Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
File:                     3b563e0a-43f7-39c7-9202-f9be0846f377.roa (raw, json)
Hash identifier:          gDTeY4Pr9X7cRTorWebSiAMJSBeTYIoTs4CGnPslrSE=
Subject key identifier:   00:99:12:46:5E:C8:F9:F3:16:90:E2:D5:5D:35:98:86:3A:A8:C3:28
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1B19FDDB61A8A23A851A43BA
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        206.108.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:fd:db:61:a8:a2:3a:85:1a:43:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=2fad3991-b9b4-4ce5-8ffc-d10cbe46061c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:38:29:2d:38:cf:94:82:d8:c3:75:71:39:
                    56:71:27:02:6e:ce:d2:74:08:46:d7:58:1b:87:b7:
                    cf:33:fd:b4:74:58:ac:83:d8:7f:a1:7c:ed:db:e2:
                    a7:be:9b:13:e8:bc:64:a0:12:65:f7:df:a8:aa:b7:
                    d1:9a:37:07:be:2b:c7:fc:87:2c:95:76:c1:a6:58:
                    1a:e5:16:e5:9a:cc:c8:72:8b:d0:64:12:b6:58:bd:
                    c7:bc:67:b8:a8:52:ae:27:ed:37:49:ba:8e:0d:32:
                    65:9d:49:f2:68:57:35:d8:1e:05:00:c6:3e:7a:32:
                    e8:31:9a:b6:c8:ee:65:4b:ef:23:44:a0:b5:35:5d:
                    81:9c:24:64:c0:59:14:d3:25:04:88:70:5f:62:05:
                    67:bb:ea:75:ef:3d:da:f0:34:b9:dc:87:64:9e:5f:
                    6c:76:11:11:d9:d4:fe:da:2b:95:7c:7f:da:05:65:
                    a6:1d:c8:b8:4e:37:66:5b:df:ae:80:05:c2:60:87:
                    a5:19:72:38:51:8e:18:b1:4b:bd:ea:d9:06:f7:45:
                    01:17:32:46:1f:9c:ae:b7:09:f1:d6:fe:6a:2f:08:
                    08:a2:f2:cc:30:22:5c:d3:39:62:5b:39:2c:aa:08:
                    65:5f:98:8b:bc:08:3e:68:e2:1e:02:9e:63:36:5c:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:99:12:46:5E:C8:F9:F3:16:90:E2:D5:5D:35:98:86:3A:A8:C3:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3b563e0a-43f7-39c7-9202-f9be0846f377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c7:93:f8:57:c1:21:95:da:68:83:f4:48:1d:50:d9:b4:b8:
         72:7d:c5:d5:f8:53:0f:8a:a4:d6:fa:f2:49:f8:0d:03:87:54:
         0d:66:de:57:d6:84:00:53:42:f2:fb:b8:31:18:80:a7:ae:ee:
         e8:7a:6d:23:16:75:54:d5:36:14:bb:a1:3c:26:c3:d3:5a:49:
         08:a6:5d:f8:cc:0b:ce:52:a7:ff:48:5b:16:48:82:57:66:c0:
         bd:1d:dd:14:37:c4:59:bc:f9:d5:a0:c2:c8:ec:3a:ca:52:80:
         ac:c2:47:0f:90:ce:2d:bd:db:04:58:14:cf:0a:ba:49:41:28:
         49:5b:fb:19:ba:0a:51:f0:78:b8:90:f1:34:40:bf:a1:fd:78:
         7f:aa:b8:30:f1:82:94:9a:e4:0b:58:23:43:11:1b:b6:6c:0a:
         96:0c:60:44:09:b7:17:d9:92:38:96:28:48:c2:83:45:86:a4:
         9d:dd:3a:69:db:f5:71:6c:e9:4c:10:98:18:e0:ab:86:bf:77:
         9a:4e:c1:9a:47:53:32:d1:a3:f0:ab:4d:af:0e:1e:6f:f7:21:
         23:2f:e7:9b:84:52:a8:81:bf:13:ca:24:14:56:2e:82:d2:af:
         77:81:3d:49:25:14:d7:e6:36:32:6a:a6:b0:e7:f2:c8:85:fe:
         c8:5f:de:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGf3bYaiiOoUaQ7owDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk
MmZhZDM5OTEtYjliNC00Y2U1LThmZmMtZDEwY2JlNDYwNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6I4KS04z5SC2MN1cTlWcScCbs7SdAhG11gb
h7fPM/20dFisg9h/oXzt2+KnvpsT6LxkoBJl99+oqrfRmjcHvivH/IcslXbBplga
5RblmszIcovQZBK2WL3HvGe4qFKuJ+03SbqODTJlnUnyaFc12B4FAMY+ejLoMZq2
yO5lS+8jRKC1NV2BnCRkwFkU0yUEiHBfYgVnu+p17z3a8DS53Idknl9sdhER2dT+
2iuVfH/aBWWmHci4TjdmW9+ugAXCYIelGXI4UY4YsUu96tkG90UBFzJGH5yutwnx
1v5qLwgIovLMMCJc0zliWzksqghlX5iLvAg+aOIeAp5jNlyvDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACZEkZeyPnzFpDi1V01mIY6qMMoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2I1NjNlMGEtNDNmNy0z
OWM3LTkyMDItZjliZTA4NDZmMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzmzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMnHk/hXwSGV2miD9EgdUNm0uHJ9xdX4Uw+KpNb68kn4DQOHVA1m3lfW
hABTQvL7uDEYgKeu7uh6bSMWdVTVNhS7oTwmw9NaSQimXfjMC85Sp/9IWxZIgldm
wL0d3RQ3xFm8+dWgwsjsOspSgKzCRw+Qzi292wRYFM8KuklBKElb+xm6ClHweLiQ
8TRAv6H9eH+quDDxgpSa5AtYI0MRG7ZsCpYMYEQJtxfZkjiWKEjCg0WGpJ3dOmnb
9XFs6UwQmBjgq4a/d5pOwZpHUzLRo/CrTa8OHm/3ISMv55uEUqiBvxPKJBRWLoLS
r3eBPUklFNfmNjJqprDn8siF/shf3g0=
-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:43 2026 by rpki-client