Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/0286254b-c442-3b4a-aab3-372c646362cd.roa
File:                     0286254b-c442-3b4a-aab3-372c646362cd.roa (raw, json)
Hash identifier:          8mN9rsHr+chWGe6r2zBXl8F3Qo6E3a3OPqRDG0+zyCo=
Subject key identifier:   1D:79:56:8D:3F:87:01:4C:7F:C3:60:31:9C:CF:5A:27:84:96:36:28
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584E640F7744EEEFAC941DB8ED00
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/0286254b-c442-3b4a-aab3-372c646362cd.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     26744
IP address blocks:        199.166.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:77:44:ee:ef:ac:94:1d:b8:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=3808f2f2-c408-4d12-ad32-6a6f45c819ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:45:df:98:86:79:7d:1a:f7:73:37:c0:0b:
                    12:61:0d:32:9b:89:9d:90:47:d1:93:b6:4f:6e:26:
                    62:ba:a0:cd:b6:e5:29:a1:f6:cd:0e:c3:2b:3f:f3:
                    cf:d6:2a:d5:ce:ea:d2:59:8e:13:2d:95:b9:95:5b:
                    8e:66:63:e9:f9:e0:6a:ac:46:38:3d:44:5d:e5:2f:
                    3d:36:ce:72:d0:74:3a:3a:be:8f:2d:cc:82:ed:91:
                    b8:89:86:d9:06:3d:ad:d6:24:8b:b0:3e:4e:45:37:
                    23:5f:f5:de:29:cc:68:b5:3f:9c:77:ca:2c:51:1e:
                    3a:f2:c2:c7:13:36:e9:9e:e1:22:cc:63:c5:4a:52:
                    72:4a:98:e2:5e:c3:da:02:1c:ec:48:d9:93:cb:03:
                    31:80:fd:d8:3c:e6:42:51:46:1d:2c:4d:86:37:55:
                    79:a0:77:01:d4:9b:6c:6d:5e:d7:3c:f3:f6:19:78:
                    50:a4:3e:28:5b:57:65:31:46:8e:47:8e:5e:04:ce:
                    32:f7:80:6f:b5:23:2e:7c:5c:e8:23:02:59:dd:50:
                    9a:1b:06:e1:23:37:02:c0:64:73:c0:9a:30:66:58:
                    f0:28:d1:f9:29:40:a8:cf:1d:0c:e4:cb:e0:1e:2b:
                    e1:77:92:ac:82:dc:37:4d:7a:4a:a9:c7:41:84:41:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:79:56:8D:3F:87:01:4C:7F:C3:60:31:9C:CF:5A:27:84:96:36:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/0286254b-c442-3b4a-aab3-372c646362cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e1:ab:e9:19:47:b7:db:2c:33:92:97:e3:ea:9f:87:96:d3:
         dc:39:6e:38:da:61:54:9f:9c:46:49:73:83:90:33:b0:b1:38:
         96:8c:2d:5f:54:8a:e0:23:bd:16:b9:a9:ec:1a:f8:fc:e5:c3:
         ba:ce:a1:84:1a:84:92:5d:59:1d:d3:ba:70:dc:f3:0e:c1:27:
         cc:de:cc:e3:14:6f:a4:5d:75:27:2e:0f:17:c7:70:7d:da:a1:
         85:e4:6f:6d:34:8e:ee:0f:c8:7e:9b:96:0d:67:d3:50:11:f9:
         82:34:40:e1:31:6b:d8:da:7a:4e:a9:36:29:be:e0:67:24:2a:
         02:09:4d:d1:e4:32:2e:95:ee:eb:bd:71:c9:d1:a6:5d:a1:03:
         ba:b4:35:84:3b:ac:05:e7:aa:ea:a8:4d:71:7f:c2:a8:63:fb:
         cf:fb:68:11:fb:0a:81:b7:82:4c:05:5a:12:71:19:59:ff:b4:
         c6:e6:58:ed:73:d5:53:1a:7f:6b:7c:f8:e9:19:d0:52:19:84:
         94:9e:97:4b:c8:9f:34:d6:28:be:7b:2a:2b:c5:d9:79:f5:30:
         2e:97:b6:7c:bc:07:2c:65:00:08:03:26:f3:c8:fe:4a:19:bd:
         c0:34:25:0a:fc:d2:03:9b:ab:a4:3d:b6:ed:77:a6:21:ad:66:
         37:79:d5:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD3dE7u+slB247QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MzgwOGYyZjItYzQwOC00ZDEyLWFkMzItNmE2ZjQ1YzgxOWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRFF35iGeX0a93M3wAsSYQ0ym4mdkEfRk7ZP
biZiuqDNtuUpofbNDsMrP/PP1irVzurSWY4TLZW5lVuOZmPp+eBqrEY4PURd5S89
Ns5y0HQ6Or6PLcyC7ZG4iYbZBj2t1iSLsD5ORTcjX/XeKcxotT+cd8osUR468sLH
EzbpnuEizGPFSlJySpjiXsPaAhzsSNmTywMxgP3YPOZCUUYdLE2GN1V5oHcB1Jts
bV7XPPP2GXhQpD4oW1dlMUaOR45eBM4y94BvtSMufFzoIwJZ3VCaGwbhIzcCwGRz
wJowZljwKNH5KUCozx0M5MvgHivhd5Ksgtw3TXpKqcdBhEHISQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB15Vo0/hwFMf8NgMZzPWieEljYoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMDI4NjI1NGItYzQ0Mi0z
YjRhLWFhYjMtMzcyYzY0NjM2MmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6b7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3hq+kZR7fbLDOSl+Pqn4eW09w5bjjaYVSfnEZJc4OQM7CxOJaMLV9U
iuAjvRa5qewa+Pzlw7rOoYQahJJdWR3TunDc8w7BJ8zezOMUb6RddScuDxfHcH3a
oYXkb200ju4PyH6blg1n01AR+YI0QOExa9jaek6pNim+4GckKgIJTdHkMi6V7uu9
ccnRpl2hA7q0NYQ7rAXnquqoTXF/wqhj+8/7aBH7CoG3gkwFWhJxGVn/tMbmWO1z
1VMaf2t8+OkZ0FIZhJSel0vInzTWKL57KivF2Xn1MC6Xtny8ByxlAAgDJvPI/koZ
vcA0JQr80gObq6Q9tu13piGtZjd51Zg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:09 2026 by rpki-client