Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa
File:                     8247b842-9eeb-33e6-969e-57260bed6fb2.roa (raw, json)
Hash identifier:          /UyojNcnSFvMmbJXD5D2BjCnwxoorGtgPPSAW8fL3qU=
Subject key identifier:   54:7B:0C:89:96:78:FA:15:00:9F:20:C2:03:31:62:C6:B7:EB:A3:8A
Certificate issuer:       /CN=fd41f50f-fe94-4803-9998-4983492c4d38
Certificate serial:       010D0C9F4328584D47C4E3398F81B49A05A6E100
Authority key identifier: C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        206.126.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:e3:39:8f:81:b4:9a:05:a6:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41f50f-fe94-4803-9998-4983492c4d38
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=8ba68d9c-62a4-4ea6-94e1-b6bc6e255e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:56:bc:5e:20:2e:52:ac:cc:8e:b9:d7:05:
                    83:bc:89:38:aa:20:51:c6:92:7c:5e:fe:3a:66:56:
                    55:ed:ba:c3:4f:b0:51:89:9c:48:36:16:81:44:36:
                    43:49:17:86:b8:95:f1:09:79:86:5b:bc:fe:a8:6f:
                    b0:98:e4:a4:0d:d0:68:47:6e:ae:93:14:6d:5b:8c:
                    6d:27:18:3e:74:98:30:1b:0f:1b:28:b5:17:f7:f4:
                    c9:ef:ce:08:12:cd:16:80:dc:6f:ba:12:a7:ac:9d:
                    57:8b:ec:69:ed:b8:09:c7:ff:e8:13:86:b8:b6:a7:
                    2f:8a:26:b9:04:66:c1:b6:6e:a9:b5:a7:dd:c7:56:
                    80:a8:a9:75:33:02:d9:ee:17:1d:ec:8c:be:5a:b5:
                    b2:57:3d:9b:4f:d5:9d:63:15:57:6b:ae:1f:7e:34:
                    e5:1f:9c:04:07:1b:d4:c6:09:76:27:de:ed:cb:b7:
                    a0:7f:4b:d7:51:5f:2d:23:ad:00:3a:02:f8:1e:c0:
                    ee:a1:20:ec:89:f2:70:fa:e3:1c:df:7b:d6:fb:21:
                    0d:04:64:8a:1f:a4:6c:83:bc:be:ae:84:d5:51:ee:
                    4c:c7:5e:07:04:a2:7c:33:79:d5:b4:c7:5b:77:cd:
                    09:ff:00:bc:73:4f:6b:cc:4e:8f:2f:fa:be:69:43:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7B:0C:89:96:78:FA:15:00:9F:20:C2:03:31:62:C6:B7:EB:A3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/8247b842-9eeb-33e6-969e-57260bed6fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38/fd41f50f-fe94-4803-9998-4983492c4d38.crl

            X509v3 Authority Key Identifier:
                keyid:C4:08:C1:A9:70:D3:A6:79:51:EB:7F:B5:2D:33:87:D2:98:82:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fd41f50f-fe94-4803-9998-4983492c4d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:3e:21:e0:97:98:51:24:87:64:be:cb:bb:d1:17:5b:0b:ae:
         c4:09:1c:2c:cf:61:4c:6d:7f:58:20:d9:ae:12:89:61:7d:dd:
         15:dd:84:32:90:a0:59:ec:b2:9b:26:6d:10:3b:64:00:24:9d:
         19:c5:ae:71:7f:28:59:61:d6:ef:6b:8e:73:3b:01:5d:a9:e4:
         2c:df:f3:32:98:d3:c4:5d:3d:96:47:a2:9e:8c:a0:9f:cb:c8:
         b3:17:a3:31:60:17:f1:fd:0b:f7:39:8b:03:f9:14:fa:24:c4:
         50:99:6b:70:8f:63:a0:1c:75:a8:8b:9c:1e:84:56:e8:67:fd:
         58:4f:3a:43:d7:87:c5:29:7c:9b:09:25:1e:d4:12:af:ea:14:
         d3:7a:86:01:94:91:9d:f6:47:3b:be:d4:cd:e7:89:f4:1c:35:
         ab:65:94:0f:38:2c:c0:6f:da:5a:55:11:b0:01:10:f8:f9:09:
         85:21:19:0b:9c:67:7e:d5:d7:2c:57:74:f5:bb:dc:e8:b2:ca:
         24:8b:d6:21:3d:f3:0c:66:42:f4:69:18:59:b3:a7:37:91:f5:
         d2:f4:fe:ed:ae:4f:e0:50:70:75:fe:07:c6:7f:d2:e0:4f:c0:
         3f:68:51:93:76:9b:a9:43:5a:98:84:a9:09:88:06:79:a8:59:
         76:24:a0:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOM5j4G0mgWm4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ0MWY1MGYtZmU5NC00ODAzLTk5OTgtNDk4MzQ5MmM0
ZDM4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk
OGJhNjhkOWMtNjJhNC00ZWE2LTk0ZTEtYjZiYzZlMjU1ZTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB5WvF4gLlKszI651wWDvIk4qiBRxpJ8Xv46
ZlZV7brDT7BRiZxINhaBRDZDSReGuJXxCXmGW7z+qG+wmOSkDdBoR26ukxRtW4xt
Jxg+dJgwGw8bKLUX9/TJ784IEs0WgNxvuhKnrJ1Xi+xp7bgJx//oE4a4tqcviia5
BGbBtm6ptafdx1aAqKl1MwLZ7hcd7Iy+WrWyVz2bT9WdYxVXa64ffjTlH5wEBxvU
xgl2J97ty7egf0vXUV8tI60AOgL4HsDuoSDsifJw+uMc33vW+yENBGSKH6Rsg7y+
roTVUe5Mx14HBKJ8M3nVtMdbd80J/wC8c09rzE6PL/q+aUPoQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFR7DImWePoVAJ8gwgMxYsa366OKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mZDQx
ZjUwZi1mZTk0LTQ4MDMtOTk5OC00OTgzNDkyYzRkMzgvODI0N2I4NDItOWVlYi0z
M2U2LTk2OWUtNTcyNjBiZWQ2ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmQ0MWY1MGYtZmU5NC00ODAzLTk5
OTgtNDk4MzQ5MmM0ZDM4L2ZkNDFmNTBmLWZlOTQtNDgwMy05OTk4LTQ5ODM0OTJj
NGQzOC5jcmwwHwYDVR0jBBgwFoAUxAjBqXDTpnlR63+1LTOH0piC9wswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mZDQxZjUwZi1mZTk0LTQ4MDMtOTk5OC00OTgz
NDkyYzRkMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn7+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0+IeCXmFEkh2S+y7vRF1sLrsQJHCzPYUxtf1gg2a4SiWF93RXdhDKQ
oFnsspsmbRA7ZAAknRnFrnF/KFlh1u9rjnM7AV2p5Czf8zKY08RdPZZHop6MoJ/L
yLMXozFgF/H9C/c5iwP5FPokxFCZa3CPY6AcdaiLnB6EVuhn/VhPOkPXh8UpfJsJ
JR7UEq/qFNN6hgGUkZ32Rzu+1M3nifQcNatllA84LMBv2lpVEbABEPj5CYUhGQuc
Z37V1yxXdPW73OiyyiSL1iE98wxmQvRpGFmzpzeR9dL0/u2uT+BQcHX+B8Z/0uBP
wD9oUZN2m6lDWpiEqQmIBnmoWXYkoFY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:51 2026 by rpki-client