Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e40b8b6c-b6de-3e06-afeb-a1b81eb82c9f.roa
File:                     e40b8b6c-b6de-3e06-afeb-a1b81eb82c9f.roa (raw, json)
Hash identifier:          rqpvccrhWRtDzjgzcJDGub15+4zwis8wiC2ORKvifS0=
Subject key identifier:   45:18:D8:D7:DD:F8:E5:0B:4B:F8:67:25:8A:02:7E:1D:F4:06:7D:64
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D60E4EC617FC0BC53D82F0AC0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e40b8b6c-b6de-3e06-afeb-a1b81eb82c9f.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        206.226.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:ec:61:7f:c0:bc:53:d8:2f:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=59e69763-441e-4bd1-8698-cbc597f3ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:ce:3a:dd:5d:d1:a4:90:82:8a:35:1a:9e:
                    1d:85:22:de:af:51:b6:e8:76:9e:9b:55:52:b8:b8:
                    59:db:d1:93:2b:74:a7:4b:c0:63:54:de:8c:2f:7a:
                    81:45:e0:7e:ad:94:c7:42:fb:95:b6:1e:25:f7:3a:
                    43:2e:61:d1:4f:59:23:68:bb:9d:4b:69:da:ce:03:
                    2d:79:ff:60:5b:bf:82:b7:a8:1c:3f:a3:c5:20:cb:
                    2e:18:98:96:5f:da:43:f1:61:05:45:97:ba:88:ea:
                    bd:51:ad:9f:7d:94:2d:9a:d3:66:35:56:9b:a5:02:
                    31:58:e4:b8:2f:fa:49:75:2a:41:82:ae:0c:84:ed:
                    33:97:f6:a8:93:94:34:ef:1f:aa:59:cd:0f:6a:b3:
                    3d:19:2e:d2:3b:88:bf:95:f5:1d:93:49:3f:5e:14:
                    d5:ab:d3:d6:e6:a1:28:24:1f:e2:d1:36:53:9c:bd:
                    45:54:94:66:ad:eb:8d:d4:e6:5b:a3:0d:24:b1:05:
                    3b:b5:97:e3:89:48:8e:53:8b:b2:48:78:fd:bb:9f:
                    88:0b:f1:90:f2:d0:36:95:4a:c5:12:3c:8d:b8:11:
                    72:ce:82:cc:ba:61:2a:6b:6c:d9:f2:6f:22:9f:17:
                    79:7e:7d:33:cf:9c:04:c0:f4:e1:07:fd:ba:f1:54:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:D8:D7:DD:F8:E5:0B:4B:F8:67:25:8A:02:7E:1D:F4:06:7D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e40b8b6c-b6de-3e06-afeb-a1b81eb82c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.226.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:14:2d:6e:1d:3a:12:b3:81:bb:77:e3:a9:26:fe:24:b2:ad:
         1f:dc:9c:6f:b7:48:85:eb:4a:38:16:60:66:17:e9:e2:42:5a:
         94:5a:f4:58:8b:87:81:aa:a8:5d:bc:3e:ba:cc:a0:c7:39:26:
         6c:f0:3c:24:52:11:6b:a1:86:96:2f:ad:d9:33:d5:5a:dc:a6:
         25:03:cf:ab:da:e9:38:a4:ee:cf:32:3e:77:e5:11:b8:ac:f4:
         93:51:0b:0c:f9:55:75:2e:37:75:8f:60:06:ea:5d:9f:78:60:
         d9:d2:13:b2:b8:1c:57:4c:ce:81:f5:fe:c9:8d:4f:49:db:d2:
         c9:ba:07:0d:63:c1:2c:f1:7c:b6:6e:3f:6a:e8:21:74:06:dc:
         35:f7:d5:0c:29:29:ac:36:9a:5f:06:0d:3e:8d:a6:97:76:a3:
         eb:05:11:5a:cc:09:6f:7d:0c:cc:ce:e3:d6:ac:aa:43:75:ac:
         18:e8:cc:85:c2:e2:25:0f:cf:aa:a8:3c:ed:37:1b:68:81:06:
         5d:07:ae:d2:14:ee:e8:66:db:f5:ae:6b:50:16:ba:07:f6:15:
         ee:76:11:f8:68:12:bb:40:20:d9:d8:6c:19:84:97:c1:1e:e0:
         ea:72:23:80:3e:ff:e2:62:dc:c9:33:f3:cb:25:6f:fe:25:c0:
         81:a5:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:46 2026 by rpki-client