Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
File:                     bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa (raw, json)
Hash identifier:          IYyUI9vKGgMZdvV6WHBZq8GbQWuL961fIRsNQCX05Ww=
Subject key identifier:   F8:99:CF:25:BA:0A:4A:28:8F:90:CA:CC:E0:09:A3:E1:BF:5A:61:F4
Certificate issuer:       /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
Certificate serial:       010D0C9F4328584D492A72FF12631735F4B08540
Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     30197
IP address blocks:        206.201.168.0/24 maxlen: 24
                          206.201.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:72:ff:12:63:17:35:f4:b0:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=220a1da3-de49-4de2-bd43-6cb1e142f51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:df:b3:f4:40:3b:9d:c0:62:75:36:21:04:
                    b8:03:55:5b:8b:6b:71:53:17:6e:b4:21:5b:89:cb:
                    b8:3e:d6:62:62:89:1b:ae:44:47:c0:a8:78:43:f0:
                    03:74:90:7a:74:5e:cd:dc:65:8c:93:45:a8:aa:80:
                    a1:98:c6:33:41:37:47:30:6d:3e:30:b4:26:0e:80:
                    de:b5:6a:9a:1e:d7:fe:4f:7c:dd:3e:92:00:24:2f:
                    63:ec:d1:06:8a:3a:86:9e:fc:ac:34:56:66:46:61:
                    38:f0:9e:f4:ae:b0:91:09:7c:4d:1e:b5:93:c4:44:
                    b6:78:6f:56:4b:9b:12:cd:2d:f3:78:1a:6e:17:88:
                    de:af:0a:19:ea:c8:d5:73:5c:97:f5:e5:74:aa:12:
                    0f:c1:f8:67:83:99:27:43:bd:5f:3b:66:64:fe:99:
                    f6:75:4b:b6:f2:92:0a:67:24:59:08:c5:48:03:99:
                    e7:5c:6f:36:09:89:13:34:1a:e2:eb:a2:69:2b:86:
                    8b:a6:6d:fc:ea:6d:cf:fd:de:d5:c2:26:a9:e0:70:
                    f2:60:b2:42:a3:e7:ed:8a:f2:1c:01:09:98:26:fe:
                    33:7d:37:e4:32:ad:3f:aa:9a:0f:5e:a9:c5:13:30:
                    99:c8:0a:cc:33:e6:42:77:0a:a0:53:c4:94:61:64:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:CF:25:BA:0A:4A:28:8F:90:CA:CC:E0:09:A3:E1:BF:5A:61:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/bd09a8f2-04b2-3cd9-b6b2-913cc8f95076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl

            X509v3 Authority Key Identifier:
                keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:86:33:b2:7e:7a:72:72:6c:69:b4:5f:6b:aa:1e:be:40:10:
         bb:e7:97:8e:24:f5:46:76:01:ba:ea:86:4c:a9:af:08:8c:c9:
         ad:57:4a:f7:7a:5b:c0:44:81:06:ee:37:88:d7:b9:6c:88:e1:
         71:97:59:6f:9d:4c:8b:ee:20:74:b7:3c:28:17:6a:51:7f:94:
         ac:1e:42:a7:5b:57:1c:21:6f:5f:62:7c:28:e0:62:bd:d3:e4:
         91:00:0a:0a:95:07:9e:e4:8c:2b:b4:ef:8c:77:40:5b:66:0b:
         18:e2:11:ed:69:d3:ba:87:dd:2e:f2:1b:fa:c5:16:07:1e:a4:
         09:84:bf:ad:ff:18:77:53:75:0d:78:0a:a2:6d:03:f9:3b:9b:
         42:b7:78:6b:8d:5a:c1:aa:cd:10:b9:3f:19:63:a0:e8:f9:9d:
         5d:3e:dd:ff:16:80:af:84:41:24:5c:ac:82:21:e3:10:eb:64:
         1f:84:80:f7:d5:1c:49:95:d4:e1:47:5a:82:69:c7:e9:61:fa:
         47:01:1c:5b:0c:4f:24:d5:2f:26:b2:f9:22:55:c4:29:ef:d8:
         5f:62:99:0a:87:4b:4e:fe:9e:08:6c:34:ab:5b:c2:fe:53:8e:
         33:c3:3b:e6:25:bd:99:2d:69:f9:c9:f9:f7:14:6a:03:41:ae:
         94:09:0e:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnL/EmMXNfSwhUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjY1ZTliNWMtMDU2ZS00NWQzLTg5YjItNjNjYjYyYjg0
MjEwMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
MjIwYTFkYTMtZGU0OS00ZGUyLWJkNDMtNmNiMWUxNDJmNTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMbfs/RAO53AYnU2IQS4A1Vbi2txUxdutCFb
icu4PtZiYokbrkRHwKh4Q/ADdJB6dF7N3GWMk0WoqoChmMYzQTdHMG0+MLQmDoDe
tWqaHtf+T3zdPpIAJC9j7NEGijqGnvysNFZmRmE48J70rrCRCXxNHrWTxES2eG9W
S5sSzS3zeBpuF4jerwoZ6sjVc1yX9eV0qhIPwfhng5knQ71fO2Zk/pn2dUu28pIK
ZyRZCMVIA5nnXG82CYkTNBri66JpK4aLpm386m3P/d7Vwiap4HDyYLJCo+ftivIc
AQmYJv4zfTfkMq0/qpoPXqnFEzCZyArMM+ZCdwqgU8SUYWSTeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPiZzyW6Ckooj5DKzOAJo+G/WmH0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNjVl
OWI1Yy0wNTZlLTQ1ZDMtODliMi02M2NiNjJiODQyMTAvYmQwOWE4ZjItMDRiMi0z
Y2Q5LWI2YjItOTEzY2M4Zjk1MDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjY1ZTliNWMtMDU2ZS00NWQzLTg5
YjItNjNjYjYyYjg0MjEwL2Y2NWU5YjVjLTA1NmUtNDVkMy04OWIyLTYzY2I2MmI4
NDIxMC5jcmwwHwYDVR0jBBgwFoAUo5pTCNpO4oU1ZvDqjbS6GOe0ZkIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mNjVlOWI1Yy0wNTZlLTQ1ZDMtODliMi02M2Ni
NjJiODQyMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsmoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICGM7J+enJybGm0X2uqHr5AELvnl44k9UZ2AbrqhkyprwiMya1XSvd6
W8BEgQbuN4jXuWyI4XGXWW+dTIvuIHS3PCgXalF/lKweQqdbVxwhb19ifCjgYr3T
5JEACgqVB57kjCu074x3QFtmCxjiEe1p07qH3S7yG/rFFgcepAmEv63/GHdTdQ14
CqJtA/k7m0K3eGuNWsGqzRC5PxljoOj5nV0+3f8WgK+EQSRcrIIh4xDrZB+EgPfV
HEmV1OFHWoJpx+lh+kcBHFsMTyTVLyay+SJVxCnv2F9imQqHS07+nghsNKtbwv5T
jjPDO+YlvZktafnJ+fcUagNBrpQJDqk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:45 2026 by rpki-client