Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa
File:                     b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa (raw, json)
Hash identifier:          NHSD3JLrkT6X6AmLdNtx7OELRoDWW7EMvyrndFGOEFo=
Subject key identifier:   4C:BB:A7:8A:4B:A8:84:A4:CB:68:30:DA:0E:29:5C:8E:60:07:89:5A
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584C5501220FBB4E55D591A29B00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa
Signing time:             Sun 28 Dec 2025 02:00:30 +0000
ROA not before:           Sun 28 Dec 2025 02:00:30 +0000
ROA not after:            Sat 28 Mar 2026 01:00:30 +0000
asID:                     45241
IP address blocks:        198.208.209.0/24 maxlen: 24
                          198.208.228.0/24 maxlen: 24
                          198.208.230.0/24 maxlen: 24
                          198.208.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:55:01:22:0f:bb:4e:55:d5:91:a2:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Dec 28 02:00:30 2025 GMT
            Not After : Mar 28 01:00:30 2026 GMT
        Subject: CN=8d4b1114-c282-486a-9df4-118e1e9ad596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:35:44:9e:1f:bf:4a:d2:40:8b:6e:51:6b:
                    fd:95:1d:0d:a8:53:91:38:78:54:3e:b8:09:00:59:
                    e9:00:53:35:28:a8:34:22:4c:aa:2c:d5:fc:5e:86:
                    33:a5:f0:a4:3b:30:fa:e7:f3:7f:a5:83:d6:84:da:
                    f2:87:f3:19:98:a9:ee:09:ab:a5:c6:91:1a:fb:14:
                    db:86:34:94:00:bd:0c:ec:f4:09:00:9a:1e:24:f7:
                    ec:69:d0:84:a0:2d:8d:53:0a:76:3f:16:0e:b6:92:
                    e3:bd:a3:95:bf:84:46:e9:31:35:d3:5d:ff:6a:e5:
                    a6:97:fe:3c:40:83:47:d4:09:17:1d:57:f0:7c:10:
                    e1:52:9f:a0:f3:1d:6a:69:0f:55:0c:63:ab:60:5c:
                    54:d1:41:4a:92:4b:dc:72:09:ec:4b:72:30:ba:3a:
                    b6:6e:bc:16:e6:62:d9:85:7e:9b:c1:17:0b:e6:2b:
                    01:36:3a:fb:2e:63:ec:94:49:fc:42:3a:37:e5:fd:
                    f4:0e:92:21:1d:e8:35:b2:f1:b0:a0:7f:c7:37:4f:
                    9e:7f:82:7b:2e:b0:bc:cf:48:f2:22:cf:c1:1e:16:
                    bf:0c:f1:42:80:74:a9:a3:fc:07:a4:20:2e:b5:6e:
                    91:6c:2e:ca:d6:ab:27:84:94:ed:b7:cc:1a:e8:bd:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:A7:8A:4B:A8:84:A4:CB:68:30:DA:0E:29:5C:8E:60:07:89:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.209.0/24
                  198.208.228.0/24
                  198.208.230.0/24
                  198.208.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:75:ce:af:e7:0c:e3:f8:86:b9:40:86:fc:96:83:9c:17:
         ab:31:df:58:27:ef:24:b7:c7:63:d9:7b:1c:48:30:bb:b3:64:
         37:cf:95:1e:bb:71:90:3e:60:0e:c7:bd:9b:b9:0d:35:54:46:
         2b:53:6e:78:65:ff:1c:56:3e:6b:28:2d:4c:7f:f3:b6:af:7b:
         3c:98:7f:ee:a5:37:3d:2d:22:cd:76:56:6c:e2:c3:11:20:e1:
         d3:24:c9:44:f1:30:ae:c6:59:d1:cf:ea:01:92:59:33:4b:3f:
         e6:c5:fb:81:05:27:1c:77:72:26:10:8d:3b:63:ab:28:12:af:
         4e:b8:1d:3f:ce:80:a0:f9:17:70:fd:91:7b:2f:b2:15:9d:45:
         8c:23:02:b2:2b:6f:6c:eb:ed:14:d4:b1:5f:3f:33:e3:da:1b:
         35:8a:37:cf:66:85:fb:83:14:cf:cc:c9:04:bb:9c:0a:86:b1:
         17:05:71:99:60:36:be:9a:d6:16:b6:24:92:c3:2c:3a:81:dc:
         2d:ea:c5:85:be:48:95:4c:0f:72:88:d4:bf:d9:6a:ba:a4:d4:
         46:0c:2e:98:48:9c:c6:5f:c8:a2:27:72:ff:3e:af:93:c4:83:
         dc:d5:a7:43:22:ad:03:da:46:d3:2c:79:51:0a:f5:32:62:41:
         d2:37:fe:16
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWExVASIPu05V1ZGimwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk
OGQ0YjExMTQtYzI4Mi00ODZhLTlkZjQtMTE4ZTFlOWFkNTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSU1RJ4fv0rSQItuUWv9lR0NqFOROHhUPrgJ
AFnpAFM1KKg0IkyqLNX8XoYzpfCkOzD65/N/pYPWhNryh/MZmKnuCaulxpEa+xTb
hjSUAL0M7PQJAJoeJPfsadCEoC2NUwp2PxYOtpLjvaOVv4RG6TE1013/auWml/48
QINH1AkXHVfwfBDhUp+g8x1qaQ9VDGOrYFxU0UFKkkvccgnsS3Iwujq2brwW5mLZ
hX6bwRcL5isBNjr7LmPslEn8Qjo35f30DpIhHeg1svGwoH/HN0+ef4J7LrC8z0jy
Is/BHha/DPFCgHSpo/wHpCAutW6RbC7K1qsnhJTtt8wa6L1AyQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFEy7p4pLqISky2gw2g4pXI5gB4laMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvYjZmMTFmMDktZTUwNS0z
NTM0LThjZTAtN2FlOWIyNDRmNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAxtDRAwQA
xtDkAwQAxtDmAwQAxtD/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABEqdc6v5wzj+Ia5QIb8loOcF6sx31gn
7yS3x2PZexxIMLuzZDfPlR67cZA+YA7HvZu5DTVURitTbnhl/xxWPmsoLUx/87av
ezyYf+6lNz0tIs12VmziwxEg4dMkyUTxMK7GWdHP6gGSWTNLP+bF+4EFJxx3ciYQ
jTtjqygSr064HT/OgKD5F3D9kXsvshWdRYwjArIrb2zr7RTUsV8/M+PaGzWKN89m
hfuDFM/MyQS7nAqGsRcFcZlgNr6a1ha2JJLDLDqB3C3qxYW+SJVMD3KI1L/Zarqk
1EYMLphInMZfyKIncv8+r5PEg9zVp0MirQPaRtMseVEK9TJiQdI3/hY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:18 2026 by rpki-client