Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa
File:                     845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa (raw, json)
Hash identifier:          AODhmPZ2pAR/lgEGlHsFOM+mUX/ruorMzejt5IreVms=
Subject key identifier:   72:49:F8:EF:18:E3:FC:9F:48:17:DD:85:46:F0:2F:34:53:F5:78:B7
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584DFA709A19319DE9DB841D09C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     376
IP address blocks:        206.167.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9a:19:31:9d:e9:db:84:1d:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=d2fb3c59-3609-4975-b8f8-e0eed410d5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:c9:b0:53:da:93:ce:29:36:d0:b1:d8:e7:
                    dd:44:50:7e:e1:c7:7f:27:67:a9:a4:dd:80:23:88:
                    86:e4:d7:a2:94:98:51:04:67:39:34:49:90:38:8a:
                    40:f4:bb:77:f8:a3:af:6b:cc:9f:52:8c:0a:da:74:
                    8f:f2:e8:53:84:ef:e1:43:db:2f:00:93:d0:cc:47:
                    d4:42:7a:9a:c7:27:ce:73:ac:f1:70:39:09:89:5d:
                    db:8b:9b:3d:b4:2c:10:e0:33:0a:0e:53:77:b1:59:
                    01:70:6c:42:24:9a:4f:c9:30:6c:5a:40:97:d1:cb:
                    47:f4:23:cf:9e:9e:f5:90:74:17:bd:d1:20:2a:95:
                    05:b9:93:0c:41:3c:de:f5:8b:18:73:37:d1:b7:7d:
                    50:17:78:9d:03:8c:0b:d3:bd:aa:56:aa:4f:05:d9:
                    2d:32:f9:ac:07:24:f5:bb:6d:7b:3d:b3:bd:94:37:
                    9b:f9:86:a5:69:63:bd:ec:48:c9:cd:0c:e6:38:de:
                    53:84:ff:fd:c1:57:c0:fc:cb:2f:49:1c:cc:5a:7a:
                    c1:5d:43:b6:64:d0:84:6c:8a:46:1f:9d:09:99:7e:
                    a1:3e:68:5d:dd:84:bd:9e:5e:70:46:f3:3c:a1:17:
                    f3:ad:c6:e0:cb:3a:69:b9:73:f4:73:81:33:6c:cf:
                    4d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:F8:EF:18:E3:FC:9F:48:17:DD:85:46:F0:2F:34:53:F5:78:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:16:d4:15:d7:37:43:72:4f:46:28:f2:92:bb:b8:ab:83:20:
         b0:93:f7:3b:56:16:e4:84:92:fd:5c:9c:a3:40:a5:b8:2c:12:
         8b:34:b3:ce:70:0d:ff:f7:8c:b5:63:f1:f3:53:24:c6:16:79:
         d4:50:0e:ae:65:05:90:ee:ab:97:e8:37:df:38:26:09:88:44:
         14:d9:90:5d:88:32:65:89:f4:81:0a:8a:e3:d7:e2:9c:96:74:
         3d:0d:3a:7a:3d:dc:07:fb:d2:8f:33:eb:a2:84:d3:52:f2:13:
         02:7c:81:51:34:b3:cb:2e:ae:12:59:1a:0c:ab:42:ef:2e:0c:
         93:d8:89:b0:33:2b:a6:a3:7a:c7:bd:dd:6f:e0:b9:9f:e0:5b:
         39:b0:42:75:5e:92:dc:73:32:2d:38:62:f3:ce:24:67:fc:f1:
         3a:7f:b8:c4:bd:1f:d8:1f:66:ea:7d:1f:b2:d4:7d:1f:0c:c6:
         5c:f3:3b:8f:49:58:09:ed:46:eb:ce:b5:42:a9:38:da:d9:69:
         c9:a9:64:aa:e5:2b:26:64:f5:19:a1:59:99:41:84:58:92:9f:
         da:8b:f8:dd:7d:53:83:ba:62:16:7e:69:85:a6:12:d1:3c:86:
         66:b2:78:fd:a7:bf:c3:fd:95:61:e0:84:d4:67:e1:3a:d8:9e:
         33:2f:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:28:15 2026 by rpki-client