Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa
File:                     ced604c6-99bb-30aa-8483-52ecd57799da.roa (raw, json)
Hash identifier:          vGanIcNS6qa9tI4+XYOHZ/sQYoY1o+lcCkKdBAsdXWs=
Subject key identifier:   23:5D:B5:82:7F:A5:5C:E9:3C:5B:F5:74:15:8B:61:E2:48:74:7D:3B
Certificate issuer:       /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Certificate serial:       010D0C9F4328584DB1DACD93277CDEA84AA11440
Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     16276
IP address blocks:        206.168.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:cd:93:27:7c:de:a8:4a:a1:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=a780d2ce-322d-45e1-bc17-40905c5311ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:4e:df:c4:bc:9e:24:b3:29:5c:30:ef:c8:
                    c8:ff:c1:d8:20:a6:4b:ac:e3:11:c1:02:65:4d:c3:
                    e2:aa:4b:a6:c7:93:d2:6a:0a:ef:56:c7:cb:f2:77:
                    6e:9d:57:67:c0:12:b2:16:20:cf:c3:99:22:a7:35:
                    70:5d:ca:9b:d4:91:41:cb:d9:d7:09:95:99:29:94:
                    9a:e6:a9:3d:0c:1d:d9:58:91:82:fd:86:e9:1b:df:
                    c9:4e:70:d2:c0:e4:31:c1:5d:8a:db:92:61:8d:ff:
                    63:e1:15:e2:ca:e4:d1:f4:d1:c3:f8:37:ff:30:a8:
                    12:06:c0:6e:66:05:91:28:d7:45:9d:6a:7b:bb:9e:
                    ca:c0:41:74:d4:dd:2c:ca:a0:87:2d:0a:84:24:58:
                    c2:7d:9b:e2:0a:89:40:e0:af:3f:c8:cf:05:2c:5c:
                    b5:13:40:ae:05:ef:a5:88:b3:8d:d3:59:f7:89:24:
                    15:dd:53:7d:ff:66:76:08:36:d2:35:f4:22:8a:96:
                    14:03:77:bb:bd:56:da:ea:12:aa:05:5a:8f:f1:2f:
                    29:86:f4:c0:48:f1:9e:33:b2:47:f5:66:bb:e7:9a:
                    34:58:0f:68:b1:19:06:fc:47:dc:72:18:f8:63:28:
                    71:78:48:90:bc:6c:06:91:75:4f:36:f9:5b:ea:1c:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5D:B5:82:7F:A5:5C:E9:3C:5B:F5:74:15:8B:61:E2:48:74:7D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:cd:45:40:f8:85:b9:72:c0:ca:e1:69:b5:b1:00:1a:e5:
         f3:1e:ec:5e:3e:f4:bf:3a:22:b2:53:c3:03:30:10:78:aa:65:
         ec:99:6d:36:7e:10:42:12:20:38:dc:63:86:2e:be:9b:30:3a:
         7c:17:e8:2a:2d:86:5e:35:f7:12:55:14:49:3b:4b:7a:4b:b3:
         2e:fc:73:63:ad:9b:2c:de:b2:ea:68:f6:ad:e4:51:8a:e3:71:
         ad:0d:4a:3e:d9:b5:b6:4f:c6:a4:48:95:03:83:6d:22:46:a8:
         e4:7c:fe:85:d6:06:29:d3:51:dc:dc:6c:b8:bc:02:24:df:33:
         ed:8d:09:f6:92:4f:e7:32:5a:15:b2:e1:37:11:60:07:95:de:
         f4:49:90:e5:e9:c1:f2:af:6f:ed:df:2d:39:d5:e1:c0:da:e0:
         cb:69:f7:c6:51:46:c0:61:59:1b:5d:6d:fc:2d:ba:ee:2c:cc:
         c1:f9:46:5b:ff:eb:88:7f:be:64:b5:b3:ec:97:05:8f:ae:d3:
         9a:c5:be:8a:2a:c0:03:d4:cd:f1:76:de:61:c8:22:82:16:fb:
         2c:02:56:b2:a5:51:5f:51:00:de:b3:f5:3e:74:1f:a5:b6:ff:
         67:7d:bd:18:86:26:2a:bf:80:ab:14:12:ca:78:47:52:c1:a5:
         0a:b8:84:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2s2TJ3zeqEqhFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk
NmFiMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
YTc4MGQyY2UtMzIyZC00NWUxLWJjMTctNDA5MDVjNTMxMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbtO38S8niSzKVww78jI/8HYIKZLrOMRwQJl
TcPiqkumx5PSagrvVsfL8ndunVdnwBKyFiDPw5kipzVwXcqb1JFBy9nXCZWZKZSa
5qk9DB3ZWJGC/YbpG9/JTnDSwOQxwV2K25Jhjf9j4RXiyuTR9NHD+Df/MKgSBsBu
ZgWRKNdFnWp7u57KwEF01N0syqCHLQqEJFjCfZviColA4K8/yM8FLFy1E0CuBe+l
iLON01n3iSQV3VN9/2Z2CDbSNfQiipYUA3e7vVba6hKqBVqP8S8phvTASPGeM7JH
9Wa755o0WA9osRkG/Efcchj4YyhxeEiQvGwGkXVPNvlb6hw0nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNdtYJ/pVzpPFv1dBWLYeJIdH07MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3
ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvY2VkNjA0YzYtOTliYi0z
MGFhLTg0ODMtNTJlY2Q1Nzc5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk
MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi
ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx
MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqivMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXjzUVA+IW5csDK4Wm1sQAa5fMe7F4+9L86IrJTwwMwEHiqZeyZbTZ+
EEISIDjcY4YuvpswOnwX6Cothl419xJVFEk7S3pLsy78c2Otmyzesupo9q3kUYrj
ca0NSj7ZtbZPxqRIlQODbSJGqOR8/oXWBinTUdzcbLi8AiTfM+2NCfaST+cyWhWy
4TcRYAeV3vRJkOXpwfKvb+3fLTnV4cDa4Mtp98ZRRsBhWRtdbfwtuu4szMH5Rlv/
64h/vmS1s+yXBY+u05rFvooqwAPUzfF23mHIIoIW+ywCVrKlUV9RAN6z9T50H6W2
/2d9vRiGJiq/gKsUEsp4R1LBpQq4hPY=
-----END CERTIFICATE-----
Generated at Wed May 13 04:01:51 2026 by rpki-client