Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
File:                     2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa (raw, json)
Hash identifier:          Yi25QD77vVAI/aH4+I1kV8BCzrNr4YGgrspy4hKbhy0=
Subject key identifier:   45:BA:D2:6D:1A:4E:E1:A2:B8:82:E3:CD:86:A8:0E:78:57:81:C0:6B
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584D492A69993AEF90FB655ECDE0
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:69:99:3a:ef:90:fb:65:5e:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=da1fad6f-1739-47cf-ac81-f9d5a7fdd6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:86:8c:30:53:3a:65:3b:46:70:9c:5d:11:
                    ba:7d:04:cf:7a:0a:66:b8:22:f5:a9:f5:50:d9:6e:
                    00:e7:be:b6:93:14:9f:90:40:78:6a:b7:3e:65:1a:
                    a3:d8:30:34:10:8d:de:77:84:d6:e8:b9:06:cd:39:
                    01:38:27:57:10:a4:57:6a:c9:e7:99:29:e9:c2:b3:
                    25:77:ac:5c:0f:03:45:37:df:60:df:cb:90:7f:f0:
                    93:01:79:c9:46:48:7b:52:72:20:a9:5b:03:6d:90:
                    1f:3c:49:08:6b:3e:b7:e1:2a:89:57:b9:83:3f:e9:
                    51:15:4e:95:e0:19:17:f0:b3:b4:4f:f2:03:e1:b7:
                    f5:7a:bf:29:6b:50:92:38:54:59:15:1f:a2:1e:33:
                    5a:95:59:33:00:7f:71:ca:a1:31:e8:f8:8f:e4:55:
                    b4:16:e5:e5:df:3a:ac:3a:42:81:59:25:fb:c2:5c:
                    07:71:5f:5c:88:ec:22:ac:71:f0:aa:c9:55:6c:66:
                    f2:f9:49:7d:c4:65:c5:00:aa:78:bb:f4:d3:2d:cc:
                    c3:da:62:81:3d:c6:cc:a0:5b:45:90:eb:ea:95:ed:
                    a8:45:73:b3:9f:3d:6b:fa:b7:d7:f9:3a:49:5d:ed:
                    f6:2d:15:73:08:6e:22:7f:8b:9a:2f:b9:68:77:0c:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:D2:6D:1A:4E:E1:A2:B8:82:E3:CD:86:A8:0E:78:57:81:C0:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:62:5c:bd:3b:52:ee:41:56:be:a5:fb:7b:8b:94:cc:4d:99:
         82:e4:45:af:49:6c:bc:4b:22:1f:a5:5d:9f:7c:37:9f:e0:9c:
         51:1e:9a:b4:9a:30:6a:c2:a4:40:4d:05:fd:78:7d:62:b5:40:
         fa:9a:04:e1:f2:f8:a8:cf:9d:6c:00:84:6b:fa:3f:d2:c8:e6:
         ad:a3:fa:77:f8:8a:ec:a8:41:e1:5a:14:d7:69:9c:4a:49:d2:
         a2:a3:2d:14:75:b9:3e:b5:bb:49:83:91:da:65:11:7d:e4:4f:
         e8:ea:9a:0f:43:de:70:f9:78:10:17:45:5d:a3:8b:63:b0:98:
         05:8e:e3:81:88:5c:e2:d6:7f:14:65:a2:e6:30:ff:e4:08:ca:
         be:c0:9e:c6:b0:e0:4d:8a:f3:8f:0d:e8:7a:bf:d1:79:25:77:
         03:7a:b9:95:9b:5c:e4:0f:20:f3:ca:25:18:5f:87:7d:84:58:
         cf:85:08:4d:6c:f0:e7:61:9b:5b:dd:8f:26:15:0e:54:97:0a:
         9f:ea:b7:e0:cc:25:1c:62:ee:74:71:21:24:ca:b6:6b:3f:7d:
         78:9a:d3:3f:d0:60:31:b1:93:6e:8c:71:a3:d3:75:23:b0:96:
         81:b7:20:c2:fb:53:4e:31:e7:6e:bc:b5:3d:2a:71:2b:32:1a:
         1f:f6:e1:4c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE1JKmmZOu+Q+2VezeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmZkYTZjNWMtOWMxMS00Zjc3LTgxMjgtNzFlMDdkNDY4
MDZjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZGExZmFkNmYtMTczOS00N2NmLWFjODEtZjlkNWE3ZmRkNmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLOGjDBTOmU7RnCcXRG6fQTPegpmuCL1qfVQ
2W4A5762kxSfkEB4arc+ZRqj2DA0EI3ed4TW6LkGzTkBOCdXEKRXasnnmSnpwrMl
d6xcDwNFN99g38uQf/CTAXnJRkh7UnIgqVsDbZAfPEkIaz634SqJV7mDP+lRFU6V
4BkX8LO0T/ID4bf1er8pa1CSOFRZFR+iHjNalVkzAH9xyqEx6PiP5FW0FuXl3zqs
OkKBWSX7wlwHcV9ciOwirHHwqslVbGby+Ul9xGXFAKp4u/TTLczD2mKBPcbMoFtF
kOvqle2oRXOznz1r+rfX+TpJXe32LRVzCG4if4uaL7lodwz8XQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFEW60m0aTuGiuILjzYaoDnhXgcBrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ZmRh
NmM1Yy05YzExLTRmNzctODEyOC03MWUwN2Q0NjgwNmMvMmIwZGQ3NDktYjNmNC0z
YmJlLWE2YmEtODkyYzFhMWU4NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmZkYTZjNWMtOWMxMS00Zjc3LTgx
MjgtNzFlMDdkNDY4MDZjLzZmZGE2YzVjLTljMTEtNGY3Ny04MTI4LTcxZTA3ZDQ2
ODA2Yy5jcmwwHwYDVR0jBBgwFoAUNFLsdWWccaD3TZP9irsFf2PxrNkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82ZmRhNmM1Yy05YzExLTRmNzctODEyOC03MWUw
N2Q0NjgwNmMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwNIQMA8E
AgACMAkDBwAmIABEQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAu2JcvTtS7kFWvqX7e4uUzE2ZguRFr0ls
vEsiH6Vdn3w3n+CcUR6atJowasKkQE0F/Xh9YrVA+poE4fL4qM+dbACEa/o/0sjm
raP6d/iK7KhB4VoU12mcSknSoqMtFHW5PrW7SYOR2mURfeRP6OqaD0PecPl4EBdF
XaOLY7CYBY7jgYhc4tZ/FGWi5jD/5AjKvsCexrDgTYrzjw3oer/ReSV3A3q5lZtc
5A8g88olGF+HfYRYz4UITWzw52GbW92PJhUOVJcKn+q34MwlHGLudHEhJMq2az99
eJrTP9BgMbGTboxxo9N1I7CWgbcgwvtTTjHnbry1PSpxKzIaH/bhTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:44 2026 by rpki-client