Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
File:                     f4f0a900-b310-382d-b883-64f958388735.roa (raw, json)
Hash identifier:          Ww0tG7jsI5Xh/KBKMfrn5W7NSbgZVMfRHWq3HLCG4Ns=
Subject key identifier:   6C:51:4E:05:F2:95:26:FA:DE:21:BE:BB:13:16:62:CC:0D:03:76:AF
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CA32C73BE61DED0A66E890280
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        199.166.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:73:be:61:de:d0:a6:6e:89:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=327576ab-a32d-4431-ac77-fd1d6bd59bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:f4:17:18:ef:af:83:42:3b:61:5c:4e:60:
                    15:b1:85:62:b3:99:dd:dd:d4:de:ba:1f:be:85:31:
                    3a:59:25:ac:39:48:e4:5f:03:fd:b4:04:ec:6a:78:
                    2a:22:12:c1:ee:f9:1c:db:97:5e:a3:1b:bb:3b:c9:
                    87:62:f9:56:00:44:00:4f:c0:a7:77:77:cd:ec:62:
                    73:30:c3:ff:d7:b3:e7:65:9f:6b:0c:44:70:43:d9:
                    42:ec:64:25:6e:6b:ac:b6:94:ef:c0:df:7f:c4:d5:
                    5e:19:48:b0:4d:15:cf:17:97:44:84:64:80:23:4f:
                    54:ea:2a:2a:50:6b:f9:7c:6d:48:67:ed:40:ff:79:
                    69:95:ce:6f:db:2b:8f:ea:4e:49:0d:23:de:1d:50:
                    e6:4c:11:97:4d:37:bd:f4:51:90:37:be:50:4b:8f:
                    d2:d6:4d:08:60:80:fe:b7:16:86:4f:45:df:3f:86:
                    28:e0:2e:41:77:81:ee:93:59:f0:5c:b1:b6:7d:24:
                    4f:83:7d:2d:19:99:65:85:da:ce:7c:79:5f:ed:19:
                    97:aa:a5:bb:58:0c:a9:11:7e:31:f2:35:39:e1:30:
                    86:04:12:4c:a2:14:c0:24:c6:9d:60:15:9b:86:7e:
                    90:0a:3e:c4:92:ab:1a:9d:9a:bd:56:fe:c0:93:68:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:51:4E:05:F2:95:26:FA:DE:21:BE:BB:13:16:62:CC:0D:03:76:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f4f0a900-b310-382d-b883-64f958388735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:09:ca:7a:19:09:71:a7:1e:54:72:ad:79:15:73:ee:14:0d:
         08:e8:d9:84:ca:30:57:ca:3b:f1:d2:77:67:ca:14:5d:09:e6:
         ca:4a:ae:fa:37:05:55:8c:16:1b:48:0d:4f:62:40:b9:6f:d8:
         f2:9e:e5:49:3e:b5:75:1d:2f:c0:ac:a8:09:88:52:29:4a:85:
         26:64:b8:aa:92:84:4c:cd:01:2d:3f:35:f2:ee:e1:fe:c6:ee:
         a3:c4:4a:bf:9c:1b:97:17:05:c8:5b:f9:95:cb:20:7c:f2:bc:
         89:84:74:3b:d8:13:2c:e3:7c:90:87:48:71:d3:46:25:49:47:
         71:b6:11:ad:f2:fc:02:26:06:3f:20:73:64:14:d7:83:7b:c1:
         00:28:98:c0:5a:dd:b4:05:71:e7:70:24:ea:2b:f5:2a:16:a9:
         68:b5:14:c0:26:cf:9b:53:02:b6:ab:df:0c:f6:e4:c6:9f:ff:
         c3:43:14:44:a7:8e:18:a2:ed:5e:b1:dc:a1:6d:9e:31:d5:74:
         71:a8:b0:e7:a3:5b:08:77:81:83:5e:89:0c:94:74:63:87:8d:
         a7:b9:76:e4:47:f5:40:8a:be:df:7b:be:99:8e:77:8d:38:a5:
         f9:de:20:f4:dd:c3:c5:c3:c3:c6:e8:fd:04:7a:d8:74:42:26:
         74:44:b4:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLHO+Yd7Qpm6JAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MzI3NTc2YWItYTMyZC00NDMxLWFjNzctZmQxZDZiZDU5YmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTD0Fxjvr4NCO2FcTmAVsYVis5nd3dTeuh++
hTE6WSWsOUjkXwP9tATsangqIhLB7vkc25deoxu7O8mHYvlWAEQAT8Cnd3fN7GJz
MMP/17PnZZ9rDERwQ9lC7GQlbmustpTvwN9/xNVeGUiwTRXPF5dEhGSAI09U6ioq
UGv5fG1IZ+1A/3lplc5v2yuP6k5JDSPeHVDmTBGXTTe99FGQN75QS4/S1k0IYID+
txaGT0XfP4Yo4C5Bd4Huk1nwXLG2fSRPg30tGZllhdrOfHlf7RmXqqW7WAypEX4x
8jU54TCGBBJMohTAJMadYBWbhn6QCj7EkqsanZq9Vv7Ak2gd0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxRTgXylSb63iG+uxMWYswNA3avMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvZjRmMGE5MDAtYjMxMC0z
ODJkLWI4ODMtNjRmOTU4Mzg4NzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx6b6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgJynoZCXGnHlRyrXkVc+4UDQjo2YTKMFfKO/HSd2fKFF0J5spKrvo3
BVWMFhtIDU9iQLlv2PKe5Uk+tXUdL8CsqAmIUilKhSZkuKqShEzNAS0/NfLu4f7G
7qPESr+cG5cXBchb+ZXLIHzyvImEdDvYEyzjfJCHSHHTRiVJR3G2Ea3y/AImBj8g
c2QU14N7wQAomMBa3bQFcedwJOor9SoWqWi1FMAmz5tTArar3wz25Maf/8NDFESn
jhii7V6x3KFtnjHVdHGosOejWwh3gYNeiQyUdGOHjae5duRH9UCKvt97vpmOd404
pfneIPTdw8XDw8bo/QR62HRCJnREtIE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:53 2026 by rpki-client