Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c350b131-3ad1-3eb6-ae90-1e06ae45fb7e.roa
File:                     c350b131-3ad1-3eb6-ae90-1e06ae45fb7e.roa (raw, json)
Hash identifier:          NcET9ptfZxk+VN4vppUuzkBY+plXJAScrioxUotA8zc=
Subject key identifier:   0D:13:8D:25:EE:5F:A4:42:8E:F2:24:14:DC:C6:44:B9:38:4F:95:D5
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584DBA3AE8402D0A3226BD5C3A00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c350b131-3ad1-3eb6-ae90-1e06ae45fb7e.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        208.127.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e8:40:2d:0a:32:26:bd:5c:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=f6a7dd24-6388-4e02-9ec1-6afe5f2619b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:f7:b4:b2:40:4e:1c:9c:2d:a9:3c:d2:d3:
                    b9:9a:5c:2c:76:01:66:88:6a:b9:69:77:d7:e4:9a:
                    b0:f6:3e:86:c4:0a:85:13:13:55:46:02:b1:1c:53:
                    5a:97:58:4a:15:5b:86:95:be:fc:23:c2:9a:30:2d:
                    e8:77:d4:ec:50:35:6e:bc:5a:42:a1:b8:07:81:4b:
                    f1:6c:72:a0:3f:09:89:ee:44:83:cb:29:8f:8c:3e:
                    21:14:53:22:dc:73:33:9d:46:55:17:d9:8b:40:9f:
                    97:b3:96:92:be:32:79:53:0a:37:2a:b2:17:60:d8:
                    e4:a1:9f:9e:be:f2:01:91:1b:46:a4:d8:59:c5:c3:
                    09:b6:29:7a:b2:5b:7c:d8:60:c3:6c:e8:00:4a:c3:
                    f6:71:9a:62:12:43:fa:02:01:35:30:14:ce:94:78:
                    8b:3b:c8:7c:a3:b1:4e:d8:dd:a9:40:3c:45:b4:5b:
                    80:e7:de:24:f7:a6:7d:29:37:dc:47:60:dd:57:75:
                    33:65:c1:dd:be:31:a7:ec:cd:bf:ad:23:43:86:c0:
                    79:06:54:eb:94:da:a1:2a:95:8f:e5:32:45:fb:75:
                    62:a7:68:73:50:fe:52:d8:c0:f8:16:7a:1b:64:76:
                    c8:1f:91:00:c7:dc:f6:ce:58:67:ef:92:c5:0c:14:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:13:8D:25:EE:5F:A4:42:8E:F2:24:14:DC:C6:44:B9:38:4F:95:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c350b131-3ad1-3eb6-ae90-1e06ae45fb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.127.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:91:16:ca:e5:3f:72:b3:6b:bc:7c:52:d9:41:03:2e:06:d2:
         43:71:8a:9a:ea:ec:6a:ee:7a:20:66:24:e6:85:c1:69:f9:53:
         99:78:0d:1a:23:3d:3d:64:1c:cc:52:b8:d0:4d:26:50:a9:c0:
         27:70:34:9f:f8:b5:62:50:c6:11:e3:f5:c7:77:78:81:f1:d9:
         5b:1a:20:ec:d2:c8:b6:49:e8:a8:07:68:68:9f:70:c2:63:3f:
         77:60:50:7d:48:e4:1d:a0:43:37:ed:09:6d:d0:e3:b5:c3:ae:
         35:84:a4:cf:0e:cd:e1:4c:7e:47:ca:6d:29:0d:50:75:7f:bb:
         91:54:17:84:43:cd:5c:0a:f9:5e:40:37:e5:b9:59:9f:f0:0c:
         a9:69:51:17:35:06:93:ed:ba:9d:7a:d1:4c:50:d4:10:8a:38:
         c7:71:5f:80:8d:64:51:a3:02:3d:d8:cb:ff:4d:c3:0c:bf:7e:
         fd:f7:ab:a4:ab:49:f0:a3:9f:0f:2b:2e:45:7e:b5:8f:b1:ab:
         ee:f3:e6:44:f5:d3:4c:3d:8c:f4:92:64:f3:47:9a:23:f7:29:
         69:d0:d8:af:37:38:9c:04:49:1f:aa:66:99:e6:35:05:28:fd:
         49:fd:67:b1:16:06:02:29:0f:be:d7:fc:4e:32:98:22:c8:da:
         4a:e4:11:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuhALQoyJr1cOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
ZjZhN2RkMjQtNjM4OC00ZTAyLTllYzEtNmFmZTVmMjYxOWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1n3tLJAThycLak80tO5mlwsdgFmiGq5aXfX
5Jqw9j6GxAqFExNVRgKxHFNal1hKFVuGlb78I8KaMC3od9TsUDVuvFpCobgHgUvx
bHKgPwmJ7kSDyymPjD4hFFMi3HMznUZVF9mLQJ+Xs5aSvjJ5Uwo3KrIXYNjkoZ+e
vvIBkRtGpNhZxcMJtil6slt82GDDbOgASsP2cZpiEkP6AgE1MBTOlHiLO8h8o7FO
2N2pQDxFtFuA594k96Z9KTfcR2DdV3UzZcHdvjGn7M2/rSNDhsB5BlTrlNqhKpWP
5TJF+3Vip2hzUP5S2MD4FnobZHbIH5EAx9z2zlhn75LFDBRE8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0TjSXuX6RCjvIkFNzGRLk4T5XVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYzM1MGIxMzEtM2FkMS0z
ZWI2LWFlOTAtMWUwNmFlNDVmYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0H/OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKRFsrlP3Kza7x8UtlBAy4G0kNxiprq7GrueiBmJOaFwWn5U5l4DRoj
PT1kHMxSuNBNJlCpwCdwNJ/4tWJQxhHj9cd3eIHx2VsaIOzSyLZJ6KgHaGifcMJj
P3dgUH1I5B2gQzftCW3Q47XDrjWEpM8OzeFMfkfKbSkNUHV/u5FUF4RDzVwK+V5A
N+W5WZ/wDKlpURc1BpPtup160UxQ1BCKOMdxX4CNZFGjAj3Yy/9Nwwy/fv33q6Sr
SfCjnw8rLkV+tY+xq+7z5kT100w9jPSSZPNHmiP3KWnQ2K83OJwESR+qZpnmNQUo
/Un9Z7EWBgIpD77X/E4ymCLI2krkERE=
-----END CERTIFICATE-----
Generated at Wed May 13 10:13:16 2026 by rpki-client