Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa
File:                     2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa (raw, json)
Hash identifier:          TjJAIJUpUCEYDCn6vmvACFGXb6KdlWySPfrewj26hmQ=
Subject key identifier:   FF:FB:CD:B3:BB:4F:35:B3:7B:F2:4B:4A:1B:5C:14:99:2D:55:CF:80
Certificate issuer:       /CN=5791cb0d-5211-4c45-8605-8ac3cb96d9dd
Certificate serial:       010D0C9F4328584D359FACA0B0B43BD256480A80
Authority key identifier: 6A:9A:8B:89:A1:9E:F9:CF:DC:BF:AE:67:45:DF:46:3F:C5:F9:3D:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     18106
IP address blocks:        206.166.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:ac:a0:b0:b4:3b:d2:56:48:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5791cb0d-5211-4c45-8605-8ac3cb96d9dd
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=fd4c2c07-0416-42a7-9820-7ce4512d7c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:08:e2:7b:f4:44:51:be:e1:6b:07:22:47:
                    85:64:b7:90:79:06:3b:bd:e9:14:82:10:b4:d4:fd:
                    95:27:f6:71:bf:2c:38:f9:ea:c3:f5:57:93:c8:75:
                    3b:2b:de:1e:b0:58:5e:f3:4e:ed:77:37:36:54:7c:
                    12:34:bf:8d:47:d0:71:5d:13:be:b3:0d:8d:1f:96:
                    71:af:42:f3:08:93:cb:cd:12:ef:56:c0:76:49:9b:
                    e8:73:1d:20:9b:ce:6e:45:6c:94:f4:e4:39:4c:ba:
                    58:62:0d:38:61:61:83:9b:a4:e0:c9:2d:61:2b:11:
                    ad:6a:ef:41:d8:35:d4:14:3e:bd:f9:d6:55:84:b2:
                    0f:fe:61:81:8a:96:eb:27:2d:2b:67:e8:5c:7b:7d:
                    a4:16:5b:2b:92:5b:45:b2:90:19:b8:25:a6:cf:3d:
                    20:7d:0d:48:d4:13:76:a1:68:a9:ce:03:87:a7:39:
                    d4:71:f0:9d:6e:39:bd:f5:6a:73:41:0f:8b:10:ee:
                    9c:11:81:45:74:2c:b3:32:47:f6:a3:06:9c:84:36:
                    70:e5:c9:2e:9f:83:ed:16:5c:17:41:e3:64:75:fe:
                    ab:0e:5a:c4:21:d5:17:c9:82:ac:d2:9c:95:f7:44:
                    af:15:ea:a6:38:d3:53:97:7e:18:4d:a5:8a:13:62:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FB:CD:B3:BB:4F:35:B3:7B:F2:4B:4A:1B:5C:14:99:2D:55:CF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:9A:8B:89:A1:9E:F9:CF:DC:BF:AE:67:45:DF:46:3F:C5:F9:3D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.166.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0b:a6:70:37:90:25:71:f2:f7:c3:aa:d4:6c:1a:43:10:93:
         5b:92:42:99:d6:4d:e0:4c:62:c4:ff:45:69:74:91:28:3f:ff:
         f7:06:f0:4a:96:b6:3e:35:b4:da:69:66:3d:d7:00:cc:68:a7:
         c9:e2:d7:f4:8a:2b:34:f0:91:ed:3d:97:f4:d4:0b:34:3b:7c:
         1d:f5:18:de:d5:22:47:67:11:17:4b:af:03:c8:a1:6c:aa:b8:
         57:07:d4:b7:de:cd:61:7c:80:30:0b:a5:ba:75:37:93:94:78:
         73:dc:ae:5c:98:0a:ac:f7:2b:94:ec:8b:b7:49:98:2c:64:73:
         41:9f:48:d6:c9:d8:05:ca:5f:6b:14:06:18:11:49:40:6e:d6:
         c8:a7:f9:1f:4b:59:99:19:12:52:61:e7:0b:c8:23:2b:64:88:
         a3:7c:81:9e:30:73:18:76:2a:43:71:d8:54:96:f7:72:3b:51:
         c2:bd:c4:9e:b0:37:98:ac:09:62:7b:1b:ff:f9:9b:bc:89:1f:
         d8:fc:14:82:e6:f1:25:ca:e7:80:2b:ed:06:47:6d:46:72:80:
         56:34:a1:7f:54:74:c1:d2:df:7a:f6:ef:78:84:19:90:78:8a:
         d2:12:c9:fc:c4:a8:ca:4c:99:86:73:1e:42:48:5a:5d:37:d8:
         3a:8b:9b:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6ygsLQ70lZICoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc5MWNiMGQtNTIxMS00YzQ1LTg2MDUtOGFjM2NiOTZk
OWRkMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ZmQ0YzJjMDctMDQxNi00MmE3LTk4MjAtN2NlNDUxMmQ3YzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaEI4nv0RFG+4WsHIkeFZLeQeQY7vekUghC0
1P2VJ/Zxvyw4+erD9VeTyHU7K94esFhe807tdzc2VHwSNL+NR9BxXRO+sw2NH5Zx
r0LzCJPLzRLvVsB2SZvocx0gm85uRWyU9OQ5TLpYYg04YWGDm6TgyS1hKxGtau9B
2DXUFD69+dZVhLIP/mGBipbrJy0rZ+hce32kFlsrkltFspAZuCWmzz0gfQ1I1BN2
oWipzgOHpznUcfCdbjm99WpzQQ+LEO6cEYFFdCyzMkf2owachDZw5ckun4PtFlwX
QeNkdf6rDlrEIdUXyYKs0pyV90SvFeqmONNTl34YTaWKE2IDjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/7zbO7TzWze/JLShtcFJktVc+AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzkx
Y2IwZC01MjExLTRjNDUtODYwNS04YWMzY2I5NmQ5ZGQvMmJmZjUyYjUtOGQ4My0z
ZDE2LThlZGMtZjgyMDBhNGE3ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5MWNiMGQtNTIxMS00YzQ1LTg2
MDUtOGFjM2NiOTZkOWRkLzU3OTFjYjBkLTUyMTEtNGM0NS04NjA1LThhYzNjYjk2
ZDlkZC5jcmwwHwYDVR0jBBgwFoAUapqLiaGe+c/cv65nRd9GP8X5PacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NzkxY2IwZC01MjExLTRjNDUtODYwNS04YWMz
Y2I5NmQ5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqbKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcLpnA3kCVx8vfDqtRsGkMQk1uSQpnWTeBMYsT/RWl0kSg///cG8EqW
tj41tNppZj3XAMxop8ni1/SKKzTwke09l/TUCzQ7fB31GN7VIkdnERdLrwPIoWyq
uFcH1LfezWF8gDALpbp1N5OUeHPcrlyYCqz3K5Tsi7dJmCxkc0GfSNbJ2AXKX2sU
BhgRSUBu1sin+R9LWZkZElJh5wvIIytkiKN8gZ4wcxh2KkNx2FSW93I7UcK9xJ6w
N5isCWJ7G//5m7yJH9j8FILm8SXK54Ar7QZHbUZygFY0oX9UdMHS33r273iEGZB4
itISyfzEqMpMmYZzHkJIWl032DqLmwc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:42 2026 by rpki-client