Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2286aeb1-7caf-32c8-b04f-522c01bccac1.roa
File:                     2286aeb1-7caf-32c8-b04f-522c01bccac1.roa (raw, json)
Hash identifier:          HjUxn/1YEJsS3rYvqinMQEkyz1CvSojCHbhcjGdllgg=
Subject key identifier:   7F:2A:A2:03:4B:7E:55:FC:F4:6B:A7:2C:CD:87:02:50:23:2C:E7:B9
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584B0CDC14DC1ABF95F50267A880
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2286aeb1-7caf-32c8-b04f-522c01bccac1.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     26744
IP address blocks:        68.170.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:14:dc:1a:bf:95:f5:02:67:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=034c686e-41f1-4d0c-b7d4-6f9758c8ff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c7:d4:71:d1:5f:fd:43:97:69:cd:b6:10:58:
                    b0:ca:2c:96:9c:b7:52:c9:e0:ee:cd:3a:7a:12:09:
                    9c:14:a1:b8:51:23:b8:b7:f6:d9:7e:4e:05:85:cb:
                    86:15:7d:05:dd:37:a7:6a:03:74:ca:3e:ff:19:a8:
                    56:95:d5:16:e0:9c:af:0e:d5:d2:8d:4e:83:d0:f4:
                    10:2d:e3:26:8b:60:7b:a1:54:d4:34:d5:17:a6:01:
                    2d:a4:6d:90:e6:c2:62:71:45:63:7c:fc:ec:a3:ec:
                    5b:75:73:83:e7:25:a9:cb:89:05:99:8b:76:7d:25:
                    e8:5b:1c:87:e1:23:83:f0:d8:ad:39:d9:21:97:d3:
                    63:19:09:a4:2d:39:e9:13:a5:8e:18:47:54:9e:a8:
                    54:61:69:cc:e8:34:c9:ac:5e:26:64:46:fe:ea:6a:
                    b3:b5:c5:97:85:b7:10:b3:59:66:f8:1a:c8:74:d9:
                    e0:40:25:a2:29:82:aa:80:ce:b7:71:c7:59:cd:84:
                    a5:e1:d0:29:6b:33:e3:98:34:c3:1b:0e:c3:dd:dc:
                    f1:0e:7d:5b:00:65:29:42:5d:81:03:11:b3:59:63:
                    c5:c2:2f:6b:ce:f5:eb:3e:29:66:db:4e:a8:d6:a1:
                    18:6f:a0:0d:36:25:81:07:19:fa:0c:cc:bc:5f:fc:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2A:A2:03:4B:7E:55:FC:F4:6B:A7:2C:CD:87:02:50:23:2C:E7:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/2286aeb1-7caf-32c8-b04f-522c01bccac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:b2:0b:06:30:55:0b:aa:d8:a5:a5:98:ec:90:ed:d3:c5:
         83:46:50:87:6e:10:ff:fc:91:69:ae:98:d7:3c:6a:c2:95:4b:
         0f:fe:c2:81:8e:60:3d:96:ec:3f:80:c3:62:c3:28:6d:25:d0:
         11:99:e5:bb:2e:19:18:9d:1a:57:0b:c5:c4:ce:37:28:d6:69:
         5f:f2:aa:8c:40:32:17:d5:7c:f0:5c:75:9e:0d:8f:f2:4c:99:
         29:81:83:4f:eb:c5:21:4c:e4:b4:0a:a7:f0:a2:42:73:22:53:
         65:72:28:e9:16:30:c7:e5:6a:5b:70:55:cb:60:63:00:b3:2e:
         93:e7:8e:71:eb:a3:50:ef:68:5f:8d:d4:0e:d8:5b:bc:05:70:
         86:90:e5:12:f0:f1:11:e0:09:1a:85:5e:bb:a4:c5:a2:15:fc:
         d4:72:76:75:a5:fa:5e:ec:c1:d9:9e:0a:c7:af:48:f3:08:4d:
         9d:a7:5e:b8:1e:c0:16:db:ed:d0:cc:e6:37:a7:6d:fa:d7:4b:
         34:cc:41:05:2c:25:de:ee:3e:1c:14:69:5c:ff:51:27:db:f3:
         b1:24:1c:71:93:4b:4a:4c:dd:2a:57:5a:55:e9:63:2d:8e:08:
         c1:68:ad:bf:35:25:40:ea:4a:c1:1a:f1:88:f6:3d:67:ef:ed:
         ea:99:d7:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BTcGr+V9QJnqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk
MDM0YzY4NmUtNDFmMS00ZDBjLWI3ZDQtNmY5NzU4YzhmZjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cfUcdFf/UOXac22EFiwyiyWnLdSyeDuzTp6
EgmcFKG4USO4t/bZfk4FhcuGFX0F3TenagN0yj7/GahWldUW4JyvDtXSjU6D0PQQ
LeMmi2B7oVTUNNUXpgEtpG2Q5sJicUVjfPzso+xbdXOD5yWpy4kFmYt2fSXoWxyH
4SOD8NitOdkhl9NjGQmkLTnpE6WOGEdUnqhUYWnM6DTJrF4mZEb+6mqztcWXhbcQ
s1lm+BrIdNngQCWiKYKqgM63ccdZzYSl4dApazPjmDTDGw7D3dzxDn1bAGUpQl2B
AxGzWWPFwi9rzvXrPilm206o1qEYb6ANNiWBBxn6DMy8X/ytsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8qogNLflX89GunLM2HAlAjLOe5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMjI4NmFlYjEtN2NhZi0z
MmM4LWIwNGYtNTIyYzAxYmNjYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKr5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALassgsGMFULqtilpZjskO3TxYNGUIduEP/8kWmumNc8asKVSw/+woGO
YD2W7D+Aw2LDKG0l0BGZ5bsuGRidGlcLxcTONyjWaV/yqoxAMhfVfPBcdZ4Nj/JM
mSmBg0/rxSFM5LQKp/CiQnMiU2VyKOkWMMflaltwVctgYwCzLpPnjnHro1DvaF+N
1A7YW7wFcIaQ5RLw8RHgCRqFXrukxaIV/NRydnWl+l7swdmeCsevSPMITZ2nXrge
wBbb7dDM5jenbfrXSzTMQQUsJd7uPhwUaVz/USfb87EkHHGTS0pM3SpXWlXpYy2O
CMForb81JUDqSsEa8Yj2PWfv7eqZ12g=
-----END CERTIFICATE-----
Generated at Fri Sep 19 15:45:42 2025 by rpki-client