Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa
File:                     fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa (raw, json)
Hash identifier:          dlqVqevaYrUhAJqW5QPTyAOe+cwpg/2+d7Mkn5b+h88=
Subject key identifier:   2A:05:97:41:08:64:42:27:CC:5E:92:9E:EA:34:1A:7F:FC:FC:0A:3A
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584F15CD09372BF90776DCB85A00
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6325
IP address blocks:        207.63.0.0/16 maxlen: 16
                          207.63.0.0/17 maxlen: 17
                          207.63.0.0/18 maxlen: 18
                          207.63.64.0/18 maxlen: 18
                          207.63.128.0/17 maxlen: 17
                          207.63.128.0/18 maxlen: 18
                          207.63.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:09:37:2b:f9:07:76:dc:b8:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=6d6191f9-06fd-4693-9eae-843c55c1f174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:60:35:74:e2:4f:fe:1a:c1:29:b8:68:25:
                    45:da:fb:1d:3f:b5:31:c6:cf:57:aa:66:05:40:fe:
                    90:c9:b5:b0:d0:4c:15:aa:e3:69:31:49:a0:4a:db:
                    8c:ca:f6:28:79:e3:96:4b:34:36:fb:e5:ef:15:21:
                    62:3a:2e:1e:d6:fc:5f:e0:ee:f4:9e:d8:a2:6e:b3:
                    a5:ee:b6:d2:67:52:22:b8:ce:72:c2:6f:0b:d5:6d:
                    14:35:3c:84:9c:16:6f:47:c6:b3:12:ea:1c:d6:03:
                    47:32:de:2d:e5:f5:a3:83:8f:67:e5:93:3d:67:df:
                    f6:8b:bd:39:86:f1:d6:ee:02:07:0c:67:86:3f:d2:
                    ff:1e:23:c3:10:cd:4c:20:55:15:93:10:24:e8:14:
                    90:c4:a6:96:88:06:44:9e:32:52:23:9a:4a:1d:50:
                    45:e8:2a:59:d6:fe:06:56:6c:e3:6d:ab:03:ae:e7:
                    06:4e:0f:18:07:68:78:f4:2e:ba:30:75:88:cf:67:
                    eb:62:15:d9:60:89:90:b8:ee:c7:88:23:35:09:f0:
                    08:12:2d:57:88:9a:d4:21:90:e8:64:de:69:15:8c:
                    99:3e:cf:b9:56:bf:c3:bd:8c:56:4b:71:89:9c:9c:
                    ae:dc:a3:9a:2a:c4:ba:b1:bf:3a:33:51:96:22:df:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:05:97:41:08:64:42:27:CC:5E:92:9E:EA:34:1A:7F:FC:FC:0A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:28:76:72:9c:9a:9b:31:86:0c:e3:81:b6:30:de:a3:aa:24:
         9d:02:18:a2:7e:cf:df:73:74:e4:c2:26:e7:bd:96:4d:39:ab:
         a8:83:47:5a:c8:db:ce:a5:44:79:64:8e:60:c8:ba:26:c6:d2:
         03:ef:6c:8e:0e:38:e2:52:b5:24:f4:28:ef:2f:30:f5:2c:5b:
         4d:90:68:20:58:e3:fb:1e:f6:8f:7b:cc:be:c6:dc:bb:57:5b:
         71:8d:a1:19:54:2a:61:00:76:2a:8f:75:7c:88:56:5f:de:59:
         43:47:ab:21:14:07:2c:80:cd:8e:be:67:65:5b:01:42:11:ec:
         29:23:f4:c8:ae:02:b1:e3:85:05:51:64:06:5f:e4:ca:f4:cb:
         d4:6e:3c:f3:a9:f1:80:88:2a:b3:31:a0:40:4c:ff:e2:e5:ba:
         db:fe:ec:38:41:77:c1:7e:55:e1:ad:f7:bf:be:34:5d:03:17:
         67:d3:0d:cd:c3:65:6a:a4:36:d3:de:32:b9:4d:da:4d:fa:3f:
         62:7c:82:8a:ac:29:30:b5:79:f7:4d:c5:9f:41:91:68:c2:0f:
         36:b9:89:16:43:3b:f5:b9:a9:c0:4b:9c:af:1a:d3:ac:b1:40:
         4b:a6:d5:ae:83:b9:e6:c8:22:a2:7f:ea:ab:4c:08:c4:cf:b2:
         57:49:95:3a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8VzQk3K/kHdty4WgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk
YjQ5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk
NmQ2MTkxZjktMDZmZC00NjkzLTllYWUtODQzYzU1YzFmMTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktVgNXTiT/4awSm4aCVF2vsdP7Uxxs9XqmYF
QP6QybWw0EwVquNpMUmgStuMyvYoeeOWSzQ2++XvFSFiOi4e1vxf4O70ntiibrOl
7rbSZ1IiuM5ywm8L1W0UNTyEnBZvR8azEuoc1gNHMt4t5fWjg49n5ZM9Z9/2i705
hvHW7gIHDGeGP9L/HiPDEM1MIFUVkxAk6BSQxKaWiAZEnjJSI5pKHVBF6CpZ1v4G
VmzjbasDrucGTg8YB2h49C66MHWIz2frYhXZYImQuO7HiCM1CfAIEi1XiJrUIZDo
ZN5pFYyZPs+5Vr/DvYxWS3GJnJyu3KOaKsS6sb86M1GWIt/DKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCoFl0EIZEInzF6Snuo0Gn/8/Ao6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy
OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvZmMzMjViYjYtODFmNS0z
ZGM1LWFjYjYtYWQ0ZGE3ODllNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz
NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh
ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj
ZDJhYWRiNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzz8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYih2cpyamzGGDOOBtjDeo6oknQIYon7P33N05MIm572WTTmrqINHWsjb
zqVEeWSOYMi6JsbSA+9sjg444lK1JPQo7y8w9SxbTZBoIFjj+x72j3vMvsbcu1db
cY2hGVQqYQB2Ko91fIhWX95ZQ0erIRQHLIDNjr5nZVsBQhHsKSP0yK4CseOFBVFk
Bl/kyvTL1G4886nxgIgqszGgQEz/4uW62/7sOEF3wX5V4a33v740XQMXZ9MNzcNl
aqQ2094yuU3aTfo/YnyCiqwpMLV5903Fn0GRaMIPNrmJFkM79bmpwEucrxrTrLFA
S6bVroO55sgion/qq0wIxM+yV0mVOg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:07:55 2026 by rpki-client