Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/195dab2c-d4f9-3143-8326-6e0c6fe87fdd.roa
File:                     195dab2c-d4f9-3143-8326-6e0c6fe87fdd.roa (raw, json)
Hash identifier:          q17AIBBWQscbSWfB2s1hAngJ0qQP/NIIrtzzWbdh6cM=
Subject key identifier:   93:B0:A6:B3:B7:43:5B:A8:3C:24:CA:39:D6:D9:AB:1A:AA:23:3F:FA
Certificate issuer:       /CN=30c9bb22-dd43-4440-b234-4d1b58e8e742
Certificate serial:       010D0C9F4328584DC995BE3F2E8D0A606F3C3700
Authority key identifier: 7D:79:46:FA:36:39:8E:C0:51:7C:5C:14:1A:20:24:C4:C3:86:E3:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/195dab2c-d4f9-3143-8326-6e0c6fe87fdd.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     8046
IP address blocks:        206.81.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/30c9bb22-dd43-4440-b234-4d1b58e8e742.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/30c9bb22-dd43-4440-b234-4d1b58e8e742.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:be:3f:2e:8d:0a:60:6f:3c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c9bb22-dd43-4440-b234-4d1b58e8e742
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=d244e481-1374-4319-b7a9-fe46038f65da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6e:11:95:69:91:2a:5f:f4:65:40:b5:22:19:
                    40:b8:f1:ec:fd:7c:98:3d:c3:eb:56:2f:9b:35:80:
                    17:c9:c3:04:b6:a9:01:1e:49:56:64:88:3c:82:f8:
                    21:9c:1b:44:31:ff:c5:db:3b:0b:9f:ae:a7:11:43:
                    aa:f4:e8:0d:85:f3:e5:f0:32:4c:e3:ea:e6:37:d1:
                    b9:b3:7a:9f:81:62:1b:ca:88:e1:96:18:19:b6:6d:
                    65:e8:01:17:5a:77:51:00:73:76:8e:5d:00:e3:81:
                    18:2d:0b:b5:d7:52:8f:17:24:84:b7:63:4a:59:ef:
                    8c:c1:44:6b:00:93:5a:76:80:b1:30:71:99:60:56:
                    d4:04:93:96:ce:52:a3:08:15:2e:df:e1:aa:8a:d1:
                    f3:3a:e9:4d:07:83:37:f1:63:68:1c:04:f1:a7:24:
                    8c:99:1a:1f:c9:bd:5f:0c:d5:a6:fb:da:6f:b2:06:
                    9c:87:53:e8:56:7e:5e:ad:d8:80:2d:e0:b8:04:3e:
                    b3:07:d7:d9:a7:a1:44:4a:00:99:c1:ef:9c:22:79:
                    f7:39:30:64:91:bc:e6:4b:23:a5:fb:bc:ee:7e:c6:
                    10:cc:a3:d9:72:56:0f:b4:70:5c:da:fc:58:41:0f:
                    5b:6f:1c:e5:2b:22:5b:80:bd:4f:17:bb:f4:29:85:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:A6:B3:B7:43:5B:A8:3C:24:CA:39:D6:D9:AB:1A:AA:23:3F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/195dab2c-d4f9-3143-8326-6e0c6fe87fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/30c9bb22-dd43-4440-b234-4d1b58e8e742.crl

            X509v3 Authority Key Identifier:
                keyid:7D:79:46:FA:36:39:8E:C0:51:7C:5C:14:1A:20:24:C4:C3:86:E3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.81.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:84:c2:85:cc:94:a7:0d:29:2b:ed:6e:2a:ef:ff:7b:3b:
         19:79:dd:43:ab:9c:64:a0:2e:40:17:73:0f:3f:3a:c6:33:f8:
         b2:29:a3:30:b9:83:b3:bc:e4:19:b4:ec:21:54:a5:b4:1f:fe:
         fc:f7:bb:99:eb:5b:5d:92:0a:d3:d1:01:a7:33:87:05:95:f6:
         78:1f:7a:a8:ec:18:4b:4e:1c:fd:b0:46:1e:e8:35:20:11:08:
         cb:14:b3:41:ff:a9:c7:0b:a5:9d:9e:24:1f:f5:d4:fe:f9:07:
         a8:22:b6:b9:eb:a7:83:9d:e2:4d:ce:0f:ac:71:1d:58:e7:a5:
         09:8f:c9:03:b2:a8:31:a8:0a:f7:23:56:6a:77:c8:9d:da:14:
         95:ec:e6:97:47:3d:3b:70:cb:d3:09:ff:ad:96:9f:4f:46:1f:
         db:72:ef:d2:5e:1f:b2:2c:0d:32:e2:db:78:01:5b:53:e5:ec:
         eb:8e:ff:e1:b5:ea:cb:68:3f:dd:d4:9e:52:0f:4b:05:12:d7:
         06:3e:25:68:a1:d9:83:bf:a9:39:e5:60:04:99:16:f8:c0:b9:
         b1:c2:3e:5d:8f:ee:51:83:15:e1:8c:00:42:b1:10:12:5c:de:
         09:8d:a8:26:19:53:c1:79:15:d6:3d:d6:6f:61:9b:d7:fa:9a:
         79:76:86:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlb4/Lo0KYG88NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBjOWJiMjItZGQ0My00NDQwLWIyMzQtNGQxYjU4ZThl
NzQyMB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDI0NGU0ODEtMTM3NC00MzE5LWI3YTktZmU0NjAzOGY2NWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm4RlWmRKl/0ZUC1IhlAuPHs/XyYPcPrVi+b
NYAXycMEtqkBHklWZIg8gvghnBtEMf/F2zsLn66nEUOq9OgNhfPl8DJM4+rmN9G5
s3qfgWIbyojhlhgZtm1l6AEXWndRAHN2jl0A44EYLQu111KPFySEt2NKWe+MwURr
AJNadoCxMHGZYFbUBJOWzlKjCBUu3+GqitHzOulNB4M38WNoHATxpySMmRofyb1f
DNWm+9pvsgach1PoVn5erdiALeC4BD6zB9fZp6FESgCZwe+cInn3OTBkkbzmSyOl
+7zufsYQzKPZclYPtHBc2vxYQQ9bbxzlKyJbgL1PF7v0KYX2dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJOwprO3Q1uoPCTKOdbZqxqqIz/6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zMGM5
YmIyMi1kZDQzLTQ0NDAtYjIzNC00ZDFiNThlOGU3NDIvMTk1ZGFiMmMtZDRmOS0z
MTQzLTgzMjYtNmUwYzZmZTg3ZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzBjOWJiMjItZGQ0My00NDQwLWIy
MzQtNGQxYjU4ZThlNzQyLzMwYzliYjIyLWRkNDMtNDQ0MC1iMjM0LTRkMWI1OGU4
ZTc0Mi5jcmwwHwYDVR0jBBgwFoAUfXlG+jY5jsBRfFwUGiAkxMOG42IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zMGM5YmIyMi1kZDQzLTQ0NDAtYjIzNC00ZDFi
NThlOGU3NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzlFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbqhMKFzJSnDSkr7W4q7/97Oxl53UOrnGSgLkAXcw8/OsYz+LIpozC5
g7O85Bm07CFUpbQf/vz3u5nrW12SCtPRAaczhwWV9ngfeqjsGEtOHP2wRh7oNSAR
CMsUs0H/qccLpZ2eJB/11P75B6gitrnrp4Od4k3OD6xxHVjnpQmPyQOyqDGoCvcj
Vmp3yJ3aFJXs5pdHPTtwy9MJ/62Wn09GH9ty79JeH7IsDTLi23gBW1Pl7OuO/+G1
6stoP93UnlIPSwUS1wY+JWih2YO/qTnlYASZFvjAubHCPl2P7lGDFeGMAEKxEBJc
3gmNqCYZU8F5FdY91m9hm9f6mnl2hiM=
-----END CERTIFICATE-----
Generated at Wed May 13 09:24:57 2026 by rpki-client