Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa
File:                     6ca0719b-0f97-39cc-88ec-f8763d684de5.roa (raw, json)
Hash identifier:          b6guo8wm4BzV8tnZ03Nt73vUi+uwhUKNvWUaTc5VySk=
Subject key identifier:   2C:1E:37:AA:19:8D:FC:D0:0F:D2:99:3B:B6:00:DA:E1:CC:EA:E8:E1
Certificate issuer:       /CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
Certificate serial:       010D0C9F4328584E6F3A4DCD9D9DFF95FC8FE300
Authority key identifier: 72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        199.247.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4d:cd:9d:9d:ff:95:fc:8f:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40fbee7-5dae-4a5d-a79b-cf60cd73e49d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ed7f8286-2833-48e4-ba26-97d7bf3e917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:77:a9:40:0c:7f:fd:d9:c1:b8:e0:e1:90:
                    36:04:c6:71:76:85:c4:2a:3a:75:0f:2c:16:3e:ba:
                    47:82:b1:26:57:50:56:c6:a4:88:c4:7b:3a:ae:1d:
                    08:4d:58:60:18:93:62:18:53:51:95:43:94:cd:eb:
                    d9:6c:0a:9c:f1:00:31:b1:f3:3d:08:d7:0b:ec:c5:
                    b7:07:68:20:06:c0:9d:74:26:23:85:d8:8c:00:2e:
                    8e:38:fc:cb:1b:05:1e:f4:e1:63:72:b3:4b:dc:58:
                    bb:0b:d4:ba:ff:43:ae:13:e4:7a:d8:6e:b7:53:98:
                    d6:b2:29:d1:35:86:7f:1c:6d:1f:1e:fa:f2:14:99:
                    63:f3:e5:f8:79:3d:d8:1d:0a:27:fb:fa:81:d6:c4:
                    7a:59:bd:2d:08:14:57:68:9e:0f:2d:88:8d:23:c6:
                    6b:15:c6:30:c2:7c:1f:0c:84:60:da:51:d9:4b:00:
                    52:b9:6a:09:2e:51:f7:37:69:f1:92:79:4f:c5:0c:
                    99:24:cc:39:71:ea:16:b8:90:94:85:3c:27:74:dc:
                    ad:7a:f1:10:74:43:ae:b7:d9:e3:62:06:25:56:14:
                    bd:26:28:fb:f3:46:c3:95:9a:89:ed:f9:37:88:a1:
                    09:5f:25:a3:05:91:d8:81:cd:16:f1:8b:30:79:4f:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1E:37:AA:19:8D:FC:D0:0F:D2:99:3B:B6:00:DA:E1:CC:EA:E8:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/6ca0719b-0f97-39cc-88ec-f8763d684de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.crl

            X509v3 Authority Key Identifier:
                keyid:72:AE:D6:7B:2F:27:2D:67:12:6E:C5:B1:00:D2:F8:25:08:E0:00:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a40fbee7-5dae-4a5d-a79b-cf60cd73e49d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:bb:02:81:98:c3:e0:18:68:37:7f:3e:78:8c:bf:02:8b:
         83:45:f6:2c:36:10:2c:31:a8:1e:d9:15:ee:07:46:7d:50:eb:
         a6:d5:85:39:23:47:24:44:c5:64:0b:ac:48:75:b3:9b:cd:0c:
         a3:e9:ab:f1:d8:b5:c9:ea:e8:f7:80:46:83:7c:27:d0:2a:a0:
         9f:13:6d:1d:ce:5b:4e:3d:3a:8c:15:fb:a8:a2:eb:a1:26:da:
         ff:8f:a1:51:24:87:a2:c9:db:fd:3d:41:c2:7f:e3:77:3f:b5:
         85:0c:27:94:33:7c:5a:aa:1b:86:3f:86:30:08:b9:93:81:ff:
         eb:fa:3a:26:35:f8:b2:42:8a:17:f8:df:0e:2f:63:85:81:5b:
         39:2a:26:a3:67:ac:ca:04:6c:6e:0a:5b:61:cd:83:a1:e7:d7:
         5a:c2:b3:6c:86:89:ba:66:77:3b:9c:78:68:f7:44:13:e4:10:
         72:d7:04:e3:90:19:55:60:2e:76:f0:2c:9c:18:1d:bb:b3:9a:
         29:75:55:05:05:13:dc:b8:b3:8c:28:1b:61:7c:d8:ad:22:21:
         43:2c:60:17:60:9f:0a:40:0b:aa:a5:87:e5:a4:cb:a9:a1:46:
         24:89:15:af:b0:3e:61:06:07:87:98:2c:8d:1e:4c:b7:26:1e:
         8f:d4:3b:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOk3NnZ3/lfyP4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQwZmJlZTctNWRhZS00YTVkLWE3OWItY2Y2MGNkNzNl
NDlkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
ZWQ3ZjgyODYtMjgzMy00OGU0LWJhMjYtOTdkN2JmM2U5MTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHZ3qUAMf/3Zwbjg4ZA2BMZxdoXEKjp1DywW
PrpHgrEmV1BWxqSIxHs6rh0ITVhgGJNiGFNRlUOUzevZbAqc8QAxsfM9CNcL7MW3
B2ggBsCddCYjhdiMAC6OOPzLGwUe9OFjcrNL3Fi7C9S6/0OuE+R62G63U5jWsinR
NYZ/HG0fHvryFJlj8+X4eT3YHQon+/qB1sR6Wb0tCBRXaJ4PLYiNI8ZrFcYwwnwf
DIRg2lHZSwBSuWoJLlH3N2nxknlPxQyZJMw5ceoWuJCUhTwndNytevEQdEOut9nj
YgYlVhS9Jij780bDlZqJ7fk3iKEJXyWjBZHYgc0W8YsweU9UGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCweN6oZjfzQD9KZO7YA2uHM6ujhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNDBm
YmVlNy01ZGFlLTRhNWQtYTc5Yi1jZjYwY2Q3M2U0OWQvNmNhMDcxOWItMGY5Ny0z
OWNjLTg4ZWMtZjg3NjNkNjg0ZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTQwZmJlZTctNWRhZS00YTVkLWE3
OWItY2Y2MGNkNzNlNDlkL2E0MGZiZWU3LTVkYWUtNGE1ZC1hNzliLWNmNjBjZDcz
ZTQ5ZC5jcmwwHwYDVR0jBBgwFoAUcq7Wey8nLWcSbsWxANL4JQjgAOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNDBmYmVlNy01ZGFlLTRhNWQtYTc5Yi1jZjYw
Y2Q3M2U0OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/fMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3fuwKBmMPgGGg3fz54jL8Ci4NF9iw2ECwxqB7ZFe4HRn1Q66bVhTkj
RyRExWQLrEh1s5vNDKPpq/HYtcnq6PeARoN8J9AqoJ8TbR3OW049OowV+6ii66Em
2v+PoVEkh6LJ2/09QcJ/43c/tYUMJ5QzfFqqG4Y/hjAIuZOB/+v6OiY1+LJCihf4
3w4vY4WBWzkqJqNnrMoEbG4KW2HNg6Hn11rCs2yGibpmdzuceGj3RBPkEHLXBOOQ
GVVgLnbwLJwYHbuzmil1VQUFE9y4s4woG2F82K0iIUMsYBdgnwpAC6qlh+Wky6mh
RiSJFa+wPmEGB4eYLI0eTLcmHo/UO7M=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:05:14 2026 by rpki-client