d9:4f:56:5c:92:87:f1:c3:e8:0c:64:56:78:13:
                    f9:8d:d2:90:17:8c:93:1e:47:58:7a:03:97:35:a3:
                    cf:1e:43:71:a6:d5:21:6a:ee:41:14:73:a4:cc:09:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:18:67:79:E8:52:C7:05:54:6A:73:76:EA:42:C0:27:99:61:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/48a9e343-3956-34bd-9048-412486df0413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.33.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:99:a1:ed:62:87:34:a4:9e:89:66:c5:ea:86:53:62:e3:1d:
         fa:70:f7:70:25:e8:15:13:fe:d2:04:aa:84:0e:60:2d:65:15:
         b2:5a:2e:f3:99:30:8f:0f:99:b9:5a:07:3f:6e:f1:d2:df:33:
         81:4e:6a:7e:68:19:4b:1a:81:b9:13:3f:88:fd:44:e5:f3:74:
         18:ef:9e:01:fd:3a:a7:b7:dc:89:9a:6a:ee:a9:20:71:c0:61:
         9f:23:04:37:13:4b:b0:ba:3d:72:42:1c:e5:93:7e:61:eb:d3:
         db:c4:03:dd:e5:0c:c5:c9:60:b2:66:4e:19:ac:68:b0:72:54:
         0f:1d:34:7d:2a:f6:af:e9:cf:09:6b:7c:ec:e4:42:d2:ba:b2:
         c1:7c:44:88:b8:e2:41:9f:5f:27:41:1b:88:9a:f8:70:a7:ee:
         59:58:44:1b:8d:17:9d:dd:cb:e6:16:ea:c8:bb:8c:a0:cc:3b:
         cd:9f:4f:60:c0:16:1e:9b:4d:ef:e9:9d:38:30:0c:32:28:94:
         c9:ab:33:c8:38:dd:d8:6a:0c:75:80:38:a0:f7:54:f3:3c:a8:
         bb:01:fc:f0:4c:0d:95:07:58:47:73:ea:e4:93:2f:fc:56:33:
         ec:61:2c:e4:bf:9d:ea:9e:de:88:01:88:6a:25:3c:89:20:40:
         fe:95:4a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shcLnFqLOxtk++AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk
Njk0MjRjY2EtMDYxYi00NGIxLWJiMWUtNmNkMjRkMDFlYjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3loO4eP6Xu6NA/W0MBwOjlfZdDgZlzJK1Ong
vHlXxtqyPO5vY87pqriCespRKYpExsrCy8dkzAhQHFllixLDz3m4+05fovDMWD6E
98+UQpTGnpSzYNUFdmIwD79z6aTSP2Rnu+6TiYG9Twa7FRSDppcEGWjqASeNtxx0
+Z774/q/LwrgwF9hPxJ4aCO4bX5CwdywswmyD12Wr4zH2ipYmSdpqE0io2ykJCQA
mXx5Y3K6K42grAjF6oKbij1EbVW/0kWqUpDlckuiSwejnaj7vdoy2U9WXJKH8cPo
DGRWeBP5jdKQF4yTHkdYegOXNaPPHkNxptUhau5BFHOkzAlRTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6oGGd56FLHBVRqc3bqQsAnmWGlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDhhOWUzNDMtMzk1Ni0z
NGJkLTkwNDgtNDEyNDg2ZGYwNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCEqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSZoe1ihzSknolmxeqGU2LjHfpw93Al6BUT/tIEqoQOYC1lFbJaLvOZ
MI8PmblaBz9u8dLfM4FOan5oGUsagbkTP4j9ROXzdBjvngH9Oqe33Imaau6pIHHA
YZ8jBDcTS7C6PXJCHOWTfmHr09vEA93lDMXJYLJmThmsaLByVA8dNH0q9q/pzwlr
fOzkQtK6ssF8RIi44kGfXydBG4ia+HCn7llYRBuNF53dy+YW6si7jKDMO82fT2DA
Fh6bTe/pnTgwDDIolMmrM8g43dhqDHWAOKD3VPM8qLsB/PBMDZUHWEdz6uSTL/xW
M+xhLOS/neqe3ogBiGolPIkgQP6VSgE=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:01 2026 by rpki-client