Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa
File:                     037ef550-7968-3868-af23-a6bf0dbbed55.roa (raw, json)
Hash identifier:          gSGWQc+dl8VvbRxP/NxHCgAh2nVmUnbhLVFnbBa1h78=
Subject key identifier:   66:AD:3E:40:C4:9D:C9:E2:A1:82:09:B9:AB:7A:C9:CA:31:75:D4:4C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CA32C727A2F0ABC97679AD5E0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        68.170.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:72:7a:2f:0a:bc:97:67:9a:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=fa223cf4-30ee-4083-9e3d-4bf9127c798a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:a8:d1:86:61:ac:d9:e8:57:38:70:0e:ef:
                    8b:9e:3f:dc:70:24:92:73:45:05:4a:69:e4:ef:68:
                    b0:f3:c7:aa:42:37:09:e0:36:8b:0a:1b:e9:22:2c:
                    b6:62:c0:0c:34:4a:23:f1:80:71:53:de:04:0a:27:
                    73:b6:1b:5b:b8:71:86:c6:67:c5:d2:60:93:a7:59:
                    6d:1a:b1:08:00:d3:93:17:32:e4:a6:8a:1a:7f:04:
                    fc:f0:a9:03:4a:89:88:42:13:27:2e:9d:f3:32:b7:
                    07:66:ee:dc:8a:09:4f:e6:0f:f1:fe:58:a0:86:a2:
                    0c:cf:f6:7c:2d:16:de:5b:cb:bc:ca:fc:55:05:ab:
                    83:5f:98:64:b5:56:e2:96:8d:2a:d8:8b:c9:58:88:
                    3e:99:9a:a4:e4:dd:16:53:45:97:70:d5:78:3a:bb:
                    bd:51:29:60:87:f9:5d:67:48:ed:87:78:75:6c:f7:
                    1d:5d:e5:ac:aa:8f:67:22:de:f5:97:09:72:6c:d8:
                    9d:66:28:87:83:02:29:2f:ad:1e:dd:13:65:8e:ac:
                    3f:9a:ff:48:1b:eb:8e:65:93:ed:54:3f:72:e3:87:
                    7d:dc:35:9e:71:13:c6:82:cb:1d:b4:32:2d:ff:c1:
                    99:8c:31:2a:59:4d:39:bf:5b:5a:b9:fb:b9:45:82:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AD:3E:40:C4:9D:C9:E2:A1:82:09:B9:AB:7A:C9:CA:31:75:D4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a2:41:47:ec:37:89:cf:32:ab:a5:44:88:fb:27:c5:9f:f0:
         df:90:ca:91:2e:e2:3b:e9:7a:1d:7a:0d:c9:af:b4:06:aa:0c:
         a5:dc:e4:54:bb:01:05:99:b6:b1:86:c1:b3:bf:ae:d1:44:fc:
         b5:e5:ba:38:7c:87:3d:5e:4a:31:83:32:67:9b:dc:89:37:ce:
         f1:d0:b8:f9:4c:0f:12:22:c4:f9:7b:04:91:fc:46:fd:05:7b:
         79:62:7d:bd:8e:7d:6c:16:83:22:33:b5:cb:9f:9c:c6:cf:ad:
         b2:2e:4c:9d:b0:96:3d:9d:c9:3d:5e:28:0c:dd:3a:0a:01:be:
         c7:b4:af:05:e7:6f:5e:cd:3d:02:91:21:d8:0a:05:b5:f8:b0:
         33:70:79:48:df:fc:9b:56:f1:39:49:e8:63:11:92:d5:57:c5:
         ba:6a:6a:4d:1a:35:d6:a7:90:b0:32:3a:60:49:05:af:fa:f0:
         41:35:23:ad:c0:2b:ad:0f:9b:2c:50:b8:1b:97:08:79:95:84:
         a9:af:4b:f7:5b:72:e0:36:7f:8c:d1:44:17:0d:28:f6:c1:f0:
         62:fb:2f:70:e0:d4:79:dc:5c:ae:61:b6:5d:ca:b9:c8:f7:a9:
         b9:55:41:b7:b1:1d:1c:12:a9:14:8f:11:6a:da:bf:18:4c:b6:
         f9:d3:7b:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLHJ6Lwq8l2ea1eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZmEyMjNjZjQtMzBlZS00MDgzLTllM2QtNGJmOTEyN2M3OThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGCo0YZhrNnoVzhwDu+Lnj/ccCSSc0UFSmnk
72iw88eqQjcJ4DaLChvpIiy2YsAMNEoj8YBxU94ECidzthtbuHGGxmfF0mCTp1lt
GrEIANOTFzLkpooafwT88KkDSomIQhMnLp3zMrcHZu7ciglP5g/x/lighqIMz/Z8
LRbeW8u8yvxVBauDX5hktVbilo0q2IvJWIg+mZqk5N0WU0WXcNV4Oru9USlgh/ld
Z0jth3h1bPcdXeWsqo9nIt71lwlybNidZiiHgwIpL60e3RNljqw/mv9IG+uOZZPt
VD9y44d93DWecRPGgssdtDIt/8GZjDEqWU05v1taufu5RYII7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGatPkDEncnioYIJuat6ycoxddRMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMDM3ZWY1NTAtNzk2OC0z
ODY4LWFmMjMtYTZiZjBkYmJlZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGiQUfsN4nPMqulRIj7J8Wf8N+QypEu4jvpeh16DcmvtAaqDKXc5FS7
AQWZtrGGwbO/rtFE/LXlujh8hz1eSjGDMmeb3Ik3zvHQuPlMDxIixPl7BJH8Rv0F
e3lifb2OfWwWgyIztcufnMbPrbIuTJ2wlj2dyT1eKAzdOgoBvse0rwXnb17NPQKR
IdgKBbX4sDNweUjf/JtW8TlJ6GMRktVXxbpqak0aNdankLAyOmBJBa/68EE1I63A
K60PmyxQuBuXCHmVhKmvS/dbcuA2f4zRRBcNKPbB8GL7L3Dg1HncXK5htl3Kucj3
qblVQbexHRwSqRSPEWravxhMtvnTewg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:11 2026 by rpki-client