Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
File:                     646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa (raw, json)
Hash identifier:          +eNp7UJHyQ++nnYH+UL1gT43/DbHUtR7xBEz0ywy6Kk=
Subject key identifier:   A1:74:77:90:CD:B1:C0:A5:9F:2C:25:9C:66:3B:17:5A:CB:6D:A0:E4
Certificate issuer:       /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial:       010D0C9F4328584EA788962BAA513B64B383A440
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13649
IP address blocks:        205.207.186.0/24 maxlen: 24
                          2602:fa4d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:96:2b:aa:51:3b:64:b3:83:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fc8452a3-790c-4f4d-864b-e53b38694231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:c4:06:58:2e:85:c9:fe:b1:78:7a:bb:c3:
                    49:04:f1:56:b0:8b:7e:89:aa:5c:79:b6:f3:8f:80:
                    f3:77:73:3b:8e:fa:39:4d:d1:7f:b1:3c:44:ea:a8:
                    11:7a:d2:85:ac:56:8b:81:79:27:2a:ed:c1:c3:1c:
                    5f:45:3b:d4:66:51:86:de:5f:12:23:d9:69:70:35:
                    99:95:1d:be:ee:9d:cd:aa:34:dd:28:5b:80:38:00:
                    9a:1f:51:b8:5c:d7:a7:fb:2b:15:23:c2:74:0a:e0:
                    77:f6:85:69:25:a8:18:d3:51:4a:c3:00:4e:e5:06:
                    e0:d8:2d:d8:da:32:88:0f:22:9f:9d:4d:84:4e:ca:
                    70:79:1c:16:7f:44:01:32:08:07:4b:84:68:bc:ac:
                    af:bd:1d:dd:bc:2c:66:d2:98:f3:d3:57:e7:5e:f8:
                    2d:3e:0a:61:e8:95:23:2a:37:74:5a:87:0f:a7:e0:
                    cd:6a:5b:47:56:88:15:92:18:1b:42:5d:f2:cc:b4:
                    f5:51:0e:f9:58:25:18:45:a1:b3:d7:cc:00:ec:8b:
                    49:f7:70:c6:d4:c6:2d:46:33:a1:96:6b:11:93:f6:
                    56:bb:aa:ba:c4:85:2d:0c:62:e2:66:c6:87:3b:0c:
                    38:e0:2f:08:70:9a:e0:8d:00:f6:b1:6c:16:b6:a6:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:77:90:CD:B1:C0:A5:9F:2C:25:9C:66:3B:17:5A:CB:6D:A0:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/646b1206-cf7c-343e-95e5-d2e6d27a95bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl

            X509v3 Authority Key Identifier:
                keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.186.0/24
                IPv6:
                  2602:fa4d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:03:25:00:90:28:2d:58:6b:9d:05:83:54:3d:d4:89:20:28:
         b8:6f:1e:6d:88:e5:44:ad:5d:92:40:1e:9a:c4:6b:a7:0d:ba:
         94:1a:8a:1e:1a:cf:f6:cb:9c:05:cd:71:6c:b7:59:ac:1e:ab:
         2c:06:cc:a7:ca:b1:e9:bb:36:37:37:87:09:e4:f1:de:6d:6b:
         cf:88:1b:85:a4:76:f6:8a:70:d0:b6:91:ec:e2:5f:af:53:d5:
         9e:0d:ed:14:01:92:39:fb:e2:9e:68:5e:38:3f:e6:2d:b1:c3:
         21:d0:51:87:fd:70:aa:36:f7:b3:3c:20:f7:13:97:44:cf:5c:
         11:7c:4d:19:ed:8b:27:e4:2b:cd:1a:91:b1:e8:d4:3b:fd:d0:
         98:6d:06:dc:20:a2:c4:29:82:4c:12:05:b0:fc:05:a0:0f:e3:
         0e:b2:a3:00:90:76:b4:1b:37:6b:b4:28:c4:20:cc:66:50:2c:
         91:c7:56:3b:12:7d:c6:38:49:9d:14:90:2d:e6:4f:c4:c7:a9:
         3c:de:64:66:67:4a:1c:08:5f:40:fa:90:d3:cb:db:e8:6b:5b:
         2f:75:01:64:1a:c6:02:61:57:d0:fd:28:f2:c6:fa:01:a3:7c:
         11:9e:8e:1d:39:88:ff:9b:18:7d:96:1f:ea:51:35:05:ff:45:
         b6:6e:8b:d4
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6niJYrqlE7ZLODpEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2E5YmQ1NDgtMTExNy00Y2M2LWEwZDAtOTRkYzUyYTMw
NDQxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmM4NDUyYTMtNzkwYy00ZjRkLTg2NGItZTUzYjM4Njk0MjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMDEBlguhcn+sXh6u8NJBPFWsIt+iapcebbz
j4Dzd3M7jvo5TdF/sTxE6qgRetKFrFaLgXknKu3BwxxfRTvUZlGG3l8SI9lpcDWZ
lR2+7p3NqjTdKFuAOACaH1G4XNen+ysVI8J0CuB39oVpJagY01FKwwBO5Qbg2C3Y
2jKIDyKfnU2ETspweRwWf0QBMggHS4RovKyvvR3dvCxm0pjz01fnXvgtPgph6JUj
Kjd0WocPp+DNaltHVogVkhgbQl3yzLT1UQ75WCUYRaGz18wA7ItJ93DG1MYtRjOh
lmsRk/ZWu6q6xIUtDGLiZsaHOww44C8IcJrgjQD2sWwWtqYdzwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKF0d5DNscClnywlnGY7F1rLbaDkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYTli
ZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRjNTJhMzA0NDEvNjQ2YjEyMDYtY2Y3Yy0z
NDNlLTk1ZTUtZDJlNmQyN2E5NWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2E5YmQ1NDgtMTExNy00Y2M2LWEw
ZDAtOTRkYzUyYTMwNDQxL2NhOWJkNTQ4LTExMTctNGNjNi1hMGQwLTk0ZGM1MmEz
MDQ0MS5jcmwwHwYDVR0jBBgwFoAU5h+XSrnhKEdZh/q/nayMOmk0inQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jYTliZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRj
NTJhMzA0NDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzc+6MA4E
AgACMAgDBgAmAvpNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5AyUAkCgtWGudBYNUPdSJICi4bx5tiOVE
rV2SQB6axGunDbqUGooeGs/2y5wFzXFst1msHqssBsynyrHpuzY3N4cJ5PHebWvP
iBuFpHb2inDQtpHs4l+vU9WeDe0UAZI5++KeaF44P+YtscMh0FGH/XCqNvezPCD3
E5dEz1wRfE0Z7Ysn5CvNGpGx6NQ7/dCYbQbcIKLEKYJMEgWw/AWgD+MOsqMAkHa0
GzdrtCjEIMxmUCyRx1Y7En3GOEmdFJAt5k/Ex6k83mRmZ0ocCF9A+pDTy9voa1sv
dQFkGsYCYVfQ/SjyxvoBo3wRno4dOYj/mxh9lh/qUTUF/0W2bovU
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:03 2026 by rpki-client