Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/f6edb060-8366-325a-9f67-0cfcef61585e.roa
File:                     f6edb060-8366-325a-9f67-0cfcef61585e.roa (raw, json)
Hash identifier:          hUFOfaTid95IYWCMxecEuQulv3YrgCPZiNrR/bK/nXM=
Subject key identifier:   74:82:3C:3E:B5:DE:FA:A6:52:E7:9D:D1:AF:7D:31:46:1B:2C:7C:1D
Certificate issuer:       /CN=86299c88-beff-4167-a32f-55e2726d4f7c
Certificate serial:       010D0C9F4328584EED51FC3F4443E0FCBC82A2C0
Authority key identifier: EE:62:3E:1A:55:60:BB:8F:3A:0E:D3:80:2D:89:E5:04:B7:15:6C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/f6edb060-8366-325a-9f67-0cfcef61585e.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     46597
IP address blocks:        206.108.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/86299c88-beff-4167-a32f-55e2726d4f7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/86299c88-beff-4167-a32f-55e2726d4f7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:fc:3f:44:43:e0:fc:bc:82:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86299c88-beff-4167-a32f-55e2726d4f7c
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f430cd92-cd4d-4408-9d3a-c412427d721c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f1:68:5c:59:b2:9a:34:fc:60:81:29:44:98:
                    04:19:89:fe:20:db:f9:57:47:96:a7:2e:51:51:e3:
                    5a:f7:8d:b3:b5:b0:2e:eb:65:9d:77:92:0f:ba:a9:
                    35:fa:7b:2a:db:0c:be:0a:58:e8:28:38:35:c5:6b:
                    dc:cf:3b:85:01:22:68:39:76:fd:f4:57:1a:9a:d6:
                    60:50:02:fe:5f:38:85:60:5f:74:0b:da:80:e3:91:
                    83:0f:ec:9f:0e:15:90:5c:8d:c6:5a:3b:fc:2a:23:
                    9b:8c:24:10:c5:aa:09:e7:95:61:dd:ea:67:6e:65:
                    56:d7:fe:c2:19:7a:29:48:f3:07:fc:43:f0:d2:36:
                    af:8c:38:1d:ee:7c:ad:b9:a0:b8:3e:95:6e:ee:62:
                    23:ca:b6:c0:40:e6:0e:4e:b6:c8:73:fc:53:0a:6e:
                    18:1c:53:33:51:63:a9:19:49:60:27:3f:0e:96:8c:
                    96:02:d0:b0:37:4c:27:38:99:72:58:4c:35:49:aa:
                    5a:25:61:96:91:99:62:17:d9:8d:93:29:26:cf:6c:
                    dd:e7:7b:77:5c:e5:ab:b6:aa:94:6f:a6:ba:f8:28:
                    44:1f:d8:ad:7c:12:47:57:2c:a2:b2:fb:38:2d:bd:
                    d2:a9:aa:30:3b:c6:53:72:a2:c5:4f:2a:1e:cc:75:
                    ad:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:82:3C:3E:B5:DE:FA:A6:52:E7:9D:D1:AF:7D:31:46:1B:2C:7C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/f6edb060-8366-325a-9f67-0cfcef61585e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c/86299c88-beff-4167-a32f-55e2726d4f7c.crl

            X509v3 Authority Key Identifier:
                keyid:EE:62:3E:1A:55:60:BB:8F:3A:0E:D3:80:2D:89:E5:04:B7:15:6C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/86299c88-beff-4167-a32f-55e2726d4f7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:cc:32:9b:d9:31:3a:eb:88:14:ec:8e:6b:3d:2b:11:9a:
         fc:15:66:10:83:93:5a:15:c5:59:09:f1:16:41:72:b7:51:e1:
         84:66:0c:13:64:25:93:ee:18:b1:ed:4a:8e:fa:d5:52:d5:e3:
         d4:20:94:c6:ed:8d:20:e5:bc:9c:6a:ac:a9:2c:0d:02:18:fb:
         94:4e:96:e8:1e:29:91:77:bb:88:4d:50:54:84:18:31:a2:d5:
         41:be:de:88:57:da:4d:a6:7e:71:d3:56:88:10:05:96:11:59:
         09:2f:26:56:13:0f:76:6d:da:a4:28:4a:9d:65:f6:c5:01:09:
         4e:12:6f:ac:d9:5f:6a:a3:76:99:70:b6:b0:91:26:38:90:79:
         0b:da:7e:f5:41:72:00:61:28:54:13:8c:95:ce:06:31:f4:df:
         f0:d1:cc:30:b0:3a:eb:72:3d:f9:d9:32:4d:b9:85:99:e0:ce:
         b6:3a:3c:44:1b:96:21:00:6f:f6:c3:a6:b8:7b:cb:51:ce:f9:
         ee:79:aa:c6:5e:b4:27:e2:78:84:f6:36:7f:98:4c:b1:20:2f:
         28:9d:9d:25:3e:94:fa:89:88:e1:b8:44:4a:4b:d7:d4:56:7e:
         d3:e8:30:83:ab:0d:06:b9:c3:b9:27:09:bf:97:af:a8:23:8a:
         69:f1:5a:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfw/REPg/LyCosAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYyOTljODgtYmVmZi00MTY3LWEzMmYtNTVlMjcyNmQ0
ZjdjMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjQzMGNkOTItY2Q0ZC00NDA4LTlkM2EtYzQxMjQyN2Q3MjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfFoXFmymjT8YIEpRJgEGYn+INv5V0eWpy5R
UeNa942ztbAu62Wdd5IPuqk1+nsq2wy+CljoKDg1xWvczzuFASJoOXb99FcamtZg
UAL+XziFYF90C9qA45GDD+yfDhWQXI3GWjv8KiObjCQQxaoJ55Vh3epnbmVW1/7C
GXopSPMH/EPw0javjDgd7nytuaC4PpVu7mIjyrbAQOYOTrbIc/xTCm4YHFMzUWOp
GUlgJz8OloyWAtCwN0wnOJlyWEw1SapaJWGWkZliF9mNkykmz2zd53t3XOWrtqqU
b6a6+ChEH9itfBJHVyyisvs4Lb3SqaowO8ZTcqLFTyoezHWtTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSCPD613vqmUued0a99MUYbLHwdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NjI5
OWM4OC1iZWZmLTQxNjctYTMyZi01NWUyNzI2ZDRmN2MvZjZlZGIwNjAtODM2Ni0z
MjVhLTlmNjctMGNmY2VmNjE1ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODYyOTljODgtYmVmZi00MTY3LWEz
MmYtNTVlMjcyNmQ0ZjdjLzg2Mjk5Yzg4LWJlZmYtNDE2Ny1hMzJmLTU1ZTI3MjZk
NGY3Yy5jcmwwHwYDVR0jBBgwFoAU7mI+GlVgu486DtOALYnlBLcVbJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi84NjI5OWM4OC1iZWZmLTQxNjctYTMyZi01NWUy
NzI2ZDRmN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmwwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjyzDKb2TE664gU7I5rPSsRmvwVZhCDk1oVxVkJ8RZBcrdR4YRmDBNk
JZPuGLHtSo761VLV49QglMbtjSDlvJxqrKksDQIY+5ROlugeKZF3u4hNUFSEGDGi
1UG+3ohX2k2mfnHTVogQBZYRWQkvJlYTD3Zt2qQoSp1l9sUBCU4Sb6zZX2qjdplw
trCRJjiQeQvafvVBcgBhKFQTjJXOBjH03/DRzDCwOutyPfnZMk25hZngzrY6PEQb
liEAb/bDprh7y1HO+e55qsZetCfieIT2Nn+YTLEgLyidnSU+lPqJiOG4REpL19RW
ftPoMIOrDQa5w7knCb+Xr6gjimnxWpE=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:08 2026 by rpki-client