Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/60f189cc-6325-30c7-b494-18d58e826679.roa
File:                     60f189cc-6325-30c7-b494-18d58e826679.roa (raw, json)
Hash identifier:          85Usq3ePBYZ8CthqUTJV8299FGZtZgBjaXQhf88+Xs8=
Subject key identifier:   EE:3B:A4:5E:30:01:E6:8B:79:EC:A6:B7:77:61:7F:EE:AB:45:05:97
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584E1FA99988B7532B0BCECE6024
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/60f189cc-6325-30c7-b494-18d58e826679.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     6994
IP address blocks:        64.201.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:99:88:b7:53:2b:0b:ce:ce:60:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=c954b8a9-ef0b-490d-ba03-58d837e622b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4b:cd:89:b8:6f:4c:d9:b2:a8:58:b3:01:31:
                    ec:00:22:00:56:b2:d2:8d:18:96:c4:d3:f5:7e:19:
                    46:3f:bd:f3:3f:20:04:8d:0d:d5:6a:47:a2:54:dd:
                    49:41:72:6c:8e:6e:98:55:16:c7:f6:72:0a:e9:fd:
                    f0:75:95:5f:29:3c:42:67:3c:07:b7:7b:64:8c:70:
                    79:3a:c0:fe:ba:6d:f2:d4:07:cd:c5:ec:88:b1:24:
                    fc:7b:e8:99:8e:75:b7:03:6e:79:4f:bb:41:b7:48:
                    9e:c9:21:71:71:87:0b:42:07:cd:71:2d:94:9e:ca:
                    7e:14:97:98:e1:cb:d5:df:ca:4b:8c:33:2d:1c:91:
                    62:76:0c:36:59:72:ba:d9:79:45:42:aa:7b:41:f0:
                    c5:fa:42:f8:f2:db:16:1b:78:46:45:1d:f7:39:e1:
                    a6:91:7e:30:5e:b4:8e:8f:a8:3e:69:49:ad:0e:b3:
                    f2:d8:cc:5c:d8:be:d0:2e:5d:14:b1:2d:5a:f1:24:
                    8d:f3:3c:5c:0b:a3:46:ba:e9:02:e6:68:9f:82:78:
                    e1:3b:c3:e4:cc:87:1d:27:87:61:a7:3a:9b:b2:7f:
                    18:a8:50:63:80:1f:36:94:80:64:31:fb:1f:84:ba:
                    47:8a:2f:87:c0:14:14:05:cd:d0:46:62:d6:67:fe:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3B:A4:5E:30:01:E6:8B:79:EC:A6:B7:77:61:7F:EE:AB:45:05:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/60f189cc-6325-30c7-b494-18d58e826679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:76:84:72:54:3b:40:aa:f0:85:3c:88:cf:58:b0:61:65:f0:
         c7:2f:b0:57:91:c9:13:d2:43:0b:bf:73:29:2c:fc:78:59:6d:
         fd:5e:84:9c:ad:cb:01:93:dc:11:20:e0:9c:8e:02:ce:c1:4e:
         bd:a0:4b:07:fa:fd:4a:6a:0e:ab:3a:f3:5a:76:53:9d:ac:1b:
         6e:49:2f:b6:0c:b6:4d:ae:ea:77:1a:59:c6:19:b2:73:4a:a4:
         1a:b8:4b:3d:24:b2:bb:ed:6f:f7:cd:49:68:1a:5b:00:5d:12:
         7f:91:71:b4:0e:3c:92:49:6f:90:3a:e6:91:2e:86:73:be:5f:
         58:31:50:b9:82:ae:85:62:e8:a9:63:ac:e6:c5:6e:04:5f:4d:
         df:63:1b:07:a1:f1:98:1c:e9:60:a5:e4:56:37:fb:ed:7a:61:
         81:df:38:4d:32:b6:65:74:a5:53:92:21:67:11:40:0c:dc:25:
         10:11:35:69:c0:e6:18:f2:11:ad:6d:08:3d:46:9f:df:78:d6:
         3a:9c:e3:3b:a5:a0:a6:95:4c:6f:ee:43:cb:2f:32:14:90:d2:
         c8:ab:e9:34:f3:3f:ca:f4:97:ae:e4:7b:ba:61:9b:b0:cc:86:
         51:09:19:aa:1e:aa:f0:42:77:b7:d3:e7:38:85:b1:5c:3c:73:
         b5:d1:d2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:06 2026 by rpki-client