Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42bb47f2-d589-35db-b4f0-830e783d4727.roa
File:                     42bb47f2-d589-35db-b4f0-830e783d4727.roa (raw, json)
Hash identifier:          UgBhirVU2q4queRAtGkiaWUe0nIUj/F/At0eh91sDMs=
Subject key identifier:   7F:8B:25:DB:BC:86:D6:AB:CD:CA:74:F7:DF:DA:1F:47:92:69:E4:8F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAB7F54AB94091AF22180
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42bb47f2-d589-35db-b4f0-830e783d4727.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        205.220.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ab:7f:54:ab:94:09:1a:f2:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=d45d725a-3beb-46a0-87f8-310d63846e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ea:58:57:13:53:4b:ed:4d:3a:d2:35:5c:29:
                    c3:8d:c7:7a:5b:03:6a:5c:83:ac:3c:e9:52:b3:a5:
                    47:ec:a1:a7:9f:83:ff:cb:4e:ad:7a:b0:4d:22:70:
                    a5:d3:7e:a2:47:1a:e0:72:b8:e1:88:01:23:b7:1f:
                    7c:97:da:25:a8:49:31:a5:0d:f2:52:82:9c:29:cd:
                    38:64:5c:20:18:11:d3:f9:b7:e4:c2:c7:8b:0f:8c:
                    d2:d1:58:63:90:e2:c3:1f:57:22:c8:10:a5:31:6d:
                    bf:a6:7b:38:e7:d5:38:25:ae:a1:3c:47:41:0c:82:
                    a1:a7:c9:85:ca:fb:ad:f9:66:d7:04:74:72:f8:4b:
                    52:75:58:9a:6e:16:a6:bf:a5:fc:67:96:d4:0a:a1:
                    24:23:de:26:ca:8a:49:48:0c:97:a1:bf:d8:59:4a:
                    77:fd:89:e4:e2:fd:ff:ae:0d:36:ae:22:bb:dd:4c:
                    17:18:f4:b5:45:95:75:25:b5:70:e4:c0:36:cd:1c:
                    f3:b4:5f:f8:5a:e6:ed:2a:53:4b:6e:f8:7b:7a:8b:
                    47:28:16:5d:dd:4d:b5:09:3b:9a:31:0c:9c:40:6b:
                    2f:47:f2:87:4d:3c:cf:0e:9a:c4:4a:f0:72:bf:bd:
                    e9:ef:9e:3c:9b:e7:f9:da:b3:8c:7d:8e:78:e7:7f:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8B:25:DB:BC:86:D6:AB:CD:CA:74:F7:DF:DA:1F:47:92:69:E4:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42bb47f2-d589-35db-b4f0-830e783d4727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:cb:6f:d0:65:20:fb:7b:8c:52:3b:be:a5:07:d7:a4:0a:
         e7:2e:91:ef:67:f5:c5:4e:46:41:47:d3:40:11:bc:0b:45:df:
         55:36:4f:48:22:6e:8f:4c:fa:8d:fd:ae:8a:94:a4:d9:b6:f9:
         81:87:06:6b:f4:84:30:55:45:95:17:12:d2:f3:72:02:20:01:
         ac:34:a0:84:d6:61:e3:33:9e:ce:56:b4:3a:4b:09:fe:aa:87:
         de:9c:b3:73:ef:57:b8:cf:50:c8:96:05:6d:61:94:f7:40:2d:
         da:a7:c3:7e:98:69:22:e8:5e:80:f2:60:de:49:a1:68:15:79:
         db:15:0b:c8:98:29:0b:9d:e7:1e:cb:81:c0:2a:d4:77:39:d9:
         37:0b:01:85:7e:34:f8:b2:da:3a:10:10:57:24:84:d0:82:e9:
         e5:38:63:e7:ea:e7:7c:a4:0b:f2:80:42:e6:ed:25:00:45:f9:
         1a:7a:d3:54:c8:0e:d1:ad:29:4a:1b:a4:09:13:bc:d3:21:c6:
         ac:0e:ab:37:26:85:94:56:2b:11:ed:01:0a:74:10:a9:93:f4:
         15:29:b9:a7:6b:8d:84:96:1f:51:cb:9e:90:d5:b8:ae:a3:7c:
         d4:c1:fd:e8:ca:24:45:ba:c9:d5:46:3f:37:b2:48:48:85:e1:
         a3:5b:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:38 2026 by rpki-client