Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa
File:                     c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa (raw, json)
Hash identifier:          1LAhYMvFtIWvRO3W9Qzzt01N59OA2CW+JlgOEG5/Hqo=
Subject key identifier:   9A:17:01:AF:71:C3:C5:65:04:0F:5B:E4:4C:9A:49:65:1A:AC:94:C6
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584D300A666EEC44EB9575254C00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     11090
IP address blocks:        206.55.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:66:6e:ec:44:eb:95:75:25:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=e916b1df-16dd-4a6b-ac6b-d96c427b1b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:ed:5e:1f:c2:c8:5b:cd:54:6e:1a:a0:cd:
                    16:60:6a:77:3d:06:a5:4f:e8:96:16:c9:ea:ce:eb:
                    41:b0:be:1b:4f:c2:c9:28:b7:4d:5e:3a:e5:42:2e:
                    b0:a9:04:1b:6f:bc:6d:12:54:ce:e0:5d:ad:8c:cd:
                    5f:67:10:b6:71:38:86:b5:63:ab:3e:97:30:79:ef:
                    cf:b7:ec:f2:fc:d8:40:37:43:e2:9c:96:90:3f:13:
                    91:d2:b8:37:25:26:59:73:4f:06:9c:58:ec:b2:16:
                    88:c7:93:17:e7:92:cf:78:c1:14:24:7f:84:03:61:
                    b9:8b:85:81:9d:6c:cf:16:f7:53:6e:82:9e:ec:99:
                    88:5d:dd:64:2b:ea:1e:8e:89:76:e4:00:d8:bd:c0:
                    4c:0b:d1:d8:fb:51:f9:01:56:6f:fc:dc:5f:66:3b:
                    2b:fb:57:d4:9e:ea:d0:44:83:f6:a0:d7:7e:93:b5:
                    76:c9:79:75:14:e0:8a:0f:1a:bb:f0:df:f2:3f:4d:
                    b7:7d:51:0d:11:de:50:b0:df:11:24:1d:55:82:8b:
                    21:da:6a:15:93:cf:ec:ee:56:3f:31:ef:ee:8f:d8:
                    ba:71:02:25:1f:1f:39:97:93:af:5e:5a:b1:5e:c1:
                    72:6b:d8:01:b7:4c:3b:c2:61:ff:38:d5:56:fe:e4:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:17:01:AF:71:C3:C5:65:04:0F:5B:E4:4C:9A:49:65:1A:AC:94:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/c3a66612-2f6b-328d-b9c8-f88d43f5bba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ce:89:8b:38:4b:ed:8a:37:0f:4d:28:31:5f:5c:93:f4:a2:
         d6:a0:d5:f7:76:37:37:36:17:90:43:ce:90:65:a1:e2:e5:74:
         19:9d:33:2e:7a:4b:29:1e:8d:62:5f:90:b3:18:a2:8f:9e:1a:
         d1:c3:05:57:ae:73:67:3b:69:47:f7:e7:35:06:d1:37:ed:6d:
         c4:4d:bf:0b:6d:7c:4c:d0:78:c5:ba:dc:b5:ec:b9:2d:68:c2:
         93:ef:2c:83:21:b9:b9:56:4c:46:b6:c5:48:24:8a:36:c6:fe:
         0e:91:13:59:e0:7f:42:59:71:17:23:c2:e1:15:79:1c:12:6b:
         63:04:dc:a4:3d:50:a6:7d:fd:d4:81:f6:f0:4f:47:16:b8:94:
         b1:f6:5f:94:71:5c:52:4c:0d:ec:c2:78:fa:ae:16:3b:07:fd:
         29:20:61:61:5f:9f:dd:ef:40:05:51:4e:9a:fb:41:ea:47:51:
         de:c7:b1:7b:09:9d:61:6c:03:80:3d:72:64:6c:d2:a7:84:6a:
         8d:ff:1f:6a:81:c6:f5:c2:80:f3:29:7e:6f:2a:bc:7d:0c:6a:
         36:33:bc:9c:82:6b:7c:9b:a3:bc:87:55:3f:cc:27:ce:6b:c5:
         51:61:9b:c8:66:5a:31:7d:bf:23:37:48:2b:2e:34:f6:14:34:
         e9:34:ce:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmZu7ETrlXUlTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTkxNmIxZGYtMTZkZC00YTZiLWFjNmItZDk2YzQyN2IxYjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM7tXh/CyFvNVG4aoM0WYGp3PQalT+iWFsnq
zutBsL4bT8LJKLdNXjrlQi6wqQQbb7xtElTO4F2tjM1fZxC2cTiGtWOrPpcwee/P
t+zy/NhAN0PinJaQPxOR0rg3JSZZc08GnFjsshaIx5MX55LPeMEUJH+EA2G5i4WB
nWzPFvdTboKe7JmIXd1kK+oejol25ADYvcBMC9HY+1H5AVZv/NxfZjsr+1fUnurQ
RIP2oNd+k7V2yXl1FOCKDxq78N/yP023fVENEd5QsN8RJB1Vgosh2moVk8/s7lY/
Me/uj9i6cQIlHx85l5OvXlqxXsFya9gBt0w7wmH/ONVW/uQxqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJoXAa9xw8VlBA9b5EyaSWUarJTGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYzNhNjY2MTItMmY2Yi0z
MjhkLWI5YzgtZjg4ZDQzZjViYmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjdsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALvOiYs4S+2KNw9NKDFfXJP0otag1fd2Nzc2F5BDzpBloeLldBmdMy56
SykejWJfkLMYoo+eGtHDBVeuc2c7aUf35zUG0TftbcRNvwttfEzQeMW63LXsuS1o
wpPvLIMhublWTEa2xUgkijbG/g6RE1ngf0JZcRcjwuEVeRwSa2ME3KQ9UKZ9/dSB
9vBPRxa4lLH2X5RxXFJMDezCePquFjsH/SkgYWFfn93vQAVRTpr7QepHUd7HsXsJ
nWFsA4A9cmRs0qeEao3/H2qBxvXCgPMpfm8qvH0MajYzvJyCa3ybo7yHVT/MJ85r
xVFhm8hmWjF9vyM3SCsuNPYUNOk0zhM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:35 2026 by rpki-client