Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/62a28ec3-559f-3735-a4da-bda475c18171.roa
File:                     62a28ec3-559f-3735-a4da-bda475c18171.roa (raw, json)
Hash identifier:          hh+f2TrQgKv3xuAPKs289nofbOCADXKmaqsLc5AVEB0=
Subject key identifier:   31:B1:EE:C4:42:E9:AD:E4:27:7C:1A:1E:11:CC:D0:CB:FE:37:44:E5
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D359FE169A016A22C12436740
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/62a28ec3-559f-3735-a4da-bda475c18171.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     376
IP address blocks:        206.167.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:e1:69:a0:16:a2:2c:12:43:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=587696fe-5431-417e-8268-94f235ccdb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:a0:c8:df:75:03:1d:d7:82:e6:99:a9:62:
                    dc:9e:b8:3f:9c:fd:40:67:de:3d:dc:f1:43:9b:48:
                    d4:be:2b:d0:c2:81:71:b9:8e:bf:a9:b0:69:e8:d9:
                    4a:d6:75:2a:a9:e5:f2:4d:52:da:f1:24:51:b2:6d:
                    f4:4b:af:10:56:ca:47:0e:ab:12:51:0f:49:cd:d7:
                    35:28:f1:a2:25:22:4c:cb:da:23:b5:60:c7:29:3e:
                    04:c0:31:b7:f4:24:af:cf:93:6f:bf:e3:e0:6f:a0:
                    2b:4c:5c:d8:b9:14:e5:23:87:42:c0:25:79:4e:f9:
                    2b:c3:9f:ae:5c:39:f7:bc:b3:76:23:73:c6:bf:6b:
                    1f:84:9d:19:4a:ae:44:db:05:ed:34:2d:08:86:2d:
                    bb:f1:30:84:bb:e3:38:29:74:45:16:29:f3:c0:da:
                    a1:33:ec:f1:c5:5d:6d:3a:21:d9:60:61:b4:06:6a:
                    ea:15:cc:25:8d:5c:ce:11:1a:cc:58:7a:1d:92:1c:
                    21:6d:1f:48:3e:86:3e:73:94:66:82:f5:04:4f:8c:
                    ca:26:ef:09:29:d8:45:43:94:81:9d:58:1c:f2:83:
                    08:21:45:8b:fa:ff:47:de:4f:08:08:ea:59:21:26:
                    bf:82:9f:85:67:ba:05:8a:f3:71:6d:ac:eb:d2:c3:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B1:EE:C4:42:E9:AD:E4:27:7C:1A:1E:11:CC:D0:CB:FE:37:44:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/62a28ec3-559f-3735-a4da-bda475c18171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:8d:07:32:25:eb:22:55:80:0c:df:18:cb:89:53:2b:e2:
         31:20:00:84:55:c8:c0:6f:96:7d:aa:9a:61:0a:24:2f:5b:e2:
         bc:35:3a:67:93:f5:1c:60:7c:14:8e:ed:7b:07:4e:19:a7:8a:
         fe:61:c9:b4:95:52:b7:7a:23:9d:3b:51:a5:4b:31:f2:9f:81:
         a8:69:98:cb:bb:1a:86:63:d7:bc:74:d2:db:7e:57:a0:9e:60:
         b9:3c:e0:fa:19:17:94:a6:0c:58:98:3c:7b:70:46:36:5a:1d:
         0a:cc:ae:15:cd:7e:c7:b6:62:e3:bc:66:7a:a0:fc:21:78:bc:
         46:3e:b8:6e:c7:ad:78:b2:4a:23:c8:58:32:1d:18:37:f4:39:
         66:89:53:b6:5c:91:d2:fe:ba:df:6e:bc:fc:09:ed:5c:bb:4b:
         84:cb:bb:a8:f6:63:06:48:62:60:2e:0d:82:bb:64:37:e9:49:
         d7:f6:54:e6:ed:2f:d2:e6:ed:5c:28:66:dd:15:ea:1f:90:07:
         08:c1:48:59:df:7f:d3:6a:69:e5:7e:15:28:f7:79:f1:11:4a:
         bc:20:f1:87:17:ac:f0:05:a1:9b:14:23:27:f2:c4:66:4f:19:
         47:ef:94:31:11:5b:62:e8:fc:e7:29:ca:27:33:05:76:cd:95:
         bf:2d:72:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+FpoBaiLBJDZ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
NTg3Njk2ZmUtNTQzMS00MTdlLTgyNjgtOTRmMjM1Y2NkYjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS6gyN91Ax3XguaZqWLcnrg/nP1AZ9493PFD
m0jUvivQwoFxuY6/qbBp6NlK1nUqqeXyTVLa8SRRsm30S68QVspHDqsSUQ9Jzdc1
KPGiJSJMy9ojtWDHKT4EwDG39CSvz5Nvv+Pgb6ArTFzYuRTlI4dCwCV5Tvkrw5+u
XDn3vLN2I3PGv2sfhJ0ZSq5E2wXtNC0Ihi278TCEu+M4KXRFFinzwNqhM+zxxV1t
OiHZYGG0BmrqFcwljVzOERrMWHodkhwhbR9IPoY+c5RmgvUET4zKJu8JKdhFQ5SB
nVgc8oMIIUWL+v9H3k8ICOpZISa/gp+FZ7oFivNxbazr0sNUzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGx7sRC6a3kJ3waHhHM0Mv+N0TlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvNjJhMjhlYzMtNTU5Zi0z
NzM1LWE0ZGEtYmRhNDc1YzE4MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbdjQcyJesiVYAM3xjLiVMr4jEgAIRVyMBvln2qmmEKJC9b4rw1OmeT
9RxgfBSO7XsHThmniv5hybSVUrd6I507UaVLMfKfgahpmMu7GoZj17x00tt+V6Ce
YLk84PoZF5SmDFiYPHtwRjZaHQrMrhXNfse2YuO8Znqg/CF4vEY+uG7HrXiySiPI
WDIdGDf0OWaJU7ZckdL+ut9uvPwJ7Vy7S4TLu6j2YwZIYmAuDYK7ZDfpSdf2VObt
L9Lm7VwoZt0V6h+QBwjBSFnff9NqaeV+FSj3efERSrwg8YcXrPAFoZsUIyfyxGZP
GUfvlDERW2Lo/OcpyiczBXbNlb8tcrQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:26 2026 by rpki-client