Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
File:                     4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa (raw, json)
Hash identifier:          Ua98S0pqWeimP42HMgrHZBCdZbPDFKYUbD434W7sNVs=
Subject key identifier:   1B:BA:82:C3:5F:43:6E:E8:2D:49:78:A0:7D:34:82:22:3A:0F:0A:7E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFB76B57EA9F0310C55C40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     17359
IP address blocks:        208.89.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b7:6b:57:ea:9f:03:10:c5:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=edf5b160-1ad4-4737-af42-0ce69075f9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:31:38:58:c3:07:fc:86:95:8f:3d:49:66:
                    fe:c2:ac:a5:e1:25:8d:06:e0:2d:12:87:04:f8:1d:
                    91:2b:dc:d4:04:a8:0a:85:87:22:01:00:07:dc:e0:
                    5d:e0:dc:11:8c:97:23:a9:c5:a5:53:d4:d1:60:9b:
                    80:47:ad:14:e0:2e:a3:54:bd:81:e8:b8:ef:a9:62:
                    e7:f7:4f:93:0f:82:d8:0e:2e:25:eb:78:50:5c:f8:
                    58:56:73:4b:cc:88:3b:91:33:94:ce:87:da:fa:ae:
                    0e:d6:34:b7:36:a0:75:6f:2c:e6:e2:a9:6d:8c:1e:
                    26:61:fa:20:bf:e9:27:35:46:78:d2:8d:bc:02:49:
                    87:1a:97:7d:f2:5f:48:fc:bf:1b:38:aa:87:7b:a6:
                    1d:77:56:80:9a:02:5c:ff:0c:8a:fa:50:22:29:f1:
                    a4:92:69:b0:1c:11:e5:ab:55:ff:49:02:7c:ae:b4:
                    46:e7:cd:86:ed:a4:49:cf:9d:20:26:d5:eb:42:11:
                    1a:f1:bf:db:2a:0c:b3:4f:07:78:11:9f:b6:7a:f3:
                    d5:b8:70:c0:e1:48:61:61:ad:96:c3:ae:91:da:c9:
                    1e:52:65:de:c7:ea:9a:dc:9f:33:db:94:bb:0c:3c:
                    a9:8e:e4:33:9a:17:f3:c7:24:e8:87:9f:16:7a:45:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:82:C3:5F:43:6E:E8:2D:49:78:A0:7D:34:82:22:3A:0F:0A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:ba:57:1d:90:b4:00:6a:99:4a:76:46:ed:82:59:be:64:
         69:8b:de:f6:34:b9:24:1f:9b:e1:94:c2:1e:e6:a9:d6:fa:48:
         8a:dc:fb:29:c7:ba:8b:a0:4b:06:c4:91:86:a0:e3:03:e2:19:
         e3:21:ed:f0:60:c0:98:7a:cc:7c:e2:5f:08:97:30:a3:df:fc:
         93:7c:f1:ba:94:70:d6:a3:bf:a4:60:cf:5f:d6:a6:fe:13:b0:
         e6:bb:26:e2:27:89:28:a8:40:2f:4f:7a:3b:10:59:91:2f:26:
         eb:ad:9f:12:cc:3b:c0:6a:b0:a2:35:23:37:76:83:c6:98:98:
         f8:73:e8:9d:af:ba:a5:c0:7c:33:f0:c4:c3:51:ca:48:ea:71:
         bc:f7:0d:e4:56:c5:57:65:6d:ae:ba:ae:49:05:cb:d3:c1:13:
         90:f0:f2:ba:c7:02:d4:61:98:05:03:26:9e:f1:b2:6f:47:79:
         de:8f:66:18:5f:51:58:f4:00:47:ae:ec:5f:81:7c:de:6b:98:
         de:5d:f3:7f:8a:1a:eb:c5:7f:67:4b:11:3f:db:ac:63:9b:61:
         9c:8d:fb:69:d0:d7:5b:52:05:e6:5d:95:b9:6d:58:0c:8b:d1:
         b7:b0:25:47:03:f2:c8:f7:e6:dc:85:3d:3a:91:66:9d:61:53:
         95:4f:28:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7drV+qfAxDFXEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZWRmNWIxNjAtMWFkNC00NzM3LWFmNDItMGNlNjkwNzVmOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9oxOFjDB/yGlY89SWb+wqyl4SWNBuAtEocE
+B2RK9zUBKgKhYciAQAH3OBd4NwRjJcjqcWlU9TRYJuAR60U4C6jVL2B6LjvqWLn
90+TD4LYDi4l63hQXPhYVnNLzIg7kTOUzofa+q4O1jS3NqB1byzm4qltjB4mYfog
v+knNUZ40o28AkmHGpd98l9I/L8bOKqHe6Ydd1aAmgJc/wyK+lAiKfGkkmmwHBHl
q1X/SQJ8rrRG582G7aRJz50gJtXrQhEa8b/bKgyzTwd4EZ+2evPVuHDA4UhhYa2W
w66R2skeUmXex+qa3J8z25S7DDypjuQzmhfzxyToh58WekVRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBu6gsNfQ27oLUl4oH00giI6Dwp+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNDEwNWI3YjktMzAwMy0z
ZWYzLTllNTMtOWZmMmNiYWIwOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FkGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1QulcdkLQAaplKdkbtglm+ZGmL3vY0uSQfm+GUwh7mqdb6SIrc+ynH
uougSwbEkYag4wPiGeMh7fBgwJh6zHziXwiXMKPf/JN88bqUcNajv6Rgz1/Wpv4T
sOa7JuIniSioQC9PejsQWZEvJuutnxLMO8BqsKI1Izd2g8aYmPhz6J2vuqXAfDPw
xMNRykjqcbz3DeRWxVdlba66rkkFy9PBE5Dw8rrHAtRhmAUDJp7xsm9Hed6PZhhf
UVj0AEeu7F+BfN5rmN5d83+KGuvFf2dLET/brGObYZyN+2nQ11tSBeZdlbltWAyL
0bewJUcD8sj35tyFPTqRZp1hU5VPKL8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:40 2026 by rpki-client