Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/67d19abb-a5ca-3a0a-b2fd-b4c5e5d424c8.roa
File:                     67d19abb-a5ca-3a0a-b2fd-b4c5e5d424c8.roa (raw, json)
Hash identifier:          vC1qhGmjtw5n7AHWLeLcCoYQJP8hkvOR7fHd/pDRy0o=
Subject key identifier:   D9:F1:46:6E:17:EF:91:EE:1E:01:DE:AD:E0:D1:60:74:1C:4C:98:41
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CAE57283E61E18AC89A448A60
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/67d19abb-a5ca-3a0a-b2fd-b4c5e5d424c8.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     18759
IP address blocks:        162.247.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:28:3e:61:e1:8a:c8:9a:44:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=1bce6b07-4530-4730-9025-8d98bb604ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:74:f5:36:90:11:43:cc:d9:d9:0f:64:29:61:
                    c1:7b:d3:e8:93:94:30:28:7d:fe:86:cd:c1:60:48:
                    70:5c:f6:fa:5f:6d:f1:e2:e1:c9:e7:34:b3:0c:48:
                    6c:bf:b5:a5:2a:25:36:09:77:5e:ea:90:2f:48:df:
                    0e:68:9c:38:ef:c9:fc:31:a8:94:15:2c:12:cb:cb:
                    d5:cc:63:c3:81:8c:43:52:d2:3c:e7:72:11:e1:3d:
                    21:24:de:23:4b:df:35:e4:bd:5b:e8:f2:1d:75:13:
                    5b:48:a1:91:1e:6a:ab:14:3d:12:b1:cf:8c:3e:8d:
                    3f:9b:a8:0f:cc:9d:a6:87:77:db:f2:bb:1d:31:51:
                    e3:ae:2a:cb:ce:93:c8:be:85:3e:5c:63:79:2b:cc:
                    e3:a2:6c:86:2b:4d:a1:b0:33:9b:27:cb:8c:03:75:
                    ce:fb:5c:11:ff:6d:dc:d7:32:63:3c:c4:be:43:26:
                    96:b4:3c:67:57:55:1a:86:55:a3:04:14:30:d1:d8:
                    7e:28:38:f0:10:8a:6b:ff:80:cf:19:11:dd:d9:a4:
                    86:89:37:08:57:6f:99:6d:6c:4a:4f:28:f8:72:a5:
                    f4:00:77:30:53:a6:f5:67:7e:5a:33:90:2c:4a:57:
                    7a:1e:af:49:95:9d:cb:d4:20:59:8d:09:28:31:64:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F1:46:6E:17:EF:91:EE:1E:01:DE:AD:E0:D1:60:74:1C:4C:98:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/67d19abb-a5ca-3a0a-b2fd-b4c5e5d424c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:82:9a:13:04:e0:b2:af:60:62:9d:4a:56:78:7a:5d:21:c4:
         63:af:14:ec:af:c4:62:9d:a5:95:10:48:5c:4b:d6:56:f8:d2:
         9f:e9:c2:04:be:ec:96:ec:4e:0d:00:7f:2e:1f:ae:eb:ea:f2:
         01:c6:89:18:86:46:65:f2:36:7e:0e:29:53:ae:1d:ae:36:a4:
         ec:ba:ab:da:cf:fc:f5:05:8f:84:bb:9d:fb:eb:23:28:d2:1b:
         4c:44:8d:b6:ce:1c:2c:fc:3f:53:2f:fb:98:b6:6e:87:7a:e0:
         d2:ea:25:b7:f0:11:bb:78:b7:84:71:68:b5:2b:79:b8:3f:cc:
         74:6d:74:32:35:83:df:8a:f9:f3:63:03:48:24:3b:d9:9c:b1:
         3a:b7:04:6e:72:d0:0d:69:91:c5:32:c1:52:a9:7e:f0:fc:85:
         c9:de:9d:b7:47:52:fc:e7:29:28:00:81:ed:87:ed:7c:0e:b6:
         20:8b:eb:db:d6:99:c9:7d:94:77:9b:ef:9f:ac:b7:21:d3:52:
         f3:77:87:45:b9:09:64:0a:d7:04:c0:47:c2:4e:69:e8:75:cd:
         a5:64:3f:f1:92:fe:ba:ca:19:30:59:8a:13:e1:b1:3d:e9:cd:
         3d:3c:64:a6:4b:e5:0d:02:3a:20:1f:99:1c:a4:4d:47:9c:a7:
         8a:1e:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:09 2026 by rpki-client