Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa
File:                     ae68d36c-45dd-3d00-aef2-523dceb603d4.roa (raw, json)
Hash identifier:          u2B7bfd//j6RgcKygoBCDWDn3Qtrth6/+3gc5/Nc52Q=
Subject key identifier:   6E:12:AE:C1:16:F7:A0:3F:29:FF:74:65:97:D2:91:15:A4:E4:5E:92
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CCD0C9B6C73E97F221F67DA10
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        68.170.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:9b:6c:73:e9:7f:22:1f:67:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=6c4f0339-16de-411d-8d66-1a379165b62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:58:aa:59:7f:fb:a3:2b:fc:95:3c:cf:60:
                    a6:4a:47:e2:6f:d4:79:7a:b6:c9:d4:27:b9:99:db:
                    ad:f1:4e:20:09:62:2a:3d:fb:6d:49:9e:38:96:cb:
                    3a:e0:03:a3:d5:c9:bd:b7:ae:66:3d:b6:56:18:25:
                    61:be:f8:a1:50:d6:75:39:65:12:6a:19:d9:56:dd:
                    42:78:ea:43:b6:9c:9d:c1:16:3a:0d:45:10:4a:f9:
                    82:96:f7:5b:9a:5b:3b:35:01:09:12:e3:04:60:e6:
                    a8:89:00:81:5e:ee:ab:06:b8:b2:35:20:8e:fb:f1:
                    8d:63:77:f4:d3:27:a2:4d:8d:3f:f7:95:fa:35:a0:
                    f6:20:e8:5a:d5:26:a7:87:e0:ca:27:cb:df:16:42:
                    a6:3d:a5:da:1c:b4:7d:23:7e:16:30:84:13:56:42:
                    7e:31:53:2d:cf:75:83:06:e2:45:66:d1:c2:5c:18:
                    99:a0:dc:d3:f7:11:90:46:d7:41:d4:32:da:b2:e1:
                    02:02:5e:33:ec:05:d1:15:a7:80:4e:c4:c6:55:4c:
                    7f:2c:e9:3e:40:6f:41:b3:f1:fa:47:0f:42:d2:89:
                    6c:93:dd:d6:15:d5:be:62:f2:39:8f:d8:53:a6:e5:
                    50:38:46:43:41:4e:ed:f0:72:e3:0c:29:d5:60:a2:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:12:AE:C1:16:F7:A0:3F:29:FF:74:65:97:D2:91:15:A4:E4:5E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ae68d36c-45dd-3d00-aef2-523dceb603d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7c:9b:14:25:0a:8f:6c:80:a4:62:9c:f1:9a:38:d5:2d:43:
         35:b8:a1:6d:35:15:66:61:b3:72:15:be:52:e8:72:fc:bb:d7:
         08:f3:e8:f5:f8:1a:7f:ca:65:2e:11:bd:4e:7d:66:cd:b0:cc:
         43:59:6f:92:a1:dd:e2:fd:7d:ee:8c:a8:7a:da:71:b3:1d:34:
         d8:7d:39:d6:c2:fb:80:c9:f2:4d:31:52:67:20:c1:8b:14:89:
         50:ac:cd:d3:14:e9:09:a3:f7:33:7b:e7:cc:e0:49:5c:f4:b0:
         24:a8:d2:45:25:2e:0a:ec:fb:66:46:fd:5c:9b:9d:31:22:bb:
         90:4a:d6:c6:d6:87:0c:dd:f2:71:85:63:14:cb:1f:cb:1c:b6:
         5b:f4:8b:0f:a8:fc:dd:f0:a5:5e:a9:d1:1f:4f:91:48:48:1e:
         c0:6c:2a:cc:23:b0:b1:cf:8e:a7:f0:9c:08:63:49:7d:ed:03:
         29:23:bc:7e:30:b5:e0:06:c7:df:4e:68:c4:df:76:a2:19:7d:
         a8:62:6a:83:38:94:b3:1f:e8:8c:86:80:80:55:52:00:4d:d4:
         f9:84:5b:79:ef:95:9d:a2:62:68:c6:d3:f1:08:c3:94:f4:4a:
         af:f6:2e:79:c4:0b:a9:52:c2:e5:d9:a6:81:9a:4a:23:1b:b2:
         cc:d0:86:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJtsc+l/Ih9n2hAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NmM0ZjAzMzktMTZkZS00MTFkLThkNjYtMWEzNzkxNjViNjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5RYqll/+6Mr/JU8z2CmSkfib9R5erbJ1Ce5
mdut8U4gCWIqPfttSZ44lss64AOj1cm9t65mPbZWGCVhvvihUNZ1OWUSahnZVt1C
eOpDtpydwRY6DUUQSvmClvdbmls7NQEJEuMEYOaoiQCBXu6rBriyNSCO+/GNY3f0
0yeiTY0/95X6NaD2IOha1Sanh+DKJ8vfFkKmPaXaHLR9I34WMIQTVkJ+MVMtz3WD
BuJFZtHCXBiZoNzT9xGQRtdB1DLasuECAl4z7AXRFaeATsTGVUx/LOk+QG9Bs/H6
Rw9C0olsk93WFdW+YvI5j9hTpuVQOEZDQU7t8HLjDCnVYKIHTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4SrsEW96A/Kf90ZZfSkRWk5F6SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYWU2OGQzNmMtNDVkZC0z
ZDAwLWFlZjItNTIzZGNlYjYwM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGB8mxQlCo9sgKRinPGaONUtQzW4oW01FWZhs3IVvlLocvy71wjz6PX4
Gn/KZS4RvU59Zs2wzENZb5Kh3eL9fe6MqHracbMdNNh9OdbC+4DJ8k0xUmcgwYsU
iVCszdMU6Qmj9zN758zgSVz0sCSo0kUlLgrs+2ZG/VybnTEiu5BK1sbWhwzd8nGF
YxTLH8sctlv0iw+o/N3wpV6p0R9PkUhIHsBsKswjsLHPjqfwnAhjSX3tAykjvH4w
teAGx99OaMTfdqIZfahiaoM4lLMf6IyGgIBVUgBN1PmEW3nvlZ2iYmjG0/EIw5T0
Sq/2LnnEC6lSwuXZpoGaSiMbsszQhtY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:51 2026 by rpki-client