Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f203a79a-4d3a-3fb1-9ade-7369d4742a2c.roa
File:                     f203a79a-4d3a-3fb1-9ade-7369d4742a2c.roa (raw, json)
Hash identifier:          Fr4dSK6ukT1pRcAQocPYYputQpBTzVKlu/dhRdWFTPg=
Subject key identifier:   27:60:E8:54:09:32:F2:4F:99:5F:71:AF:93:88:6D:82:B0:65:B1:47
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D55BA3E590790E57F0E311AA0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f203a79a-4d3a-3fb1-9ade-7369d4742a2c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     199458
IP address blocks:        206.123.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:3e:59:07:90:e5:7f:0e:31:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=648398ce-b6a7-4696-a018-cfbd18c10789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:c0:38:be:f2:90:c8:ad:1c:ce:51:4b:1a:
                    30:f0:61:e7:60:61:ee:4a:04:71:f2:42:e5:7b:af:
                    2c:6b:27:72:8a:c9:61:47:24:2e:5f:d0:5a:50:94:
                    a9:93:3f:ca:ec:5a:e5:af:5c:a9:02:18:6b:5b:99:
                    24:4e:c2:24:18:ab:f9:e0:c0:68:e5:6e:5d:da:bf:
                    31:4e:20:dd:ba:b0:e6:8a:f4:4c:6a:ac:0c:75:07:
                    60:bf:d5:3a:39:6c:b8:2c:25:70:16:40:3f:9b:91:
                    28:68:a6:1f:57:82:78:29:78:5a:75:f8:d0:e2:87:
                    7b:89:13:87:57:b8:f2:e6:e9:27:cb:0a:1d:10:fb:
                    80:0f:d2:1e:8d:cd:fe:0c:55:f0:33:01:d7:b0:aa:
                    ba:88:27:38:30:e7:cc:8a:a6:9f:71:5d:5f:d0:7a:
                    a4:01:5f:77:23:c2:5f:29:15:90:12:12:06:bb:c8:
                    e0:90:55:73:86:ea:81:5a:38:a5:61:d9:ce:18:d3:
                    dd:3a:88:76:1d:5b:c4:9f:18:47:77:3d:87:6a:3a:
                    60:b1:70:7e:76:32:32:66:7b:e9:ab:67:f0:9d:51:
                    41:0a:e6:b8:3e:12:3b:c1:67:a8:e8:2e:56:da:2a:
                    91:c1:bb:78:c3:f7:e0:8c:27:07:a4:07:4a:94:ed:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:E8:54:09:32:F2:4F:99:5F:71:AF:93:88:6D:82:B0:65:B1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f203a79a-4d3a-3fb1-9ade-7369d4742a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:17:b0:b1:60:dc:07:12:60:78:35:d9:4f:c8:05:d7:0a:e4:
         03:58:1d:c4:f0:75:59:c3:96:bc:7a:43:11:0a:58:f7:14:39:
         cf:a1:7b:9a:a3:3e:00:82:c4:96:d2:d1:23:49:f7:08:96:47:
         e3:aa:6a:51:20:08:4d:1e:44:7f:7e:5f:96:09:c8:71:95:22:
         ad:c8:b2:9c:e1:4a:53:74:99:ba:7d:08:63:a6:00:1a:2e:23:
         72:1a:6f:0a:88:53:bd:94:c9:b4:9b:91:bd:0e:b5:33:2f:b1:
         28:82:cd:82:fc:37:1d:c0:d5:a8:ba:9d:73:91:27:9c:d6:d6:
         b0:af:b1:83:b4:53:0f:d3:a0:74:b2:94:2d:5d:4b:f4:08:94:
         a0:14:bb:71:dd:19:94:43:99:eb:2b:b1:1f:c5:7a:dd:ae:c0:
         cc:6c:4e:ec:ca:cf:e2:91:04:8c:83:91:f5:fb:2d:1a:e2:6d:
         a2:b7:5c:e0:8e:7d:28:d8:97:b2:36:a3:5d:d3:50:17:6e:9d:
         36:8e:e8:38:18:56:6f:cd:b8:80:fb:ea:03:20:46:05:18:3f:
         8b:e1:d4:e9:3f:d6:d5:d0:07:be:9c:92:04:97:32:54:7d:8b:
         f4:74:e3:25:da:c2:95:60:cc:df:62:13:60:0c:c7:0d:9d:d8:
         7d:a7:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:37 2026 by rpki-client