Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c86ba5c4-91cf-353c-99f0-2b3e091f7629.roa
File:                     c86ba5c4-91cf-353c-99f0-2b3e091f7629.roa (raw, json)
Hash identifier:          4nYIyBbQvDHZ8SGwmLrTrr9Ak6ARUWdrfSUbsmIs0YQ=
Subject key identifier:   48:F4:4B:1C:F4:23:0A:12:EE:73:42:FF:F6:7B:EF:19:F0:6D:67:27
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB06CE42E2D937A61F8D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c86ba5c4-91cf-353c-99f0-2b3e091f7629.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     16487
IP address blocks:        207.61.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:06:ce:42:e2:d9:37:a6:1f:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d6b4c341-37c3-4c25-8206-f5f0c8fb87b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:1e:ce:64:f8:18:8f:bd:2f:0b:97:43:08:
                    e1:eb:d6:29:d3:a8:48:71:88:5b:2b:33:c3:ca:49:
                    b7:e1:59:c6:83:04:14:1e:c4:37:9f:10:a6:aa:ba:
                    e8:53:be:40:6e:31:04:d8:a0:05:b0:c1:42:f1:67:
                    a4:cb:c5:75:df:58:51:2a:73:44:e4:da:8c:25:c7:
                    88:82:36:73:a9:ee:ba:87:d8:7a:df:d5:8e:7e:4b:
                    06:66:c4:b4:5d:0e:51:42:e4:22:f2:87:f7:67:5f:
                    0f:0d:19:2c:dc:b8:8b:e4:ce:cf:ba:17:e0:0f:be:
                    b6:e1:36:b1:43:ce:1b:20:ea:c7:a0:15:6a:fb:3f:
                    80:3a:e3:87:f4:7b:1e:ee:71:30:30:e0:7f:50:33:
                    dd:ab:36:3f:ab:b0:82:fd:74:ac:c5:d3:10:c1:f6:
                    1b:b8:69:11:18:73:d3:02:62:28:b1:87:df:12:60:
                    8e:72:0f:9e:d3:b7:fc:5f:13:c2:ea:ef:aa:19:21:
                    4b:2b:38:ab:2a:6f:71:4f:2c:43:eb:9d:8b:08:30:
                    9d:dc:35:98:59:4e:60:92:79:56:3a:a2:f0:f5:12:
                    46:b5:11:f3:0f:3f:a1:73:36:61:f2:b8:ff:3f:6f:
                    8c:42:93:3e:b0:4d:65:28:41:1a:4c:f3:ab:4f:03:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F4:4B:1C:F4:23:0A:12:EE:73:42:FF:F6:7B:EF:19:F0:6D:67:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c86ba5c4-91cf-353c-99f0-2b3e091f7629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:12:7a:90:29:7e:29:52:d1:f0:7e:10:93:2e:e7:15:23:c9:
         a7:66:ae:8e:5b:20:77:f0:a0:ce:c5:48:d1:90:fb:a6:53:17:
         b5:58:ae:d4:47:19:34:ea:0a:14:7c:75:12:b1:4d:3a:2e:ef:
         70:31:33:92:93:fc:3d:51:ad:ae:b6:39:5a:6e:de:d7:b4:92:
         3e:aa:8b:5e:01:7f:ac:3f:90:77:65:3e:41:26:e7:38:19:e1:
         24:98:3d:a9:7d:51:ba:27:d4:1b:6b:39:51:b3:06:d5:92:de:
         d8:82:fb:44:5f:76:7e:17:83:ad:23:bc:ea:9e:05:92:e2:d1:
         ae:42:3d:eb:dc:a0:4a:2a:9f:9d:63:81:a3:ee:68:d3:d1:5b:
         d4:49:fc:52:bd:94:f8:0e:bd:7f:83:b9:d5:e9:97:d1:a3:97:
         82:85:00:56:00:dc:d3:74:f6:ed:1e:37:12:14:d4:7c:bd:0c:
         1b:79:7d:f4:8d:60:e9:dc:af:b1:5c:e7:98:f7:f3:c3:00:6e:
         53:ef:61:85:32:95:36:52:12:d7:b8:5e:c9:17:f2:83:44:1a:
         73:92:2e:64:50:1b:ec:39:a1:ef:b0:96:95:be:a8:9d:50:01:
         39:c3:bb:3e:f3:27:79:e1:9f:ee:3e:2b:44:7d:cb:74:e4:11:
         8e:5b:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:35 2026 by rpki-client