Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa
File:                     513b70a1-3c50-3168-a6a9-58b6b68249ef.roa (raw, json)
Hash identifier:          kqY3OIZoCrpU2UW981IyrbUTynp0bKSoLwWGQ4X6RDI=
Subject key identifier:   FB:DA:6E:98:6E:A0:1C:14:47:06:32:2E:5B:6B:21:94:1F:9F:39:2A
Certificate issuer:       /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Certificate serial:       010D0C9F4328584EA78804E44983C59DEA547D00
Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46634
IP address blocks:        206.220.200.0/22 maxlen: 22
                          206.220.200.0/23 maxlen: 23
                          206.220.200.0/24 maxlen: 24
                          206.220.201.0/24 maxlen: 24
                          206.220.202.0/24 maxlen: 24
                          206.220.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:04:e4:49:83:c5:9d:ea:54:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b282fcab-5f57-492a-90ca-73a6dc0271de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:ac:a8:ac:fd:ab:cc:8f:7c:1d:44:e8:7c:
                    a1:19:58:db:53:a7:c6:bf:07:48:2f:31:f5:7f:fd:
                    3c:a5:34:92:eb:52:5d:cd:c5:82:4a:6c:1a:16:b4:
                    de:e1:c6:08:79:d7:c4:63:b9:32:e3:ca:33:f7:55:
                    99:24:21:9a:5b:e3:65:9f:bd:10:88:3a:bc:10:3f:
                    98:7c:66:2e:50:54:32:0c:38:78:02:c2:0d:b9:34:
                    bc:4f:40:cc:a9:df:40:03:af:00:9f:75:d3:ef:11:
                    b8:8c:8e:c7:57:21:92:f2:01:98:b7:7e:54:a0:4e:
                    7e:8d:43:0c:8c:7b:b2:dc:89:a4:b6:53:79:54:29:
                    0e:b8:ce:05:7a:5a:ef:f4:46:7e:cd:6c:e2:72:00:
                    05:45:be:f0:e1:29:b5:54:84:cb:9e:f0:af:f7:61:
                    3f:3d:27:18:bc:b7:2e:ba:9c:54:40:0b:ba:72:ff:
                    56:8b:13:41:c7:20:be:3b:a9:f8:b3:a8:5f:81:24:
                    07:95:6e:ab:cb:6d:5d:ec:e8:02:51:6c:5c:35:01:
                    9b:41:43:88:d9:2e:26:8c:6c:8c:d5:63:59:73:59:
                    43:79:2e:29:4c:99:f7:62:c0:1b:2d:44:c9:fa:78:
                    e2:e7:52:17:7a:00:c7:77:63:a1:22:9f:aa:d7:1e:
                    c9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DA:6E:98:6E:A0:1C:14:47:06:32:2E:5B:6B:21:94:1F:9F:39:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl

            X509v3 Authority Key Identifier:
                keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:6a:cb:9d:e5:55:5d:27:27:3b:c7:93:86:06:74:3a:0c:
         ed:30:b0:88:a7:a5:c4:a9:2d:c5:ae:19:19:eb:cd:48:ca:52:
         2f:05:f7:c6:e0:c1:df:65:09:72:fd:cc:81:7a:c2:2d:54:7e:
         71:5a:72:db:3e:8d:b6:86:f1:55:aa:9e:49:b7:b8:e3:71:cc:
         f2:d4:ab:a4:d3:1e:19:1d:ee:ae:0b:03:bf:bb:7b:bc:1c:5f:
         61:dc:8a:d6:f4:71:c0:5b:b8:47:b7:61:79:13:e4:21:08:5e:
         2d:5a:90:e4:78:43:d4:ae:02:a3:d8:d2:44:4a:bd:9a:4d:d2:
         4b:a2:05:ae:fb:94:86:45:40:62:d9:7d:b7:24:b2:64:ad:a2:
         11:89:d9:42:c1:f6:64:c0:e9:73:3b:5f:62:04:0e:24:46:9f:
         b6:29:6b:32:6e:c2:73:cc:c2:0e:af:69:f2:4a:5e:59:b7:42:
         f2:5b:bb:59:d1:d7:c9:cd:18:85:12:c0:9f:7a:76:aa:c9:2f:
         42:43:6c:0f:29:25:f7:fb:18:38:5e:4b:50:31:30:61:32:44:
         66:88:25:2f:02:21:1c:55:cc:f4:eb:61:be:0d:5f:b1:35:7a:
         73:50:20:c7:3c:f8:36:2c:60:0e:0c:c8:f7:f6:86:3e:4d:14:
         95:02:72:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:18 2026 by rpki-client