Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa
File:                     6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (raw, json)
Hash identifier:          rM07+jSS62kHp8HAd/HnwF2i3VKagM1ri9Q0LXT7AOA=
Subject key identifier:   71:57:D7:6A:62:F4:40:93:FC:43:2C:24:D8:61:06:08:84:7A:C6:A6
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F4328584DB1DAC708145F1F84E3060D80
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     46432
IP address blocks:        208.88.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:c7:08:14:5f:1f:84:e3:06:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=6698d8a2-1473-471a-a640-59f302b894a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:67:19:35:26:84:45:7a:89:31:53:ec:00:
                    6c:89:3c:45:75:9a:64:e2:f1:84:85:1c:dd:56:82:
                    53:96:96:31:c2:a9:9d:08:32:cf:1e:5a:81:b4:07:
                    81:ee:6b:81:6f:25:85:62:d6:4d:cc:cf:18:f7:bc:
                    34:f5:7e:d5:d5:01:ec:e0:89:a4:13:b0:b2:1a:66:
                    b4:04:53:eb:c7:cb:c4:4f:5f:27:53:55:26:6c:34:
                    08:83:3d:49:75:85:56:96:ec:20:ac:72:ed:c0:18:
                    fa:10:3d:f6:26:db:75:9d:82:63:e7:4c:56:68:ab:
                    5e:0f:56:d9:97:52:fb:a9:59:89:2d:36:8a:b5:b5:
                    d8:a6:f0:62:e3:2e:69:29:23:2a:c6:93:1c:fb:d4:
                    e7:3c:75:dc:59:5d:7a:9d:cb:b1:a9:c7:5b:bb:ec:
                    f8:ad:3f:f9:58:15:fa:8c:28:c7:b4:53:c3:09:e2:
                    4b:f1:21:0c:8d:4d:89:69:29:d9:53:50:18:74:ec:
                    ef:eb:3f:18:56:d0:9a:a5:33:24:fe:a2:88:34:87:
                    fe:33:9f:bc:64:19:23:4a:24:e7:db:48:d0:26:af:
                    0d:94:f1:57:12:64:5a:1f:c3:5c:bf:27:c5:ee:ff:
                    95:ca:5f:25:c0:4a:e6:8e:28:4d:70:1e:ac:51:9a:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:57:D7:6A:62:F4:40:93:FC:43:2C:24:D8:61:06:08:84:7A:C6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:3a:ab:11:9e:7e:b0:cf:46:1e:81:45:18:4d:e5:a7:77:
         f1:ff:fc:51:13:be:cc:5d:14:5c:5d:0a:7d:9f:f0:32:99:e7:
         b6:75:83:50:68:31:8b:b1:a6:ca:36:95:74:77:3c:02:22:7f:
         48:2a:a0:11:61:53:ba:ea:13:b3:df:e7:78:e2:c3:7b:c9:dd:
         2e:d0:fe:88:41:d0:72:76:8a:4d:f7:5f:96:d3:bb:60:3a:2c:
         bf:56:d6:10:49:5b:de:c3:74:f8:2d:3f:ea:9d:34:0e:c1:f1:
         3a:1f:3f:c1:73:fd:80:29:5a:4f:11:17:83:7f:ec:35:54:b3:
         e4:30:99:cb:bd:17:ee:36:c1:fd:e6:6e:d3:36:2a:74:60:63:
         90:cd:5c:0d:d2:8e:e6:2c:4b:8e:74:57:32:06:9f:9b:4f:eb:
         61:b5:f8:ac:57:6b:5f:78:10:92:97:7b:f9:cb:92:59:6b:19:
         e3:a6:02:c1:42:19:57:fc:68:46:97:b6:78:75:26:62:76:29:
         fb:b0:88:90:cc:9c:68:fe:32:75:a8:e6:ad:32:b0:d7:6d:c7:
         30:24:42:a1:c2:7d:fe:a3:58:0e:7f:5e:8e:d7:ed:74:7e:7c:
         b1:36:94:06:60:14:a8:62:97:34:fc:21:28:6b:0a:46:fd:b0:
         ea:89:9c:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2scIFF8fhOMGDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm
Yjg1MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
NjY5OGQ4YTItMTQ3My00NzFhLWE2NDAtNTlmMzAyYjg5NGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s1nGTUmhEV6iTFT7ABsiTxFdZpk4vGEhRzd
VoJTlpYxwqmdCDLPHlqBtAeB7muBbyWFYtZNzM8Y97w09X7V1QHs4ImkE7CyGma0
BFPrx8vET18nU1UmbDQIgz1JdYVWluwgrHLtwBj6ED32Jtt1nYJj50xWaKteD1bZ
l1L7qVmJLTaKtbXYpvBi4y5pKSMqxpMc+9TnPHXcWV16ncuxqcdbu+z4rT/5WBX6
jCjHtFPDCeJL8SEMjU2JaSnZU1AYdOzv6z8YVtCapTMk/qKINIf+M5+8ZBkjSiTn
20jQJq8NlPFXEmRaH8NcvyfF7v+Vyl8lwErmjihNcB6sUZpiswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFX12pi9ECT/EMsJNhhBgiEesamMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw
ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNjEwOWI5ZTktOWYxNC0z
NDMyLWEzNTAtNGUyYmE3ZjQ5ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh
NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm
ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1
Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADoOqsRnn6wz0YegUUYTeWnd/H//FETvsxdFFxdCn2f8DKZ57Z1g1Bo
MYuxpso2lXR3PAIif0gqoBFhU7rqE7Pf53jiw3vJ3S7Q/ohB0HJ2ik33X5bTu2A6
LL9W1hBJW97DdPgtP+qdNA7B8TofP8Fz/YApWk8RF4N/7DVUs+Qwmcu9F+42wf3m
btM2KnRgY5DNXA3SjuYsS450VzIGn5tP62G1+KxXa194EJKXe/nLkllrGeOmAsFC
GVf8aEaXtnh1JmJ2KfuwiJDMnGj+MnWo5q0ysNdtxzAkQqHCff6jWA5/Xo7X7XR+
fLE2lAZgFKhilzT8IShrCkb9sOqJnFQ=
-----END CERTIFICATE-----
Generated at Wed May 13 11:44:28 2026 by rpki-client