Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/61f92826-ffe7-3995-97b5-5664e2a3321e.roa
File:                     61f92826-ffe7-3995-97b5-5664e2a3321e.roa (raw, json)
Hash identifier:          OwSr4WTgpy75vP1sScrSMnURLbt41pHED3rSiSZEiog=
Subject key identifier:   37:16:7F:7B:A8:D3:68:07:A6:B1:3F:85:13:99:62:55:8E:66:64:BF
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584E1B798D407DAE1A41236B8D00
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/61f92826-ffe7-3995-97b5-5664e2a3321e.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     32277
IP address blocks:        206.186.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8d:40:7d:ae:1a:41:23:6b:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=f9fb6a9e-0497-4bf0-8cbd-81389585bec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:6f:14:90:3c:fc:d2:5f:37:ef:11:62:68:
                    35:91:ae:af:cb:78:70:a2:45:ae:3a:d2:79:51:44:
                    57:54:c7:ae:59:4a:37:25:ae:62:41:8e:cb:3a:31:
                    33:1e:15:dc:b9:dd:ee:31:04:23:f8:d4:6d:0d:ed:
                    91:73:68:73:0f:2f:13:78:17:18:1f:f5:07:ab:56:
                    a5:15:fd:3d:c4:de:da:e4:03:3f:eb:93:2f:8a:a6:
                    20:38:7d:a7:7b:cc:ab:2b:a0:3f:4e:55:d0:d6:20:
                    3b:b9:f8:76:a5:70:fe:2f:e7:1a:b5:d6:0c:22:13:
                    97:96:eb:34:85:1e:b1:3e:a2:27:ed:dc:8e:99:77:
                    60:4b:c0:39:3a:59:dc:eb:0f:8a:51:9a:e4:08:19:
                    25:74:b2:07:1f:cb:c7:af:40:0e:c3:81:66:e4:74:
                    6f:0f:5f:52:b3:23:31:6c:20:df:2f:69:ba:d5:38:
                    51:2f:d2:d0:25:58:16:4f:91:7e:8f:60:eb:dd:05:
                    ab:93:66:2a:02:61:e2:b3:2e:1e:ed:3c:57:ea:0c:
                    3d:38:bb:68:ec:05:f4:bb:b2:a1:78:42:ee:e0:6e:
                    42:cc:87:86:79:95:05:86:2d:60:84:51:73:ac:6e:
                    dc:a6:e2:79:99:7a:f8:5c:18:e6:49:df:c2:57:26:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:16:7F:7B:A8:D3:68:07:A6:B1:3F:85:13:99:62:55:8E:66:64:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/61f92826-ffe7-3995-97b5-5664e2a3321e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.186.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:92:7b:12:63:c6:c9:61:e7:3c:1f:be:e3:bf:a3:b6:9e:
         7e:1d:88:ab:c8:3c:ed:31:fa:7c:aa:22:d3:0b:75:be:1e:4a:
         65:2f:eb:3c:ca:27:57:d7:b0:d5:24:55:1b:ea:be:e7:06:32:
         a1:12:08:1b:01:19:f0:f0:e0:8f:be:8d:6d:08:84:f4:8b:fc:
         82:30:34:19:4c:3c:42:89:81:67:18:65:70:6d:6b:c3:89:c9:
         0d:4a:88:c3:3e:b4:b6:98:9f:9f:cb:f7:41:7b:f6:e7:b5:2d:
         86:5c:64:65:c9:d6:96:fd:7e:ee:4a:23:14:89:a5:c8:68:20:
         b2:fc:0c:3f:86:88:55:30:0a:6e:48:d6:1f:4c:67:d6:c1:bd:
         a0:eb:4e:ea:7e:62:46:f9:fd:12:9c:d1:29:32:90:3a:49:c5:
         2f:25:c9:ef:ef:3e:56:b7:f0:e7:d6:bc:0d:76:2f:b1:cf:47:
         a3:eb:43:43:81:0f:fc:69:75:f7:3f:59:7e:32:c4:40:68:ee:
         7d:59:c0:cc:8d:70:43:41:40:7a:97:f6:48:d4:20:cf:ba:5d:
         ab:c1:7f:fa:93:ec:64:93:5f:f2:3d:8a:29:b7:af:cf:91:9f:
         2c:b5:b3:a6:dd:ce:1b:3d:94:8d:80:05:86:57:cc:6b:da:6c:
         1e:e9:95:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:39 2026 by rpki-client