Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa
File:                     8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa (raw, json)
Hash identifier:          Kr/1Mh6W4aMwWJuq6WJwrqoHPZ5OIFyCdWxg3jGLrpM=
Subject key identifier:   83:0A:0E:AD:9A:99:49:F0:51:61:47:38:AF:7A:E1:C6:76:94:5F:A0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A25960E3ED09FD5BCC5C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        205.250.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:59:60:e3:ed:09:fd:5b:cc:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=1a0d0211-06d0-4cdd-ac60-abb222aa46c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:11:67:4f:5f:40:08:60:10:90:05:b8:aa:
                    82:cc:f9:4a:3c:8d:cf:a4:32:21:26:16:17:aa:a5:
                    68:a2:05:c4:9e:84:82:6c:6b:de:e5:94:5e:e1:cb:
                    45:25:f8:50:66:89:e9:32:0b:23:04:bd:08:e8:b6:
                    6e:af:74:94:d1:0c:35:53:36:8a:00:c4:e0:23:64:
                    e5:92:2c:c8:04:5c:76:e4:14:8c:f9:84:92:1a:ee:
                    37:49:b6:7f:c2:10:3f:52:57:79:b0:16:f4:47:c2:
                    0e:c9:c1:49:7a:f6:a0:19:d0:9a:bd:03:9a:97:9b:
                    46:de:f3:85:40:56:6f:27:ef:8f:37:f7:b0:1f:01:
                    65:ba:61:bf:7e:f8:f8:44:00:8d:63:14:0c:de:e8:
                    66:38:9c:1e:ae:d3:f1:a9:a8:2a:59:b4:7e:13:b0:
                    70:7c:b4:06:2a:6f:ed:eb:0c:41:1e:03:b1:7c:ca:
                    86:f7:bd:eb:8b:60:83:e9:1b:97:9f:ee:95:eb:b8:
                    c1:be:05:0c:5a:29:a3:d0:92:bd:4d:51:c8:87:1d:
                    cb:e2:1c:15:85:89:cf:86:be:dc:a5:75:9b:9a:d9:
                    c9:53:61:64:cc:d9:0a:c8:97:a6:db:a8:83:71:28:
                    46:61:33:1c:ce:93:e5:be:cf:dc:6d:ef:79:e0:c9:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:0E:AD:9A:99:49:F0:51:61:47:38:AF:7A:E1:C6:76:94:5F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.250.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:76:8d:de:1f:a0:0c:cb:72:c3:62:77:ab:fa:51:23:ff:
         40:a3:f0:6a:0b:bf:3b:69:66:53:d5:73:e1:8a:fe:0b:bd:b4:
         19:1e:26:0d:ff:f7:c2:37:b7:db:ac:d9:1a:6e:ce:b9:0f:4d:
         ee:42:18:22:82:01:07:dc:82:94:af:e6:41:1f:56:7b:a2:1a:
         a9:cd:41:ae:46:03:eb:bd:a2:1c:a2:e5:3c:b3:9c:9e:df:31:
         ae:c2:6e:a2:73:90:ed:d6:b6:08:bd:00:0a:72:3e:cb:fe:af:
         4b:4a:36:d4:75:ea:89:75:f0:e7:56:47:8c:19:29:8a:de:19:
         54:22:31:30:f4:38:1f:7e:77:32:f4:cb:8d:6f:16:f7:23:76:
         ee:b3:66:74:d2:9e:b4:87:91:49:77:15:69:e8:ec:d5:eb:a2:
         64:73:ff:61:78:87:95:05:cc:c1:41:75:d0:e4:45:cd:bf:f9:
         2b:56:f1:eb:65:b7:df:0b:3b:b5:9e:f6:f0:b9:ee:78:a2:e9:
         61:27:e7:78:50:18:34:94:bb:9c:82:bd:d7:38:d6:21:ea:c4:
         92:9f:8e:ef:28:7b:61:90:df:a2:6d:de:32:6c:d3:29:43:5e:
         73:2e:87:fc:a1:74:e5:45:db:b5:eb:ed:3c:fb:76:59:4f:4f:
         e6:1d:2c:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vollg4+0J/VvMXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
MWEwZDAyMTEtMDZkMC00Y2RkLWFjNjAtYWJiMjIyYWE0NmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVIRZ09fQAhgEJAFuKqCzPlKPI3PpDIhJhYX
qqVoogXEnoSCbGve5ZRe4ctFJfhQZonpMgsjBL0I6LZur3SU0Qw1UzaKAMTgI2Tl
kizIBFx25BSM+YSSGu43SbZ/whA/Uld5sBb0R8IOycFJevagGdCavQOal5tG3vOF
QFZvJ++PN/ewHwFlumG/fvj4RACNYxQM3uhmOJwertPxqagqWbR+E7BwfLQGKm/t
6wxBHgOxfMqG973ri2CD6RuXn+6V67jBvgUMWimj0JK9TVHIhx3L4hwVhYnPhr7c
pXWbmtnJU2FkzNkKyJem26iDcShGYTMczpPlvs/cbe954MkpHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMKDq2amUnwUWFHOK964cZ2lF+gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGVmNmZmMWYtN2NjMS0z
ZmVhLTk2ZTMtODdkZTkzOTcyYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfrBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6ido3eH6AMy3LDYner+lEj/0Cj8GoLvztpZlPVc+GK/gu9tBkeJg3/
98I3t9us2RpuzrkPTe5CGCKCAQfcgpSv5kEfVnuiGqnNQa5GA+u9ohyi5TyznJ7f
Ma7CbqJzkO3Wtgi9AApyPsv+r0tKNtR16ol18OdWR4wZKYreGVQiMTD0OB9+dzL0
y41vFvcjdu6zZnTSnrSHkUl3FWno7NXromRz/2F4h5UFzMFBddDkRc2/+StW8etl
t98LO7We9vC57nii6WEn53hQGDSUu5yCvdc41iHqxJKfju8oe2GQ36Jt3jJs0ylD
XnMuh/yhdOVF27Xr7Tz7dllPT+YdLBc=
-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:55 2026 by rpki-client