Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/f00986fb-3159-3a91-959a-3252371dfa36.roa
File:                     f00986fb-3159-3a91-959a-3252371dfa36.roa (raw, json)
Hash identifier:          rpks7D0kMC4Ry/Sy95maMohiDRHrQb6n9oxBUy7nITk=
Subject key identifier:   F4:43:90:12:47:5B:52:58:AA:50:20:E9:6C:53:0F:4B:5F:EA:24:95
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584DE9B0707F5BFF75CE0F108000
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/f00986fb-3159-3a91-959a-3252371dfa36.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     22351
IP address blocks:        216.250.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:70:7f:5b:ff:75:ce:0f:10:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=fcf96e7f-de87-4eb5-aafa-d1466ef4b67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:35:38:e4:8f:e8:eb:dc:b7:0e:a0:d8:58:56:
                    a2:66:1b:4c:9c:64:f7:2a:e3:1e:d5:5a:e7:24:17:
                    85:f6:41:40:b4:3f:29:cf:5f:a4:6f:6f:30:a4:1c:
                    d1:62:4f:9c:bf:27:47:3f:64:44:04:19:77:df:74:
                    6e:20:0a:c9:d2:36:b9:55:9d:44:ca:2d:73:dd:53:
                    96:d4:c5:6e:50:85:a8:ab:1f:81:e5:ff:b4:42:0a:
                    a1:bd:33:5f:e0:d8:bd:98:d2:be:5b:24:b4:11:d8:
                    ae:54:16:30:14:46:1f:65:c1:42:34:58:43:d5:15:
                    fe:47:7b:86:5c:73:a1:f8:27:47:25:88:65:e0:22:
                    e0:1c:2f:0f:14:f9:5e:a6:0f:10:b9:f2:1c:a6:87:
                    c3:c9:6e:ab:e7:8d:b5:b4:14:78:97:29:20:6d:f5:
                    b6:ce:94:05:b9:98:60:5b:57:9b:d5:4b:8a:39:75:
                    de:2d:17:dd:e4:0c:36:35:4c:14:8a:ea:17:4a:a4:
                    50:52:a4:b1:f9:5b:84:11:92:07:5b:35:53:7a:b3:
                    b3:f1:f9:32:bd:9f:a1:0e:73:ba:cd:0c:79:6d:aa:
                    9b:29:8f:12:97:22:08:9c:3e:c3:e8:f8:e9:ce:c6:
                    d9:57:6e:4a:b4:ae:14:1f:f8:9e:67:83:48:fe:54:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:90:12:47:5B:52:58:AA:50:20:E9:6C:53:0F:4B:5F:EA:24:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/f00986fb-3159-3a91-959a-3252371dfa36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:c8:5f:f2:1a:c5:dc:51:40:b8:77:82:34:fa:e6:7c:f3:06:
         4a:85:d5:1f:4f:50:7c:15:75:8e:89:3d:7c:28:28:3c:4a:e2:
         ba:46:cc:9d:f7:dc:dc:1f:aa:5f:e0:b2:58:7a:95:06:59:da:
         38:a6:a1:01:c6:81:71:f2:40:01:86:59:e2:27:34:e4:e0:fd:
         34:9a:00:14:ea:47:6d:97:87:7f:bf:64:4c:28:a7:f5:97:d1:
         37:a9:a9:3f:6f:33:5c:b7:5b:a0:76:ee:41:00:bc:97:a1:1f:
         19:82:9f:ce:e9:33:c6:dd:26:4c:41:3c:67:e9:89:fc:08:00:
         43:28:e8:06:02:0d:18:38:39:c6:19:40:88:3f:ba:c6:95:4f:
         f4:6a:0a:3b:a5:3c:1c:10:e0:2d:0d:17:83:54:39:0f:ef:3a:
         09:b4:6b:6b:df:ac:a1:e8:e1:36:ab:95:62:5f:8b:92:3c:c4:
         67:e7:8b:d3:8d:b0:11:6c:9a:51:53:58:4b:5a:f5:8d:42:77:
         00:b9:ad:c0:f7:c9:af:0a:4a:25:c2:dc:0a:71:0b:9b:56:96:
         e9:c5:0d:3a:ba:d4:ad:39:b0:d3:87:be:69:9c:87:55:3f:4a:
         da:b1:fd:1a:ca:20:ba:2f:8c:3e:c7:12:fa:69:01:99:09:96:
         9a:81:b5:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psHB/W/91zg8QgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh
YTQ0MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZmNmOTZlN2YtZGU4Ny00ZWI1LWFhZmEtZDE0NjZlZjRiNjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjU45I/o69y3DqDYWFaiZhtMnGT3KuMe1Vrn
JBeF9kFAtD8pz1+kb28wpBzRYk+cvydHP2REBBl333RuIArJ0ja5VZ1Eyi1z3VOW
1MVuUIWoqx+B5f+0QgqhvTNf4Ni9mNK+WyS0EdiuVBYwFEYfZcFCNFhD1RX+R3uG
XHOh+CdHJYhl4CLgHC8PFPlepg8QufIcpofDyW6r5421tBR4lykgbfW2zpQFuZhg
W1eb1UuKOXXeLRfd5Aw2NUwUiuoXSqRQUqSx+VuEEZIHWzVTerOz8fkyvZ+hDnO6
zQx5baqbKY8SlyIInD7D6PjpzsbZV25KtK4UH/ieZ4NI/lSuIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRDkBJHW1JYqlAg6WxTD0tf6iSVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi
ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvZjAwOTg2ZmItMzE1OS0z
YTkxLTk1OWEtMzI1MjM3MWRmYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz
YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4
YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz
NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PrTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMLIX/IaxdxRQLh3gjT65nzzBkqF1R9PUHwVdY6JPXwoKDxK4rpGzJ33
3Nwfql/gslh6lQZZ2jimoQHGgXHyQAGGWeInNOTg/TSaABTqR22Xh3+/ZEwop/WX
0TepqT9vM1y3W6B27kEAvJehHxmCn87pM8bdJkxBPGfpifwIAEMo6AYCDRg4OcYZ
QIg/usaVT/RqCjulPBwQ4C0NF4NUOQ/vOgm0a2vfrKHo4TarlWJfi5I8xGfni9ON
sBFsmlFTWEta9Y1CdwC5rcD3ya8KSiXC3ApxC5tWlunFDTq61K05sNOHvmmch1U/
Stqx/RrKILovjD7HEvppAZkJlpqBtXU=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:52:33 2026 by rpki-client