Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
File:                     a96f000e-3ea0-3413-9d0e-ef701db4c430.roa (raw, json)
Hash identifier:          R/7Om+TcZyYZYJnI57vAZyjGcJZ2yP5obhlG5xtA5ss=
Subject key identifier:   F2:28:42:F7:F5:F6:48:28:0A:F0:2E:EE:A7:A7:7A:1D:70:56:98:81
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F4328584D4D5A797382672099CE68E380
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     40676
IP address blocks:        206.183.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:79:73:82:67:20:99:ce:68:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=b9e492b2-97dd-442e-9b24-bccbddfe588d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:eb:42:53:3e:70:63:67:3d:22:f3:42:73:
                    7b:3e:9c:83:1d:27:6a:08:ba:74:8b:9a:80:fb:23:
                    63:d8:85:a0:dc:99:41:f6:35:a6:0f:85:be:81:d1:
                    89:bf:2a:fc:fc:06:8d:7f:da:1f:9b:f1:53:8f:c7:
                    3f:0f:bb:1d:fe:ea:40:5a:55:ed:c7:67:ae:ed:86:
                    3c:f8:2c:59:ca:9d:ef:7b:ae:bd:21:9a:dc:0a:e7:
                    33:a7:ed:71:35:8d:ca:f6:31:a0:10:66:e7:5f:62:
                    24:7e:64:2a:d5:db:3d:36:59:34:65:42:47:2f:90:
                    95:e2:35:87:a6:89:fc:da:3c:63:4e:93:8c:0b:2f:
                    4b:0f:7b:6b:1b:0c:9c:94:6e:53:69:7b:5d:80:f2:
                    87:37:3d:92:8e:b9:8a:0c:e0:f1:00:4e:4a:b5:cf:
                    df:f2:88:15:e2:c1:5d:04:a1:43:11:23:15:64:17:
                    fc:89:5c:12:eb:57:3d:fc:b4:19:38:ec:b2:18:48:
                    5e:fb:9f:73:8c:3b:bd:1d:40:02:c7:65:ff:6e:e8:
                    c5:d1:15:b3:a4:1a:b1:fa:46:8b:85:f0:7f:d0:50:
                    ca:4a:ae:3f:40:b1:8f:80:62:73:63:1d:ca:b4:d7:
                    22:af:cc:c9:7c:65:d4:9b:f6:0d:d9:82:20:3c:c8:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:28:42:F7:F5:F6:48:28:0A:F0:2E:EE:A7:A7:7A:1D:70:56:98:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/a96f000e-3ea0-3413-9d0e-ef701db4c430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:71:7a:46:bf:91:f8:7b:e3:93:f5:75:05:33:3e:6f:30:
         ba:a6:c6:ce:f2:05:78:d8:c9:3f:7c:74:a9:12:5f:aa:bd:25:
         76:2b:ef:14:bb:35:0a:6d:c9:0c:29:16:2c:fa:55:a0:9e:91:
         5b:9f:19:54:7d:ba:20:ae:ba:1a:a2:33:7c:34:00:29:fc:96:
         66:22:dc:46:f7:a6:13:6b:48:81:30:5e:44:49:64:c6:a8:d8:
         53:53:71:e4:66:d3:5e:be:1b:68:5a:1d:69:e0:be:5b:41:af:
         08:bf:12:7d:ce:6b:fd:bc:68:a7:0c:5b:e4:21:68:7d:7a:99:
         28:f7:ef:1e:fe:c5:24:48:c1:85:22:cb:37:64:ec:19:42:b0:
         a7:d7:5f:7f:c3:c8:02:3e:53:d3:fd:a5:46:2d:2e:7f:02:5b:
         fd:dc:6d:fd:2c:e7:ec:ce:e2:57:f2:fa:0d:c4:cb:30:de:07:
         70:5c:1c:c3:50:b8:e1:2f:e4:22:f1:e9:72:c2:69:a0:da:dc:
         97:bd:46:5e:91:24:9d:b6:bb:b6:a3:8d:9b:af:1d:4e:44:e4:
         39:56:8e:08:3b:93:90:7c:a2:56:70:4f:2d:0b:c1:d8:b9:ba:
         4b:76:a9:f4:08:24:34:9e:b2:bb:60:73:56:2e:b7:f9:c8:a7:
         50:b8:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:50 2026 by rpki-client