Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bd5e2413-a2fe-3707-a043-9e04d1ab2ba3.roa
File:                     bd5e2413-a2fe-3707-a043-9e04d1ab2ba3.roa (raw, json)
Hash identifier:          QFrKUUkL5SzdfancaxS5vf+vYmiubI0MWFqdfoaDHxM=
Subject key identifier:   4C:96:05:FD:08:8E:E9:C4:8A:E0:F0:1C:9A:1A:B0:BE:BC:F1:27:01
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D703FE1A8FD79DC18AE3CEB60
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bd5e2413-a2fe-3707-a043-9e04d1ab2ba3.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     5769
IP address blocks:        206.108.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e1:a8:fd:79:dc:18:ae:3c:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=95800601-e3fd-4c89-baba-d31be52745d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:e3:b5:e6:77:4c:b7:74:2d:dc:00:3a:fc:
                    32:d5:7e:86:c2:c4:3c:5a:b0:8f:d7:23:79:0e:17:
                    06:79:a9:6e:1a:1f:82:5a:f0:73:4f:e4:8b:43:a7:
                    5f:f5:41:b7:65:c2:ed:04:22:24:9c:8f:3d:cb:a3:
                    52:6a:22:c6:6f:a7:22:ae:9e:3d:19:11:2b:c5:e9:
                    97:87:9c:15:a0:fd:23:20:2b:75:ce:0f:69:a3:01:
                    9f:84:8e:81:34:d6:00:a3:5f:05:29:f3:3b:fb:46:
                    a5:84:7b:38:92:e6:2c:aa:a1:d6:c1:29:77:cf:7b:
                    27:f1:9e:c8:ab:b5:47:f9:82:34:74:bb:3e:5f:e3:
                    be:c3:41:12:56:34:b2:7e:ad:c4:03:e9:fa:5d:02:
                    b6:2b:b4:2a:f9:a3:1f:14:b4:b3:70:7c:2e:19:68:
                    fb:16:ea:cf:83:21:a9:ba:80:93:c7:74:c0:1a:a5:
                    93:12:43:3a:8a:fd:67:29:a7:21:f5:c9:6b:93:89:
                    4e:30:7f:60:4a:28:51:ed:85:a2:52:2f:c6:99:08:
                    8f:e7:2c:fe:24:dc:2e:cb:90:6f:e9:43:e7:04:15:
                    78:41:04:89:72:25:17:8d:82:2b:7b:ab:35:2c:de:
                    24:13:4e:13:5b:1d:92:36:41:5d:59:33:76:1c:70:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:96:05:FD:08:8E:E9:C4:8A:E0:F0:1C:9A:1A:B0:BE:BC:F1:27:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/bd5e2413-a2fe-3707-a043-9e04d1ab2ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:56:7a:92:c2:6d:04:c8:da:71:49:c3:26:ad:84:72:88:a5:
         b6:fe:74:a6:fc:fe:ed:ec:24:d8:88:eb:d0:34:87:cc:53:be:
         eb:30:93:2a:7f:f7:a5:93:8c:00:3c:cc:b7:2e:90:97:b4:30:
         84:2e:a9:11:24:73:97:8e:49:92:cd:72:f1:ce:d9:a0:49:31:
         74:07:bc:8c:fe:cd:b0:d2:db:10:49:fd:d2:88:a2:cc:68:c1:
         c6:39:af:05:66:ce:c2:c9:3c:13:10:81:3f:fb:2c:e6:fe:ab:
         02:c1:85:a7:7a:f2:16:c4:e5:ad:be:4c:a6:ec:73:5e:a7:19:
         43:b3:92:0e:43:2b:f6:26:15:ac:3b:39:ef:dc:5a:7b:86:d6:
         16:34:be:12:0b:72:0b:a8:ff:7b:77:0d:e6:3d:bd:e1:9a:f7:
         55:0e:73:4c:6e:21:a3:67:d4:64:83:08:66:ad:9f:7d:42:4e:
         fb:51:f1:fe:fc:4e:9f:35:22:6e:df:dd:9c:e9:12:d9:a4:92:
         b3:43:f9:53:44:2c:fd:c8:61:be:b0:97:06:ac:3d:c9:10:49:
         0a:2b:8e:eb:bb:a4:dc:1e:ce:1b:8a:3e:29:3a:bc:11:22:4d:
         9c:95:09:67:a6:d2:72:1f:ce:18:56:2b:b0:e3:8c:2b:b3:88:
         e3:d3:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:43 2026 by rpki-client