Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6de889d6-61ac-32e4-9dc4-7656461b71d0.roa
File:                     6de889d6-61ac-32e4-9dc4-7656461b71d0.roa (raw, json)
Hash identifier:          z32B2dEv/VpJI0FfdLJMNcjnvE19dKrRM7BT1Qoyalc=
Subject key identifier:   A1:A0:82:A2:56:3F:49:24:A7:75:6F:D3:B3:A3:31:3D:50:94:DB:98
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584D0912B2342CE1DC1DD7D69C80
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6de889d6-61ac-32e4-9dc4-7656461b71d0.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     22351
IP address blocks:        216.250.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:b2:34:2c:e1:dc:1d:d7:d6:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=b5c6e8ed-d2e1-4655-8e7a-a37ee872c2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:45:df:c9:6f:d7:e4:7e:69:26:50:70:86:
                    a2:71:f7:f1:29:3e:f7:cf:ff:d2:99:58:89:ab:e8:
                    ab:a0:bc:88:74:7c:a7:b9:41:b8:46:b0:af:3b:e4:
                    17:e5:87:45:61:85:76:af:7c:8f:ba:c5:62:61:c0:
                    7d:6b:5d:ff:25:0d:80:61:39:ea:09:09:54:91:11:
                    94:90:fa:e9:c1:c5:05:91:e6:b0:1d:ae:75:b7:26:
                    e4:34:15:61:2a:d9:ab:af:fe:ef:c7:bc:79:10:ed:
                    d8:3f:a8:24:3c:8d:80:1e:03:6c:43:e2:03:2b:50:
                    09:3f:b0:54:bb:80:99:87:57:67:af:74:d1:00:0c:
                    7f:42:80:fa:32:83:b6:a8:3b:c1:90:d4:34:c4:82:
                    65:32:5a:3e:91:d3:22:f0:94:32:54:fa:af:f3:55:
                    86:ab:da:63:72:a9:b1:7c:f2:48:c7:8b:97:9a:36:
                    7d:80:df:0c:b9:79:8a:72:7a:9a:4b:10:53:be:95:
                    77:08:83:b3:77:2e:2f:ff:17:a0:c9:b6:fd:37:e5:
                    35:33:7f:54:8e:a3:ed:d6:fd:23:29:07:b2:be:f3:
                    0b:a8:04:f4:5a:2a:f3:e5:fd:54:df:56:3e:b2:71:
                    d0:72:50:7c:62:d5:f1:9c:e6:60:12:c0:01:a9:3a:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:82:A2:56:3F:49:24:A7:75:6F:D3:B3:A3:31:3D:50:94:DB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/6de889d6-61ac-32e4-9dc4-7656461b71d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:3c:cc:ba:9d:f0:31:b2:bf:5a:ea:1e:f0:98:f2:80:c8:
         52:d6:b2:82:78:aa:a8:b7:bb:b8:f1:18:4e:ce:18:46:a9:37:
         2b:78:74:bd:13:e8:b8:bd:66:cc:01:e3:ce:84:9c:ce:86:ad:
         0c:18:be:d8:2e:65:23:e8:5c:dc:7b:fd:83:09:bc:b4:ca:54:
         7c:31:0f:55:ce:b7:11:98:f5:b3:24:97:88:83:46:00:39:01:
         b0:53:e5:fa:dc:ee:74:4e:99:80:ec:53:a7:8d:97:1f:5a:5f:
         58:a7:eb:1a:1e:48:3e:3e:fc:7c:96:29:19:bb:65:38:f5:5c:
         82:57:70:95:66:bf:0b:b5:72:03:2c:17:b4:4a:b1:c9:b7:4d:
         83:aa:f1:ad:0f:61:c1:2d:33:d9:61:4b:75:dd:f0:68:cf:d6:
         0c:36:fe:92:53:e9:ab:f6:d7:71:1c:83:85:7b:05:2e:75:97:
         58:66:f2:af:7a:d0:c5:bc:7d:e4:4d:c3:12:51:99:58:a2:5b:
         ed:a5:e8:bc:31:9c:c7:ec:fe:e8:18:2b:10:f0:9f:c5:5f:b5:
         36:11:a4:9f:0c:23:cc:6e:2e:6b:ad:06:8e:04:65:05:53:5f:
         44:fb:8c:63:0b:e8:b5:3c:42:12:fd:92:a5:54:c3:d0:cd:9b:
         93:22:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:47 2026 by rpki-client