Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa
File:                     9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa (raw, json)
Hash identifier:          uujFGJrbj2hJjjSl+7NegnyOeZ88vByuZZFeTosAKXY=
Subject key identifier:   72:BD:A6:42:B4:ED:59:15:D9:F7:21:CA:8B:C3:5F:31:03:79:A4:48
Certificate issuer:       /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Certificate serial:       010D0C9F4328584D8EF57E8F0A4B0DEEE84F1680
Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     10310
IP address blocks:        206.222.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:7e:8f:0a:4b:0d:ee:e8:4f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=dfbf3f34-cf53-4201-a20d-0f2cd2197225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:19:1b:4e:8a:f9:54:09:92:fc:17:f3:38:
                    01:63:6b:61:1b:6e:c3:49:6e:17:15:13:01:68:d3:
                    d1:73:6d:bf:8e:4a:fb:e8:7a:da:04:ef:55:c3:7b:
                    eb:f2:4a:83:90:4d:8d:ae:3b:4f:b9:c8:a2:69:ce:
                    fc:6d:7b:27:f2:74:fc:4c:9c:54:b4:46:a2:04:39:
                    1c:1f:98:02:eb:7b:80:7d:00:6d:db:19:2f:25:07:
                    c3:32:9f:64:cb:f4:5b:62:0f:f8:4e:95:dc:13:7f:
                    85:58:3e:d3:dc:1a:3c:75:b3:e9:98:43:96:33:2e:
                    13:d3:40:0d:9f:6b:1c:58:50:36:eb:59:43:3f:a5:
                    97:1c:06:35:46:32:db:34:b2:0d:b7:91:42:90:56:
                    25:15:e8:4f:73:44:08:f1:54:0a:d1:fd:dd:63:13:
                    36:d8:90:a1:90:1d:ef:f4:9a:83:8c:af:39:eb:a2:
                    88:01:bc:a4:51:62:86:9c:cd:f0:13:fb:2e:48:c1:
                    50:cf:da:50:67:a8:cc:9d:8a:b9:ec:82:60:ad:eb:
                    37:37:31:2f:c7:03:fd:d3:d4:ed:ab:90:54:a4:80:
                    a0:af:1c:fc:13:32:fb:d8:05:2f:ce:58:3c:9a:0a:
                    e2:8b:4f:3b:c8:3b:c0:1b:f1:2d:77:6d:2d:c8:d2:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:A6:42:B4:ED:59:15:D9:F7:21:CA:8B:C3:5F:31:03:79:A4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl

            X509v3 Authority Key Identifier:
                keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.222.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:dc:5c:01:a1:6b:44:3b:5e:3d:ba:41:ea:e4:d0:e1:11:05:
         0c:22:7e:fe:6d:c2:db:b9:1c:c6:cf:41:33:78:97:52:07:ee:
         1e:87:e6:2d:fa:09:8e:b6:e5:38:cf:f9:73:7f:31:0f:8d:07:
         8d:2f:86:93:fd:fb:0c:cb:85:94:c8:6f:11:2c:54:31:67:df:
         31:4a:96:17:9b:77:fc:4d:13:b6:fe:ea:91:9d:34:54:5f:e5:
         d9:af:06:98:40:b6:60:09:14:10:22:fd:4c:7f:06:42:7e:c8:
         6f:ea:1e:d6:e7:33:ee:e8:51:52:02:d0:01:ec:5a:d7:60:cb:
         6b:6f:f5:f6:52:f1:08:f4:52:47:88:f8:ab:2a:76:93:1a:78:
         75:5a:ac:c6:93:8f:ae:04:51:f4:c5:e4:2e:58:71:09:a1:b3:
         dc:74:b4:e1:a5:72:b3:34:06:ee:7f:48:fa:35:26:3e:d5:3c:
         51:4a:a2:a0:1d:7f:32:5d:fd:28:0c:30:0a:63:d4:68:ab:ad:
         7a:62:40:90:63:99:63:62:39:d0:5d:02:11:c5:05:64:e8:90:
         ed:e0:48:a2:a3:81:f1:22:62:a8:58:66:74:fd:50:a9:08:3e:
         50:dc:3e:a4:45:9a:09:d1:63:16:19:1f:07:30:c3:0e:fa:ce:
         e6:1c:ce:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9X6PCksN7uhPFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5
NDgxMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ZGZiZjNmMzQtY2Y1My00MjAxLWEyMGQtMGYyY2QyMTk3MjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWsZG06K+VQJkvwX8zgBY2thG27DSW4XFRMB
aNPRc22/jkr76HraBO9Vw3vr8kqDkE2NrjtPuciiac78bXsn8nT8TJxUtEaiBDkc
H5gC63uAfQBt2xkvJQfDMp9ky/RbYg/4TpXcE3+FWD7T3Bo8dbPpmEOWMy4T00AN
n2scWFA261lDP6WXHAY1RjLbNLINt5FCkFYlFehPc0QI8VQK0f3dYxM22JChkB3v
9JqDjK8566KIAbykUWKGnM3wE/suSMFQz9pQZ6jMnYq57IJgres3NzEvxwP909Tt
q5BUpICgrxz8EzL72AUvzlg8mgrii087yDvAG/Etd20tyNIAgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHK9pkK07VkV2fchyovDXzEDeaRIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1
ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvOWMxMGZlMTAtZjM1Ni0z
NmZhLWE1MWQtMmU4ZWYxNzNmNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk
NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx
OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5
ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzt7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXcXAGha0Q7Xj26Qerk0OERBQwifv5twtu5HMbPQTN4l1IH7h6H5i36
CY625TjP+XN/MQ+NB40vhpP9+wzLhZTIbxEsVDFn3zFKlhebd/xNE7b+6pGdNFRf
5dmvBphAtmAJFBAi/Ux/BkJ+yG/qHtbnM+7oUVIC0AHsWtdgy2tv9fZS8Qj0UkeI
+KsqdpMaeHVarMaTj64EUfTF5C5YcQmhs9x0tOGlcrM0Bu5/SPo1Jj7VPFFKoqAd
fzJd/SgMMApj1GirrXpiQJBjmWNiOdBdAhHFBWTokO3gSKKjgfEiYqhYZnT9UKkI
PlDcPqRFmgnRYxYZHwcwww76zuYczig=
-----END CERTIFICATE-----
Generated at Wed May 13 14:45:58 2026 by rpki-client