Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa
File:                     cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa (raw, json)
Hash identifier:          VKFypcIe60yXk92CCwXoEOxSRxnCqlnXEABbu9W+jSs=
Subject key identifier:   C3:6D:64:68:1A:65:AC:98:6C:76:1B:08:9F:0F:66:BD:64:21:D8:0D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EE22745C693410D40DA318480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     46558
IP address blocks:        136.248.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:45:c6:93:41:0d:40:da:31:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=297e3f45-3659-4bdf-8634-8e5fee09e120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:d3:79:86:83:e3:0a:f6:f6:50:51:ef:bd:
                    ca:f9:90:4c:04:ed:db:72:1d:fe:ff:f4:7f:66:89:
                    a5:ba:0b:96:c1:38:ef:b0:f2:62:a5:90:dd:5b:b3:
                    c4:f0:71:0d:49:bd:e4:99:cf:02:cb:66:0e:04:66:
                    40:57:3f:0a:32:d3:5d:f0:2b:77:83:f3:06:ce:79:
                    6d:1d:c7:aa:4e:90:8a:06:62:12:8d:28:5c:58:8d:
                    42:13:17:c9:11:46:3a:fc:68:34:b1:a5:8a:84:80:
                    88:94:b3:4c:bd:79:c6:7e:42:d3:75:ae:27:43:df:
                    f8:77:3d:b1:25:ea:23:e8:ae:92:56:00:45:c9:40:
                    da:d1:68:b9:f4:19:86:c5:7f:f6:c1:b1:e0:fd:a1:
                    af:66:a3:a6:3c:54:6d:d2:4b:b2:1e:42:af:6c:c2:
                    c9:4c:6f:50:01:ba:46:01:4f:9e:54:fe:5b:41:f6:
                    31:33:35:5d:83:4f:f9:59:76:a1:d3:86:a5:a4:a7:
                    b0:ef:ed:16:d0:e5:6b:4d:e1:6e:98:36:6c:2a:0b:
                    e0:00:cb:4d:f8:53:a7:e9:30:f8:f7:dc:f4:f9:95:
                    ce:6e:a4:98:eb:98:c8:48:cf:06:c4:dc:f1:c6:d6:
                    71:cc:6f:fb:54:4f:32:8b:5d:cb:06:86:82:cb:cd:
                    99:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6D:64:68:1A:65:AC:98:6C:76:1B:08:9F:0F:66:BD:64:21:D8:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cc7cf39c-b0aa-37be-a5b7-9842a4918576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.248.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:66:20:45:b7:54:94:55:ad:52:ba:bf:ab:92:32:08:0a:2e:
         10:84:9e:bb:75:27:09:9f:78:49:9d:53:e4:9c:49:82:12:b0:
         b2:fa:05:2e:96:d8:c6:42:5f:e0:c6:3d:1d:5e:79:c3:ff:8e:
         c1:7c:ce:dc:8f:ae:2b:5c:96:ed:29:3d:7b:61:99:ea:3d:f5:
         24:71:c7:48:c0:c4:ba:2d:a9:41:1f:dd:47:de:b7:18:62:1e:
         e8:98:b0:91:f3:7a:a5:90:6d:bd:e4:1b:49:de:6b:99:4a:05:
         e1:45:56:f9:78:17:13:66:ff:78:b0:de:63:37:18:e1:56:bd:
         8a:b1:ea:ce:8e:3a:fb:d5:0e:27:c1:1d:0b:34:37:fa:97:22:
         be:47:d8:0b:1e:f6:e1:98:00:a2:88:b9:20:8a:f4:8d:98:8a:
         ac:80:5e:0e:43:44:ee:0c:61:83:2b:80:4d:e1:62:30:49:f1:
         ff:93:18:8b:ec:71:ec:4e:c0:ac:1e:99:1a:f4:52:9b:6a:c7:
         71:f7:9a:c3:dd:02:05:72:30:d8:af:91:93:2c:26:7a:a0:42:
         ec:13:c1:12:4f:88:2b:20:4e:a2:74:2b:ae:30:76:17:be:cf:
         bf:18:ec:ba:34:71:42:9d:76:67:fb:df:6e:c6:9e:a1:8d:e8:
         cd:32:3c:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ0XGk0ENQNoxhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
Mjk3ZTNmNDUtMzY1OS00YmRmLTg2MzQtOGU1ZmVlMDllMTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyzTeYaD4wr29lBR773K+ZBMBO3bch3+//R/
ZomluguWwTjvsPJipZDdW7PE8HENSb3kmc8Cy2YOBGZAVz8KMtNd8Ct3g/MGznlt
HceqTpCKBmISjShcWI1CExfJEUY6/Gg0saWKhICIlLNMvXnGfkLTda4nQ9/4dz2x
Jeoj6K6SVgBFyUDa0Wi59BmGxX/2wbHg/aGvZqOmPFRt0kuyHkKvbMLJTG9QAbpG
AU+eVP5bQfYxMzVdg0/5WXah04alpKew7+0W0OVrTeFumDZsKgvgAMtN+FOn6TD4
99z0+ZXObqSY65jISM8GxNzxxtZxzG/7VE8yi13LBoaCy82ZHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNtZGgaZayYbHYbCJ8PZr1kIdgNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2M3Y2YzOWMtYjBhYS0z
N2JlLWE1YjctOTg0MmE0OTE4NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiPj/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElmIEW3VJRVrVK6v6uSMggKLhCEnrt1JwmfeEmdU+ScSYISsLL6BS6W
2MZCX+DGPR1eecP/jsF8ztyPritclu0pPXthmeo99SRxx0jAxLotqUEf3Ufetxhi
HuiYsJHzeqWQbb3kG0nea5lKBeFFVvl4FxNm/3iw3mM3GOFWvYqx6s6OOvvVDifB
HQs0N/qXIr5H2Ase9uGYAKKIuSCK9I2YiqyAXg5DRO4MYYMrgE3hYjBJ8f+TGIvs
cexOwKwemRr0Uptqx3H3msPdAgVyMNivkZMsJnqgQuwTwRJPiCsgTqJ0K64wdhe+
z78Y7Lo0cUKddmf7327GnqGN6M0yPFg=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:53 2026 by rpki-client