Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/6104f217-7d47-36a1-a05c-43e9aa7928c3.roa
File:                     6104f217-7d47-36a1-a05c-43e9aa7928c3.roa (raw, json)
Hash identifier:          WRIU2MWMP6YEtIsARlKd2LLKg7cHStJzhzh+52vnXsM=
Subject key identifier:   9F:59:3F:67:6A:27:F6:26:23:32:FD:5C:0B:F6:47:55:D5:99:0C:68
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EA44511E0F90208BA8C7EAB80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/6104f217-7d47-36a1-a05c-43e9aa7928c3.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6922
IP address blocks:        204.158.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:11:e0:f9:02:08:ba:8c:7e:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=d6492fd7-a0a9-491b-bc3e-424b1f1db4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:41:0f:1c:81:e2:87:d2:30:40:60:b3:29:
                    78:08:8f:5d:b5:1c:5a:0b:b4:f3:6e:fd:94:4e:de:
                    a2:ae:e2:88:37:5e:62:22:88:ed:82:73:c3:da:8e:
                    e0:40:34:d9:60:1b:7a:c0:cf:98:c7:60:e6:d3:9f:
                    2b:ef:1b:8b:4e:f8:f4:0c:bb:1f:3a:a5:e0:67:ae:
                    74:8b:70:f7:02:2c:b8:53:8b:3e:bc:59:2c:3b:e1:
                    34:c4:fe:e1:90:c9:a1:65:a2:6a:6d:20:75:93:f3:
                    33:6f:f8:6f:b6:61:d4:ed:64:4a:a8:c2:6f:11:b1:
                    e7:c9:ef:af:a5:d3:22:48:09:d5:1d:24:86:9d:cd:
                    ad:dc:c3:b7:54:54:5e:83:ee:a9:52:dc:1c:fe:99:
                    bd:0e:90:71:17:7c:51:a5:22:59:28:06:56:ee:5a:
                    fe:09:c1:5d:59:80:e4:be:0f:aa:47:42:28:77:4b:
                    d7:4f:61:79:a2:b5:5a:33:02:3d:bb:6a:34:57:60:
                    9c:19:12:84:ed:6a:78:9b:38:be:39:5a:4b:fc:9d:
                    74:12:20:33:c0:b6:ad:f4:0a:ba:d9:13:d8:61:6f:
                    e6:14:4b:b3:99:4e:81:2f:00:ff:a7:8d:fc:51:11:
                    c0:de:40:ca:fc:c3:b8:0f:91:4d:4f:b3:be:d4:f0:
                    30:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:59:3F:67:6A:27:F6:26:23:32:FD:5C:0B:F6:47:55:D5:99:0C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/6104f217-7d47-36a1-a05c-43e9aa7928c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.158.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9c:bd:a4:ef:13:bb:d4:d0:32:cb:01:9d:3a:84:4f:55:47:
         21:38:b4:b3:4d:24:67:c7:aa:97:12:a4:2b:08:47:92:45:74:
         f8:5c:75:6d:d4:bd:64:f8:9b:f3:81:d4:9a:46:24:4f:1c:1e:
         26:bb:b2:e9:45:a5:d2:a9:25:4b:42:40:ea:15:4f:d0:90:88:
         22:ac:9d:b6:80:4b:47:1a:f8:ff:23:ab:b2:95:83:9e:46:3e:
         d2:55:71:47:f7:23:49:dc:e3:02:51:94:c6:e8:00:74:8b:84:
         04:40:88:c5:34:1f:60:e9:ac:d4:23:2b:85:1d:0b:96:5b:f8:
         72:80:68:52:95:c2:90:db:b5:63:0c:a6:8b:1b:62:e8:7b:ec:
         3c:84:86:f9:e5:4b:6d:71:c8:a3:88:dd:33:43:86:86:a5:e3:
         88:e9:db:22:0d:55:22:19:cc:fc:73:39:96:57:3c:8f:97:39:
         38:b0:c3:bd:0f:24:a5:5b:b0:5c:e0:ae:78:f9:45:13:d6:63:
         c8:99:72:6d:13:45:d3:a1:73:5f:99:54:56:0c:8c:af:6d:2b:
         ca:32:d0:14:9c:78:c9:f2:16:25:0b:47:27:34:42:ff:7a:e6:
         dd:9b:7c:f2:36:2d:01:f5:45:4e:24:5e:e6:ee:07:38:06:67:
         bd:74:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:53 2026 by rpki-client