Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa
File:                     2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa (raw, json)
Hash identifier:          RgSnPrH5Hcft8abI0azAUzGWwbB+rRj8rXL58brqguE=
Subject key identifier:   7C:BB:F3:FE:DB:45:CF:6D:07:22:DE:5A:E9:4C:A7:C4:6A:E0:F3:DC
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584D60E4F357EDF012E10D1E8300
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     6507
IP address blocks:        151.106.248.0/24 maxlen: 24
                          151.106.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f3:57:ed:f0:12:e1:0d:1e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=37cf2264-ecf6-42bf-88d0-68ec2816467f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:6a:66:79:86:e2:5e:3a:7d:3f:0b:a6:3d:
                    4a:28:4a:54:4c:98:57:bc:45:90:56:4c:50:90:dc:
                    13:cf:92:43:4a:9a:8b:a9:06:79:2d:f6:a6:e4:6e:
                    d4:11:54:b7:99:bb:28:c2:03:b1:59:9e:d8:3b:ff:
                    62:82:ad:c7:64:3f:92:bb:c2:37:ce:ae:54:76:4c:
                    f7:f6:45:a3:21:b8:50:cb:ac:08:21:45:69:f4:d2:
                    1b:ac:db:c9:08:31:4f:54:17:e9:30:9b:1c:98:84:
                    a8:22:d2:fd:e0:71:23:52:d8:56:65:a5:44:62:85:
                    6c:5b:ba:5b:f0:12:82:25:c6:ea:d8:a7:f7:49:d0:
                    39:39:ef:88:4d:eb:66:e5:11:9a:58:df:be:cf:23:
                    c0:37:14:ab:90:d5:8d:d0:70:1f:1c:69:1c:a7:21:
                    db:aa:c3:92:5c:da:ef:7d:8e:53:65:af:f4:07:7f:
                    b3:bf:bd:da:52:f2:31:83:17:c3:7a:27:7b:4b:f5:
                    84:96:5c:cf:d3:1e:a6:70:30:72:f2:bd:f4:fa:8f:
                    00:17:98:27:9c:62:9e:3d:16:6c:db:d0:18:44:ef:
                    7b:f5:4c:6c:1c:3a:63:7f:6c:7d:ce:15:bd:10:be:
                    42:fc:43:67:39:28:69:c9:61:f5:fc:36:2c:85:8c:
                    41:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BB:F3:FE:DB:45:CF:6D:07:22:DE:5A:E9:4C:A7:C4:6A:E0:F3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:05:8e:4e:45:98:30:e0:76:a4:94:1c:47:1f:73:4a:62:30:
         79:9a:97:d9:af:32:7e:10:bf:1d:b6:eb:55:4e:75:7c:3b:91:
         08:ae:00:9c:53:bd:c4:49:27:09:25:b1:d9:9b:8e:e1:f7:40:
         d0:e1:0e:ef:2f:7e:b8:cd:35:a5:96:f5:a5:70:26:68:af:3e:
         4e:0b:9b:e3:c6:11:41:80:ec:15:04:1a:9e:d2:a0:a1:cf:37:
         5c:9c:48:a8:65:2a:d1:d5:36:2a:e4:04:3c:bc:5c:65:15:63:
         91:49:5c:d8:95:2e:b2:2e:6c:cb:54:d4:02:be:5f:6b:36:2e:
         41:94:84:69:78:10:f5:3c:75:e0:39:a5:86:dd:2a:45:71:6c:
         bf:63:6e:ea:37:fe:78:d9:20:4c:62:ce:93:06:e7:00:8f:21:
         d1:e9:7f:e5:88:cc:d7:f2:72:d6:c0:a5:32:71:0d:e5:7c:ed:
         c2:2f:f7:ad:c4:eb:ac:59:77:72:d9:d5:fa:71:5b:b4:36:86:
         9f:19:77:4e:9c:2a:52:5f:0b:bd:0e:21:c7:dd:f0:7b:cc:c0:
         c9:de:0d:7c:ca:f3:c8:20:e7:16:9b:54:51:ef:99:10:38:0b:
         31:4a:c3:c6:2f:00:53:7f:ea:ee:fe:5f:f0:76:e1:cf:68:90:
         3f:f7:b3:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PNX7fAS4Q0egwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUy
NjkyMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
MzdjZjIyNjQtZWNmNi00MmJmLTg4ZDAtNjhlYzI4MTY0NjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmutqZnmG4l46fT8Lpj1KKEpUTJhXvEWQVkxQ
kNwTz5JDSpqLqQZ5Lfam5G7UEVS3mbsowgOxWZ7YO/9igq3HZD+Su8I3zq5Udkz3
9kWjIbhQy6wIIUVp9NIbrNvJCDFPVBfpMJscmISoItL94HEjUthWZaVEYoVsW7pb
8BKCJcbq2Kf3SdA5Oe+ITetm5RGaWN++zyPANxSrkNWN0HAfHGkcpyHbqsOSXNrv
fY5TZa/0B3+zv73aUvIxgxfDeid7S/WEllzP0x6mcDBy8r30+o8AF5gnnGKePRZs
29AYRO979UxsHDpjf2x9zhW9EL5C/ENnOShpyWH1/DYshYxBNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy78/7bRc9tByLeWulMp8Rq4PPcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2
YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvMmJjMzA1YjYtODIyMC0z
M2VmLTk2YjEtZWU1YTNlNjRiODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDQyNmM4MTgtZmU2Mi00NjVmLTgx
ODQtZDRmODE3NmUyNjkyL2Q0MjZjODE4LWZlNjItNDY1Zi04MTg0LWQ0ZjgxNzZl
MjY5Mi5jcmwwHwYDVR0jBBgwFoAU8F+ppzkydlY4j5FgaWTWQCUOPLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4
MTc2ZTI2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl2r4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN0Fjk5FmDDgdqSUHEcfc0piMHmal9mvMn4Qvx2261VOdXw7kQiuAJxT
vcRJJwklsdmbjuH3QNDhDu8vfrjNNaWW9aVwJmivPk4Lm+PGEUGA7BUEGp7SoKHP
N1ycSKhlKtHVNirkBDy8XGUVY5FJXNiVLrIubMtU1AK+X2s2LkGUhGl4EPU8deA5
pYbdKkVxbL9jbuo3/njZIExizpMG5wCPIdHpf+WIzNfyctbApTJxDeV87cIv963E
66xZd3LZ1fpxW7Q2hp8Zd06cKlJfC70OIcfd8HvMwMneDXzK88gg5xabVFHvmRA4
CzFKw8YvAFN/6u7+X/B24c9okD/3swA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:26 2026 by rpki-client