Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/06eb5c21-7486-3dd8-8b28-1e59bd9262d7.roa
File:                     06eb5c21-7486-3dd8-8b28-1e59bd9262d7.roa (raw, json)
Hash identifier:          meMb2bTsn9BQIKAmQRkFcbLSjza3c28rgwcpc6Mgtpo=
Subject key identifier:   22:D0:80:76:50:EB:DA:11:59:A8:15:12:8B:42:BA:BA:46:A6:D1:69
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584F5E62B662DD5616B65C1C8D80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/06eb5c21-7486-3dd8-8b28-1e59bd9262d7.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     209697
IP address blocks:        96.43.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b6:62:dd:56:16:b6:5c:1c:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=ec09dd37-5276-4340-a434-3b61f7fb9941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:c9:75:cc:40:db:2f:54:b0:f4:0a:00:b6:
                    b0:a3:2b:c0:2a:cc:64:53:c8:78:6d:da:4d:f3:4d:
                    96:41:be:c5:a0:85:83:74:4d:9d:72:68:8d:92:b5:
                    9f:6b:e9:5b:c6:9d:d6:7d:fa:a9:b4:29:69:e9:fb:
                    05:e2:f2:e3:a0:87:19:11:db:9d:e6:5d:2c:1e:67:
                    98:de:cc:e1:88:18:66:81:bf:1c:b2:06:f5:24:8a:
                    c2:6d:43:9b:ac:3f:56:4f:8e:2a:ad:67:49:39:bf:
                    e7:9f:0d:1d:3a:c4:af:74:e9:9a:7f:6a:fd:43:c8:
                    ec:5d:e8:44:d8:45:99:86:fe:f7:fd:c3:d8:a2:ac:
                    21:59:e3:c6:79:e1:c9:73:29:07:ee:d0:f2:af:ab:
                    dd:b7:26:d8:80:40:8e:ab:fd:d1:5c:55:d1:95:5b:
                    49:84:2a:b7:a0:22:74:7d:b0:26:ca:96:aa:f3:12:
                    0e:f7:af:8c:00:d5:50:17:c4:d4:74:28:c1:07:16:
                    65:f0:71:90:09:c4:19:be:b7:d7:97:e9:dc:b2:54:
                    e1:54:99:00:3f:72:c4:cb:fb:2f:da:d6:db:54:61:
                    49:e5:91:24:de:fb:a8:20:e4:e4:a2:24:89:26:c6:
                    1f:41:eb:c7:ee:c0:ee:79:f7:1c:99:67:11:01:49:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D0:80:76:50:EB:DA:11:59:A8:15:12:8B:42:BA:BA:46:A6:D1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/06eb5c21-7486-3dd8-8b28-1e59bd9262d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:5d:0c:f0:f9:7d:4f:16:2f:11:b4:da:10:55:fd:30:64:
         d7:ca:1b:5a:5e:66:4b:67:15:d7:a2:06:73:4e:18:60:09:d3:
         dc:3d:3c:5c:c6:c4:87:ce:fe:06:f3:7e:21:3a:ff:ee:fc:12:
         ee:7f:a9:90:4b:9f:bd:df:7b:a5:28:2d:24:a6:eb:c6:c9:27:
         ed:83:cc:f2:e7:c0:8c:b2:ef:c8:8d:f5:b9:ce:43:d3:bd:09:
         62:47:6b:e6:47:a7:ed:08:a2:02:a8:cf:3c:d1:8f:0f:d6:3b:
         6c:e8:66:75:6e:68:7d:3e:ea:3a:60:d5:c3:48:93:51:89:65:
         2f:c0:fa:28:69:05:61:3c:21:86:31:1f:30:67:54:d2:5c:72:
         ad:65:a0:5c:84:42:7f:f5:95:53:16:a4:b5:8d:19:39:81:09:
         eb:00:1b:bf:86:14:2a:31:8e:3e:3d:97:5e:d4:89:63:aa:f2:
         7b:9a:65:45:a7:7e:ca:d4:75:f4:65:e9:90:ee:91:ba:51:b8:
         fb:f0:63:4e:c9:0d:62:e2:ed:33:b5:88:de:f1:a8:52:1c:53:
         48:64:6b:e0:f7:07:fa:7d:4a:8f:bd:4c:c7:19:fb:3d:4d:af:
         5d:60:b4:b3:8d:8e:17:c0:a7:0d:d1:3a:ce:5a:d5:10:a2:da:
         9a:80:62:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYrZi3VYWtlwcjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
ZWMwOWRkMzctNTI3Ni00MzQwLWE0MzQtM2I2MWY3ZmI5OTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+DJdcxA2y9UsPQKALawoyvAKsxkU8h4bdpN
802WQb7FoIWDdE2dcmiNkrWfa+lbxp3WffqptClp6fsF4vLjoIcZEdud5l0sHmeY
3szhiBhmgb8csgb1JIrCbUObrD9WT44qrWdJOb/nnw0dOsSvdOmaf2r9Q8jsXehE
2EWZhv73/cPYoqwhWePGeeHJcykH7tDyr6vdtybYgECOq/3RXFXRlVtJhCq3oCJ0
fbAmypaq8xIO96+MANVQF8TUdCjBBxZl8HGQCcQZvrfXl+ncslThVJkAP3LEy/sv
2tbbVGFJ5ZEk3vuoIOTkoiSJJsYfQevH7sDuefccmWcRAUlrgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLQgHZQ69oRWagVEotCurpGptFpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMDZlYjVjMjEtNzQ4Ni0z
ZGQ4LThiMjgtMWU1OWJkOTI2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYCtuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETLXQzw+X1PFi8RtNoQVf0wZNfKG1peZktnFdeiBnNOGGAJ09w9PFzG
xIfO/gbzfiE6/+78Eu5/qZBLn73fe6UoLSSm68bJJ+2DzPLnwIyy78iN9bnOQ9O9
CWJHa+ZHp+0IogKozzzRjw/WO2zoZnVuaH0+6jpg1cNIk1GJZS/A+ihpBWE8IYYx
HzBnVNJccq1loFyEQn/1lVMWpLWNGTmBCesAG7+GFCoxjj49l17UiWOq8nuaZUWn
fsrUdfRl6ZDukbpRuPvwY07JDWLi7TO1iN7xqFIcU0hka+D3B/p9So+9TMcZ+z1N
r11gtLONjhfApw3ROs5a1RCi2pqAYu4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:40:50 2026 by rpki-client