Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa
File:                     c8093db6-db1b-33e7-8501-039e28445968.roa (raw, json)
Hash identifier:          CLdOVFastYXJyY34ryJEE8poW/WoM2htKLsSGyRwgG0=
Subject key identifier:   74:82:42:2D:71:15:37:93:EF:E1:54:68:E5:69:9B:C9:E0:1F:42:CA
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584CF6ECD90E822D9AB0606DE290
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     3738
IP address blocks:        192.250.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d9:0e:82:2d:9a:b0:60:6d:e2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=a717a384-1a48-4770-bb59-c54924699145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c3:31:22:37:97:1c:fa:6b:b0:26:ce:30:d8:
                    46:67:c1:c6:f1:d7:86:e4:43:db:17:3a:45:3a:22:
                    76:3a:9d:eb:a7:27:82:8a:c8:d4:ef:37:5c:2d:21:
                    18:7b:c3:89:cb:3b:d0:69:35:d8:69:92:17:99:dd:
                    36:b2:5c:78:ec:ee:5c:06:44:1c:63:46:2c:06:95:
                    54:c3:d0:98:72:7a:71:a9:b2:f9:2c:0c:cd:b2:5e:
                    67:8e:8f:d4:eb:0d:3c:59:4a:d9:29:32:e2:4f:2c:
                    48:c5:fb:2d:ed:ad:bb:0e:82:d2:e2:bc:f1:ef:a2:
                    03:79:80:75:96:ba:c2:75:57:39:ed:88:03:9a:85:
                    77:ad:6d:d9:28:f9:07:fa:61:5b:d3:c3:71:4b:17:
                    8b:24:f7:63:70:8d:47:c9:72:bb:f4:d9:43:46:87:
                    f3:51:03:0d:a8:b7:a7:44:0c:69:40:c7:07:9c:18:
                    8d:8f:61:25:42:23:3d:e5:15:19:c6:6d:58:d1:ef:
                    59:7a:75:c0:d7:49:91:11:4d:34:34:7e:3d:8b:00:
                    c4:84:6f:29:af:ed:0e:cc:8b:b6:00:11:f0:ef:2f:
                    10:3d:ae:7e:6b:87:dd:84:ce:62:44:6d:53:7e:13:
                    fa:e6:c3:bf:69:19:d3:d1:1f:4b:96:4c:17:4f:96:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:82:42:2D:71:15:37:93:EF:E1:54:68:E5:69:9B:C9:E0:1F:42:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:c7:c9:37:fe:fc:7b:bc:32:4c:9a:16:c9:9e:3f:76:ed:
         9b:09:ef:bb:c8:42:a7:12:82:9b:48:f9:7e:7f:6d:20:88:ae:
         ad:51:89:65:eb:6c:bf:18:a8:3d:9c:b5:8b:5f:45:0a:b2:82:
         00:e6:ce:02:5e:aa:db:ef:0e:9d:1c:c9:52:9e:5d:75:b2:eb:
         b3:8c:d2:81:6e:8a:f4:ce:c3:e8:37:d2:9d:a9:5d:6f:d0:5e:
         f6:27:ba:e1:ef:5e:f6:d9:34:19:b3:74:7a:d4:ce:b9:d4:05:
         aa:db:45:0e:71:1c:3e:5d:01:a1:58:4c:23:cc:c9:3f:aa:db:
         d6:8e:7e:7c:6e:66:27:9b:c7:8c:db:94:48:d2:9f:61:3f:9e:
         15:3b:62:c0:66:13:06:59:29:0f:4a:51:9a:02:ae:00:59:be:
         4a:00:66:b8:48:37:29:6a:a9:97:5d:20:dd:5b:db:3d:00:08:
         8d:7a:30:70:07:b9:b6:73:0c:6c:30:59:2a:31:f9:3e:ff:18:
         4b:b1:14:20:e8:4f:79:9c:e2:ed:fb:65:9d:f3:e8:6b:d2:2c:
         3c:a7:e6:8d:18:a6:75:9d:9f:e5:95:41:09:02:fb:82:c1:0a:
         c9:1d:be:db:83:72:ec:09:b5:0c:56:8e:57:fc:fe:90:c3:63:
         4f:b0:39:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NkOgi2asGBt4pAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl
YzAwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YTcxN2EzODQtMWE0OC00NzcwLWJiNTktYzU0OTI0Njk5MTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MMxIjeXHPprsCbOMNhGZ8HG8deG5EPbFzpF
OiJ2Op3rpyeCisjU7zdcLSEYe8OJyzvQaTXYaZIXmd02slx47O5cBkQcY0YsBpVU
w9CYcnpxqbL5LAzNsl5njo/U6w08WUrZKTLiTyxIxfst7a27DoLS4rzx76IDeYB1
lrrCdVc57YgDmoV3rW3ZKPkH+mFb08NxSxeLJPdjcI1HyXK79NlDRofzUQMNqLen
RAxpQMcHnBiNj2ElQiM95RUZxm1Y0e9ZenXA10mREU00NH49iwDEhG8pr+0OzIu2
ABHw7y8QPa5+a4fdhM5iRG1TfhP65sO/aRnT0R9LlkwXT5bF1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHSCQi1xFTeT7+FUaOVpm8ngH0LKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj
MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzgwOTNkYjYtZGIxYi0z
M2U3LTg1MDEtMDM5ZTI4NDQ1OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk
NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4
ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1
NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPprMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAInEx8k3/vx7vDJMmhbJnj927ZsJ77vIQqcSgptI+X5/bSCIrq1RiWXr
bL8YqD2ctYtfRQqyggDmzgJeqtvvDp0cyVKeXXWy67OM0oFuivTOw+g30p2pXW/Q
XvYnuuHvXvbZNBmzdHrUzrnUBarbRQ5xHD5dAaFYTCPMyT+q29aOfnxuZiebx4zb
lEjSn2E/nhU7YsBmEwZZKQ9KUZoCrgBZvkoAZrhINylqqZddIN1b2z0ACI16MHAH
ubZzDGwwWSox+T7/GEuxFCDoT3mc4u37ZZ3z6GvSLDyn5o0YpnWdn+WVQQkC+4LB
CskdvtuDcuwJtQxWjlf8/pDDY0+wOd4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:06 2026 by rpki-client