Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/ccfaa14e-0604-3f68-b212-d207126df7b1.roa
File:                     ccfaa14e-0604-3f68-b212-d207126df7b1.roa (raw, json)
Hash identifier:          zZH6o5ioJHeygdwkabTTMuw+fwmrjboPAwtXezGm7cM=
Subject key identifier:   DE:11:A2:74:5F:90:08:4C:7E:68:78:77:13:49:2B:33:C0:B0:22:38
Certificate issuer:       /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7
Certificate serial:       010D0C9F4328584EC7A1BD7D72F6A6F68D467780
Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/ccfaa14e-0604-3f68-b212-d207126df7b1.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     401449
IP address blocks:        142.248.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:bd:7d:72:f6:a6:f6:8d:46:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=fe350e5d-986d-4ad5-9fab-08df07ab4ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:98:0d:3c:03:ee:08:a6:1b:3f:c6:cc:8b:
                    24:3f:0d:74:d9:19:39:7f:cc:57:47:b7:e8:6e:f2:
                    1c:8b:9f:84:ef:f0:09:50:97:a2:35:f3:0a:c4:f7:
                    7d:3d:9d:fb:2b:61:02:94:cb:da:fa:34:5c:05:96:
                    61:06:d7:ca:7e:6b:36:30:4b:71:05:14:61:39:b1:
                    38:b8:fc:77:bc:b6:34:77:a8:88:5b:c0:91:4d:41:
                    ac:bc:ce:bc:bf:57:f2:e7:94:ca:e1:de:77:4a:3d:
                    98:09:2b:ff:a5:c1:2d:36:83:b9:10:e0:40:91:b6:
                    5e:34:fb:8c:cd:fd:06:2c:22:03:12:01:36:33:1b:
                    38:e5:45:5e:9f:19:b7:36:73:3b:91:6f:3c:18:7d:
                    65:fb:3d:03:18:bf:af:d6:1e:de:13:1c:96:57:7c:
                    dd:e6:bc:d5:e9:22:0c:f7:86:af:1c:52:5c:a4:81:
                    4c:7c:e6:9c:d1:fc:05:e6:af:30:36:d2:0e:3f:ec:
                    00:c2:72:13:be:13:bf:90:8e:71:01:6e:ea:3f:a4:
                    9a:3d:53:23:9c:ec:0f:6c:f6:ae:b1:c1:32:41:54:
                    4b:d3:cc:76:5c:7a:a7:29:d5:a5:87:04:d9:bf:1d:
                    d8:ed:c0:9b:11:8c:a2:8f:20:17:22:b0:50:a2:60:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:11:A2:74:5F:90:08:4C:7E:68:78:77:13:49:2B:33:C0:B0:22:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/ccfaa14e-0604-3f68-b212-d207126df7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl

            X509v3 Authority Key Identifier:
                keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:ec:20:be:7b:01:6e:e3:56:7b:71:73:28:d3:4a:4b:d1:c6:
         54:a7:30:ef:71:2b:2f:18:02:2b:90:1a:1b:4f:d0:b2:f6:6f:
         88:9a:17:05:79:6d:95:51:82:0e:96:5a:c7:cf:53:4a:68:41:
         98:75:93:91:23:1f:51:a5:e4:2e:a5:3b:5c:2a:c4:c2:df:15:
         0a:05:bd:e9:54:b6:8b:44:b3:96:56:91:3c:21:02:ad:02:46:
         33:fe:c0:22:2b:f6:66:21:1a:eb:7c:a7:58:3e:fd:a1:42:3f:
         8d:21:22:77:26:9a:84:af:0c:fa:12:81:a9:11:02:ae:4d:52:
         59:62:b9:77:82:00:56:53:77:a6:2f:e8:23:34:6d:ca:c8:30:
         86:2b:6c:7b:84:9f:25:75:ad:64:5f:b3:96:44:8b:21:22:8e:
         89:cd:14:d2:78:65:c4:a9:51:54:02:bf:99:60:9b:7a:54:f1:
         cf:23:e1:bb:7a:a2:99:c1:0d:30:07:11:1f:98:16:73:8e:2d:
         a1:8f:45:81:cf:c7:56:4e:a1:b1:9c:32:56:22:c2:5a:ec:23:
         b9:1c:d3:41:66:86:a2:64:d3:60:89:6f:49:bc:fd:10:c1:2f:
         97:ac:e4:af:cb:a5:27:29:38:cc:7c:5e:17:ca:71:ce:23:97:
         cb:43:9a:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hob19cvam9o1Gd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy
N2Y3MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
ZmUzNTBlNWQtOTg2ZC00YWQ1LTlmYWItMDhkZjA3YWI0ZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWyYDTwD7gimGz/GzIskPw102Rk5f8xXR7fo
bvIci5+E7/AJUJeiNfMKxPd9PZ37K2EClMva+jRcBZZhBtfKfms2MEtxBRRhObE4
uPx3vLY0d6iIW8CRTUGsvM68v1fy55TK4d53Sj2YCSv/pcEtNoO5EOBAkbZeNPuM
zf0GLCIDEgE2Mxs45UVenxm3NnM7kW88GH1l+z0DGL+v1h7eExyWV3zd5rzV6SIM
94avHFJcpIFMfOac0fwF5q8wNtIOP+wAwnITvhO/kI5xAW7qP6SaPVMjnOwPbPau
scEyQVRL08x2XHqnKdWlhwTZvx3Y7cCbEYyijyAXIrBQomBQEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4RonRfkAhMfmh4dxNJKzPAsCI4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl
MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvY2NmYWExNGUtMDYwNC0z
ZjY4LWIyMTItZDIwNzEyNmRmN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz
ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx
MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4
NTJiMTI3ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvjOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMTsIL57AW7jVntxcyjTSkvRxlSnMO9xKy8YAiuQGhtP0LL2b4iaFwV5
bZVRgg6WWsfPU0poQZh1k5EjH1Gl5C6lO1wqxMLfFQoFvelUtotEs5ZWkTwhAq0C
RjP+wCIr9mYhGut8p1g+/aFCP40hIncmmoSvDPoSgakRAq5NUlliuXeCAFZTd6Yv
6CM0bcrIMIYrbHuEnyV1rWRfs5ZEiyEijonNFNJ4ZcSpUVQCv5lgm3pU8c8j4bt6
opnBDTAHER+YFnOOLaGPRYHPx1ZOobGcMlYiwlrsI7kc00FmhqJk02CJb0m8/RDB
L5es5K/LpScpOMx8XhfKcc4jl8tDmjo=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:17:24 2026 by rpki-client