Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/207e5e7a-256c-3abd-b77c-8241b79acf26.roa
File:                     207e5e7a-256c-3abd-b77c-8241b79acf26.roa (raw, json)
Hash identifier:          HpsUCc1IY7hE8Yf0tDp0gj+eiJTaPn769OhYB+lHex0=
Subject key identifier:   60:02:36:C0:0C:B8:38:9C:F4:A6:DE:9D:C1:94:7D:4A:4B:10:C3:74
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D60E5029D8B0F348C42C26D20
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/207e5e7a-256c-3abd-b77c-8241b79acf26.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        192.119.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:02:9d:8b:0f:34:8c:42:c2:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=131d4062-755f-4a43-bb2a-3dfbc58d6330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:98:ba:f6:f7:1d:72:dd:74:75:6c:aa:37:
                    ab:2c:f6:1a:df:4a:4d:4c:8a:67:da:25:d3:2a:59:
                    49:69:bd:07:c8:84:89:da:20:3e:89:d9:de:f5:61:
                    47:6c:da:6f:c9:0c:c2:19:3e:f6:2d:f4:b3:03:a9:
                    c6:da:bf:b8:35:5c:e2:18:a3:9e:6f:69:b4:ca:93:
                    82:6f:6d:eb:b1:37:4d:d9:16:cc:52:9d:1c:5f:94:
                    ca:9f:3b:06:45:a5:d1:92:4d:f0:64:7c:3f:43:2b:
                    6f:97:6e:f8:01:a2:5c:91:e1:65:91:68:4f:ec:b0:
                    13:d0:09:23:42:33:39:01:dd:9d:7e:d3:0a:4b:c3:
                    ae:6c:61:87:97:60:a6:29:b2:3a:36:9a:87:63:41:
                    ee:c9:70:1e:d0:5e:b7:1e:42:6e:d5:dc:b7:60:4a:
                    e9:bd:9d:8c:6c:45:01:54:9f:ec:d9:dc:33:2d:29:
                    42:6b:cb:b2:a9:c0:e8:c0:c1:d4:1f:51:20:4a:3a:
                    5f:b0:fa:cf:18:cc:7e:f3:0a:a1:11:cf:16:4f:d8:
                    ac:89:6a:b4:4a:0e:c7:a0:de:a6:b3:2e:93:10:86:
                    c4:bb:17:66:b9:1a:70:57:ec:d1:3c:4f:0f:9d:23:
                    43:37:9e:92:03:ba:9b:85:89:9f:f7:5e:7b:37:03:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:02:36:C0:0C:B8:38:9C:F4:A6:DE:9D:C1:94:7D:4A:4B:10:C3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/207e5e7a-256c-3abd-b77c-8241b79acf26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:45:99:3f:fb:4d:a9:85:cc:aa:4d:4d:51:78:68:8c:cf:6c:
         40:0c:42:70:6f:11:c5:f8:17:6a:81:85:95:2e:ed:66:91:a7:
         10:53:b0:60:ff:8f:be:21:b8:f4:32:68:fd:d9:3e:dc:e9:a8:
         98:9e:4a:b6:12:3d:cb:d3:09:6c:1c:5c:cc:0a:04:a0:fb:f4:
         7a:2d:db:7c:98:21:4f:37:25:0c:1d:d6:6b:a1:05:a6:dd:d1:
         f4:9d:fb:18:7a:7b:bb:dd:25:56:81:73:5a:7b:48:55:49:4c:
         1c:f3:cf:4b:fc:cc:a3:fd:a2:da:62:fe:ef:2f:77:15:0b:9b:
         12:85:31:7c:f2:08:0b:35:75:b4:ed:6d:6b:15:67:ae:e1:33:
         cb:fd:01:17:88:00:4d:ee:b1:33:67:96:f3:61:4d:ec:d6:bd:
         70:7e:9a:65:1e:09:f5:9a:d3:c9:32:f1:f7:a8:e1:39:e3:31:
         34:2a:01:6a:31:a3:bb:9c:6f:18:9d:c0:85:a1:72:87:15:e3:
         a0:21:9d:bb:9f:42:0a:49:17:bc:f4:81:27:f4:b5:9f:03:c4:
         72:0a:3d:23:d4:7d:d4:c9:6f:ab:53:3b:f1:fe:81:41:46:83:
         77:33:32:6e:68:2c:94:e4:8b:ec:24:17:98:2f:81:47:e8:27:
         69:f5:ee:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QKdiw80jELCbSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
MTMxZDQwNjItNzU1Zi00YTQzLWJiMmEtM2RmYmM1OGQ2MzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNmYuvb3HXLddHVsqjerLPYa30pNTIpn2iXT
KllJab0HyISJ2iA+idne9WFHbNpvyQzCGT72LfSzA6nG2r+4NVziGKOeb2m0ypOC
b23rsTdN2RbMUp0cX5TKnzsGRaXRkk3wZHw/Qytvl274AaJckeFlkWhP7LAT0Akj
QjM5Ad2dftMKS8OubGGHl2CmKbI6NpqHY0HuyXAe0F63HkJu1dy3YErpvZ2MbEUB
VJ/s2dwzLSlCa8uyqcDowMHUH1EgSjpfsPrPGMx+8wqhEc8WT9isiWq0Sg7HoN6m
sy6TEIbEuxdmuRpwV+zRPE8PnSNDN56SA7qbhYmf9157NwPu5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGACNsAMuDic9KbencGUfUpLEMN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjA3ZTVlN2EtMjU2Yy0z
YWJkLWI3N2MtODI0MWI3OWFjZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRFmT/7TamFzKpNTVF4aIzPbEAMQnBvEcX4F2qBhZUu7WaRpxBTsGD/
j74huPQyaP3ZPtzpqJieSrYSPcvTCWwcXMwKBKD79Hot23yYIU83JQwd1muhBabd
0fSd+xh6e7vdJVaBc1p7SFVJTBzzz0v8zKP9otpi/u8vdxULmxKFMXzyCAs1dbTt
bWsVZ67hM8v9AReIAE3usTNnlvNhTezWvXB+mmUeCfWa08ky8feo4TnjMTQqAWox
o7ucbxidwIWhcocV46AhnbufQgpJF7z0gSf0tZ8DxHIKPSPUfdTJb6tTO/H+gUFG
g3czMm5oLJTki+wkF5gvgUfoJ2n17nw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:32 2026 by rpki-client