Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/e6830e62-6812-3c22-a972-938925106be5.roa
File:                     e6830e62-6812-3c22-a972-938925106be5.roa (raw, json)
Hash identifier:          B1x7JcdiQW/nHznt0+9E4iB+Wm9l9BNwRS9x05YsxiM=
Subject key identifier:   C2:5F:97:FC:41:61:DE:8E:33:6B:8A:90:41:F7:9B:A6:DB:5C:99:E7
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584F173236D42D0ADED0EF062800
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/e6830e62-6812-3c22-a972-938925106be5.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     33460
IP address blocks:        216.125.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:36:d4:2d:0a:de:d0:ef:06:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=c04a825a-ecbc-47b0-9250-d445f351cdb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:a1:c4:9a:32:89:c7:77:04:7f:86:bd:a9:
                    11:90:c7:7e:b9:33:1e:ad:9e:29:39:88:61:90:40:
                    97:13:11:41:1f:5a:51:44:8a:0e:7f:2f:aa:d9:74:
                    d0:27:a8:f9:de:93:bc:6f:4b:59:f0:c9:55:eb:d5:
                    1f:64:27:62:96:02:b7:97:09:06:1a:ec:d2:e3:14:
                    cd:64:39:03:cd:24:bd:ec:2a:21:ad:cd:e2:1e:98:
                    c6:1e:05:19:63:54:bd:68:d8:62:43:f7:88:2b:c7:
                    f6:48:73:27:e3:f8:80:fd:49:0d:52:7f:1b:cb:28:
                    ee:26:57:47:8e:40:6a:fc:63:7e:8d:c5:5f:16:76:
                    be:18:0e:ce:4d:42:63:84:38:40:b2:a4:17:0b:79:
                    b6:33:5b:50:ec:9f:53:4c:8a:57:91:0f:a1:23:ca:
                    74:f1:4e:af:39:b9:4f:19:d8:b7:f4:e1:cb:67:a4:
                    79:05:c6:5b:3b:4f:a1:0a:a5:33:5c:e8:17:26:3d:
                    70:58:18:4a:67:31:2a:2e:66:73:c0:26:bd:48:58:
                    98:07:5b:7b:79:be:cf:30:e2:1b:4b:11:f4:41:a8:
                    33:61:85:40:c1:2b:0e:1a:a0:9b:35:b5:27:56:c3:
                    6e:d4:05:0b:f1:6c:e8:ae:0f:02:4c:b1:ad:fc:84:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:97:FC:41:61:DE:8E:33:6B:8A:90:41:F7:9B:A6:DB:5C:99:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/e6830e62-6812-3c22-a972-938925106be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.125.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:1e:ab:c2:44:2b:8a:2a:aa:ed:d3:c4:10:76:ed:66:5b:08:
         51:b6:2a:53:c9:42:34:b3:df:69:e0:f4:fc:44:06:5c:47:c0:
         aa:78:93:cf:25:fa:4b:e8:5a:46:41:8b:2c:0a:1e:8a:98:ee:
         b4:da:52:a4:fe:c9:c4:67:d5:e9:f1:a2:ba:f0:3d:0c:7b:e3:
         d6:79:6d:e4:8f:51:c8:77:71:90:65:32:d4:37:b8:ff:09:a0:
         5d:01:89:e3:fe:57:42:7a:80:2e:a2:60:8b:d0:8d:4a:40:9a:
         3c:c2:cd:81:6a:66:bb:32:08:91:71:07:20:50:e7:77:7b:15:
         fe:e5:eb:81:ff:58:2f:ac:19:91:fe:a4:7b:1e:1e:c0:97:9f:
         a9:70:17:87:e6:77:78:7b:24:df:a0:56:83:ea:e6:0b:5c:63:
         2f:f2:75:ee:bf:c5:1a:61:50:35:0a:bc:b9:88:98:50:e5:c5:
         f0:04:07:9f:fa:a9:d5:f6:d5:08:bc:73:05:fd:a4:0b:05:e4:
         37:0b:ca:0e:fa:77:82:3c:99:ed:87:5b:dc:3e:0c:4d:5c:43:
         1c:b1:ab:26:8c:15:c2:d9:c7:83:e1:a0:58:7f:bc:ea:84:9b:
         f1:55:8e:e2:19:28:03:98:37:5c:f0:3a:7e:74:c4:71:01:04:
         93:00:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:58:02 2026 by rpki-client