Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ff3e27a5-5a93-32c1-baf7-9d94698af083.roa
File:                     ff3e27a5-5a93-32c1-baf7-9d94698af083.roa (raw, json)
Hash identifier:          kT2lYdsHivalvVcJMQuI3dWbU9Cr/bULMDkGztKYgAc=
Subject key identifier:   63:99:6C:AF:41:63:4E:EF:AA:3B:1F:4E:D8:00:A4:D6:FF:37:4B:E5
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584B583C9AC1F356F81DC6437800
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ff3e27a5-5a93-32c1-baf7-9d94698af083.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        206.167.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:9a:c1:f3:56:f8:1d:c6:43:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=8cb40049-c9b7-4d1f-b4b0-a064e14ad3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:3a:c5:17:ee:13:88:d4:d1:16:5c:65:31:
                    13:d4:31:e7:be:9f:6d:6a:62:c6:c7:14:c6:9b:99:
                    b3:7d:92:40:bd:12:a0:ec:80:d2:3d:a1:6c:2a:e6:
                    85:a6:42:ef:00:59:a6:70:11:9b:8f:14:22:50:69:
                    8a:d4:6e:86:43:80:d9:6f:5f:bd:1a:37:8a:6a:92:
                    4e:33:44:63:c4:df:a5:64:ff:89:3a:21:16:a6:cf:
                    91:7f:e5:c1:12:f0:c1:4c:6b:58:55:ab:55:2e:ef:
                    41:6f:94:ae:80:6d:d5:04:c0:ac:8e:9b:0a:de:d2:
                    f9:4d:bb:da:24:10:89:a9:b2:0f:8b:d6:86:b3:08:
                    f1:50:76:0f:71:18:64:e7:cf:61:a6:44:f8:b9:3d:
                    01:54:fc:98:6d:2a:1f:db:ca:b4:d8:28:b7:f2:3a:
                    fe:0b:cb:2b:13:0b:0c:9f:d3:e5:e5:31:95:b2:3a:
                    91:5a:0a:a3:ad:b5:4f:1d:1b:e1:01:29:b2:3f:89:
                    6d:4f:d0:af:0a:75:01:fb:0a:c5:a6:a4:cb:17:07:
                    47:24:00:19:d4:f8:4e:5c:98:f5:0d:89:37:41:2d:
                    7d:b0:ad:2c:b6:cf:c5:44:c7:3f:43:04:51:cc:c3:
                    2d:5e:0f:c6:05:d5:ab:64:71:4c:b9:02:a3:bc:3a:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:6C:AF:41:63:4E:EF:AA:3B:1F:4E:D8:00:A4:D6:FF:37:4B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ff3e27a5-5a93-32c1-baf7-9d94698af083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:21:8f:52:90:a0:e0:df:86:e4:f7:9a:20:ba:0b:e7:08:7b:
         d4:ac:c3:4b:2c:5d:4f:04:b7:6c:b7:3b:4a:4b:0a:d1:b7:77:
         9e:a2:76:05:1a:47:75:cd:6c:de:16:6d:e8:1a:cf:78:a6:ba:
         2c:8d:5f:a3:dc:ef:c5:b7:8e:33:ac:3a:b2:d3:99:70:e1:25:
         9f:17:f7:cb:ad:f7:c3:5d:d6:ae:01:d3:56:bc:e8:4f:c4:ce:
         6a:d3:86:35:40:07:41:4c:ea:18:00:e0:30:d5:23:66:0e:10:
         5f:f3:00:23:9f:59:d4:2d:c7:b3:7c:d4:b0:be:69:e5:75:68:
         f6:76:34:9d:f2:b6:53:64:0f:6d:68:68:7f:56:87:62:f0:68:
         a2:a4:6c:7f:3a:2a:17:7d:e6:f0:0e:f0:b4:17:60:42:c2:f6:
         1d:a3:d2:cb:d1:4f:65:f0:ad:96:22:01:f5:fb:ea:5d:cd:6e:
         bf:19:d7:48:8d:2f:e3:90:48:95:0f:a2:78:78:1a:14:a3:01:
         a0:2c:9d:63:10:6e:4d:4e:47:49:33:1a:a0:eb:2f:23:3c:e7:
         b4:78:11:9d:39:56:2c:c9:f2:68:ce:6b:81:4f:d0:8f:d3:e1:
         e6:e5:d8:08:80:4d:f9:64:d7:b1:5a:90:36:42:47:a8:22:bd:
         24:c8:88:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJrB81b4HcZDeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
OGNiNDAwNDktYzliNy00ZDFmLWI0YjAtYTA2NGUxNGFkM2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7o6xRfuE4jU0RZcZTET1DHnvp9tamLGxxTG
m5mzfZJAvRKg7IDSPaFsKuaFpkLvAFmmcBGbjxQiUGmK1G6GQ4DZb1+9GjeKapJO
M0RjxN+lZP+JOiEWps+Rf+XBEvDBTGtYVatVLu9Bb5SugG3VBMCsjpsK3tL5Tbva
JBCJqbIPi9aGswjxUHYPcRhk589hpkT4uT0BVPyYbSof28q02Ci38jr+C8srEwsM
n9Pl5TGVsjqRWgqjrbVPHRvhASmyP4ltT9CvCnUB+wrFpqTLFwdHJAAZ1PhOXJj1
DYk3QS19sK0sts/FRMc/QwRRzMMtXg/GBdWrZHFMuQKjvDrsHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOZbK9BY07vqjsfTtgApNb/N0vlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvZmYzZTI3YTUtNWE5My0z
MmMxLWJhZjctOWQ5NDY5OGFmMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqe4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMhj1KQoODfhuT3miC6C+cIe9Ssw0ssXU8Et2y3O0pLCtG3d56idgUa
R3XNbN4Wbegaz3imuiyNX6Pc78W3jjOsOrLTmXDhJZ8X98ut98Nd1q4B01a86E/E
zmrThjVAB0FM6hgA4DDVI2YOEF/zACOfWdQtx7N81LC+aeV1aPZ2NJ3ytlNkD21o
aH9Wh2LwaKKkbH86Khd95vAO8LQXYELC9h2j0svRT2XwrZYiAfX76l3Nbr8Z10iN
L+OQSJUPonh4GhSjAaAsnWMQbk1OR0kzGqDrLyM857R4EZ05VizJ8mjOa4FP0I/T
4ebl2AiATflk17FakDZCR6givSTIiI8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:13 2025 by rpki-client