Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa
File:                     9d06dada-6d76-32ae-8388-ee9247df3591.roa (raw, json)
Hash identifier:          39oXnZLjxGVhfDBJ58AsGJLfsf3gnCZLqGXq7OIptx4=
Subject key identifier:   EB:42:78:89:C4:E6:92:8C:D6:0E:50:BB:D7:87:C1:3B:18:02:37:E7
Certificate issuer:       /CN=1f8437cb-088c-4f24-b728-2e13ad3df4df
Certificate serial:       010D0C9F4328584D3B34E583DC43424655DFFD60
Authority key identifier: 5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     40008
IP address blocks:        206.168.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:e5:83:dc:43:42:46:55:df:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f8437cb-088c-4f24-b728-2e13ad3df4df
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=5cfd373a-a742-4929-aaaa-b837d316f173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:e8:70:d9:11:9b:7d:d0:e8:fa:1c:76:b4:
                    88:49:9e:a0:21:f8:3c:fa:6f:06:d8:3b:a9:9e:36:
                    e2:1c:da:09:05:db:c3:45:93:16:88:d2:b1:93:ee:
                    ac:55:b8:91:f1:30:60:16:3a:74:ec:59:de:65:c2:
                    7d:50:fa:01:5d:41:47:29:3b:15:20:fe:87:0d:ab:
                    53:4f:92:d2:8b:66:f2:af:65:83:1c:35:53:7d:4f:
                    95:d4:59:1c:96:e5:01:8c:e7:c3:01:c7:45:18:5a:
                    e1:be:01:a9:4a:64:98:c0:38:5c:5b:d6:49:8a:06:
                    c1:86:0b:c4:4b:58:3f:c9:89:3a:e6:ac:fa:ba:b6:
                    c3:c1:39:89:53:4a:45:87:a0:81:b4:dd:f5:4b:5e:
                    0c:60:be:1d:ea:fd:89:76:75:c4:3d:c6:0c:0d:84:
                    45:e4:30:31:ae:38:e4:85:d5:ae:92:48:fa:49:03:
                    a6:d6:83:84:99:92:d5:10:cc:4d:f4:ce:01:af:33:
                    14:7b:e0:bc:38:5d:d8:5b:e9:70:e0:f4:a1:03:b3:
                    54:9b:c5:2c:d3:f7:a2:9c:dc:da:e4:dc:ae:8b:98:
                    a1:71:5b:10:97:46:d0:a8:74:9b:8f:89:41:cc:5e:
                    81:b3:53:4d:5b:66:e5:6f:ce:29:48:9f:f9:70:e2:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:42:78:89:C4:E6:92:8C:D6:0E:50:BB:D7:87:C1:3B:18:02:37:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/9d06dada-6d76-32ae-8388-ee9247df3591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df/1f8437cb-088c-4f24-b728-2e13ad3df4df.crl

            X509v3 Authority Key Identifier:
                keyid:5E:83:41:68:0C:95:84:9A:82:A6:5C:83:1B:1A:D9:F2:C0:60:85:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f8437cb-088c-4f24-b728-2e13ad3df4df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:af:8e:0d:fe:de:06:2b:07:28:58:06:73:97:93:f2:20:46:
         66:76:89:51:42:bd:95:17:9c:9e:1d:98:f7:61:fc:e2:14:6f:
         c8:01:ed:49:05:ee:6b:f2:ee:a8:43:ce:9c:e8:85:25:4b:c1:
         e6:5f:f0:2e:bf:7c:5c:5f:7d:05:fa:e7:84:51:4a:ef:44:ef:
         5f:80:65:6b:76:6f:2b:93:b3:d1:5b:34:fd:70:71:ef:e4:26:
         35:f3:0f:2d:5c:dd:f0:b5:77:29:98:b8:2a:c6:31:11:19:4c:
         d7:3d:cf:16:fa:7a:07:0c:dc:0c:1b:79:38:07:8e:7e:68:59:
         9e:2e:cb:52:a4:25:6e:d2:33:74:00:3a:19:f4:a6:92:cb:33:
         84:a4:93:8b:45:92:59:fd:a6:9d:d8:0f:16:39:e9:72:02:59:
         17:7e:67:3b:99:66:4b:54:4f:b9:ca:08:9e:07:c3:db:32:5c:
         64:8d:a4:8d:6e:0a:4e:4a:84:77:19:d3:96:05:fb:9d:20:49:
         ab:4c:29:5e:22:0f:80:e5:69:80:c8:0d:51:ae:0a:d2:14:db:
         30:5a:19:2f:12:85:5c:b1:b2:4c:7c:77:04:29:63:b9:d9:99:
         57:5a:34:b7:1b:fc:e8:14:40:60:6c:56:ef:e7:98:60:1c:4a:
         43:60:54:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOWD3ENCRlXf/WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY4NDM3Y2ItMDg4Yy00ZjI0LWI3MjgtMmUxM2FkM2Rm
NGRmMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk
NWNmZDM3M2EtYTc0Mi00OTI5LWFhYWEtYjgzN2QzMTZmMTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPPocNkRm33Q6PocdrSISZ6gIfg8+m8G2Dup
njbiHNoJBdvDRZMWiNKxk+6sVbiR8TBgFjp07FneZcJ9UPoBXUFHKTsVIP6HDatT
T5LSi2byr2WDHDVTfU+V1FkcluUBjOfDAcdFGFrhvgGpSmSYwDhcW9ZJigbBhgvE
S1g/yYk65qz6urbDwTmJU0pFh6CBtN31S14MYL4d6v2JdnXEPcYMDYRF5DAxrjjk
hdWukkj6SQOm1oOEmZLVEMxN9M4BrzMUe+C8OF3YW+lw4PShA7NUm8Us0/einNza
5Nyui5ihcVsQl0bQqHSbj4lBzF6Bs1NNW2blb84pSJ/5cOKL1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtCeInE5pKM1g5Qu9eHwTsYAjfnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjg0
MzdjYi0wODhjLTRmMjQtYjcyOC0yZTEzYWQzZGY0ZGYvOWQwNmRhZGEtNmQ3Ni0z
MmFlLTgzODgtZWU5MjQ3ZGYzNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY4NDM3Y2ItMDg4Yy00ZjI0LWI3
MjgtMmUxM2FkM2RmNGRmLzFmODQzN2NiLTA4OGMtNGYyNC1iNzI4LTJlMTNhZDNk
ZjRkZi5jcmwwHwYDVR0jBBgwFoAUXoNBaAyVhJqCplyDGxrZ8sBghckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjg0MzdjYi0wODhjLTRmMjQtYjcyOC0yZTEz
YWQzZGY0ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqh0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOvjg3+3gYrByhYBnOXk/IgRmZ2iVFCvZUXnJ4dmPdh/OIUb8gB7UkF
7mvy7qhDzpzohSVLweZf8C6/fFxffQX654RRSu9E71+AZWt2byuTs9FbNP1wce/k
JjXzDy1c3fC1dymYuCrGMREZTNc9zxb6egcM3AwbeTgHjn5oWZ4uy1KkJW7SM3QA
Ohn0ppLLM4Skk4tFkln9pp3YDxY56XICWRd+ZzuZZktUT7nKCJ4Hw9syXGSNpI1u
Ck5KhHcZ05YF+50gSatMKV4iD4DlaYDIDVGuCtIU2zBaGS8ShVyxskx8dwQpY7nZ
mVdaNLcb/OgUQGBsVu/nmGAcSkNgVFc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:22 2026 by rpki-client