Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/064e518d-0665-3aae-b904-6aaad16333f4.roa
File:                     064e518d-0665-3aae-b904-6aaad16333f4.roa (raw, json)
Hash identifier:          sxHViJXg3WtbOcxDjHkmWtmh16NmHwlCi9uFiujRmdU=
Subject key identifier:   09:68:61:69:4E:A6:DE:41:52:97:67:BF:B0:9F:B9:33:A9:3A:A7:D1
Certificate issuer:       /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
Certificate serial:       010D0C9F4328584EA786E5819354A3B9141F1C80
Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/064e518d-0665-3aae-b904-6aaad16333f4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30313
IP address blocks:        152.216.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e5:81:93:54:a3:b9:14:1f:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1caa1900-f825-4566-9a09-d018b1055e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:af:fa:82:35:7b:2d:5b:ce:c0:bc:08:af:
                    20:b2:5d:2d:c0:21:72:1f:d4:7e:2e:2e:e7:9d:1c:
                    2e:25:bb:75:7e:4b:14:dc:2c:60:e5:f3:79:b3:93:
                    a9:3e:66:02:05:9c:33:26:c4:4d:79:88:d3:8d:35:
                    fa:c3:26:fb:75:62:6c:44:f2:9d:cc:61:bb:f3:c5:
                    21:a7:e5:bb:ae:ed:cf:e4:8e:27:00:85:6a:4c:70:
                    c8:7c:bd:af:27:6b:a0:35:4e:b1:b8:49:ee:82:78:
                    cd:01:40:c1:24:9e:f1:b3:69:7a:8b:b5:6f:cb:c9:
                    d9:52:e5:d4:6d:30:5e:c9:08:ce:1d:21:cf:73:0b:
                    80:93:55:fc:3b:80:23:bd:01:0e:57:8f:ee:b9:2b:
                    da:a3:8f:36:85:ad:f7:e9:36:d1:ef:74:b2:c5:d1:
                    2f:ab:7d:ae:27:0b:d5:83:94:b9:c3:c0:82:68:17:
                    f6:c0:8e:42:75:6f:d2:cc:c1:24:5f:35:b4:21:8d:
                    09:17:c1:83:86:11:8d:ee:ff:1e:46:7d:d4:6e:31:
                    fb:05:8d:13:2c:d3:60:3a:85:95:3e:b8:47:b6:0b:
                    55:be:b9:f3:a3:82:e7:52:c4:36:b3:9c:10:ca:a0:
                    eb:ad:47:be:70:34:15:a5:e5:b8:a8:30:b8:79:22:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:68:61:69:4E:A6:DE:41:52:97:67:BF:B0:9F:B9:33:A9:3A:A7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/064e518d-0665-3aae-b904-6aaad16333f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.216.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:0a:0c:d3:30:31:ab:a4:8b:66:d2:a6:ca:bc:94:4f:ab:
         21:82:32:ca:9c:2f:af:66:24:9d:b7:40:48:ab:a8:06:02:14:
         20:ec:a2:b1:21:81:f3:7f:51:55:89:69:9e:2a:56:48:2b:89:
         1e:c1:90:cb:0a:4d:57:c7:3c:ae:3a:25:3f:5a:72:7e:3b:62:
         a3:98:e0:be:c7:d4:18:1f:a5:ed:f0:44:16:f7:6a:31:e3:11:
         63:9c:6e:d4:0c:6a:ce:cc:bc:2a:27:44:c5:04:02:7a:9c:e0:
         eb:7e:b8:a5:d2:2b:e1:5e:3c:fa:85:13:e7:87:82:d8:b1:6d:
         68:05:c6:ac:9e:29:87:94:f2:15:15:81:d6:dc:92:96:31:1f:
         fb:18:32:4d:88:33:ac:96:f7:58:0c:f4:5e:f3:89:d7:5e:4b:
         9f:39:ba:de:94:f3:5f:c8:32:64:96:3f:5b:57:1c:6c:d7:e4:
         54:20:40:c4:f0:37:ea:d7:b5:36:99:4e:53:e8:26:19:81:18:
         38:17:3d:a7:5b:97:89:50:31:4d:49:27:bf:a1:17:59:ee:fe:
         60:56:51:4f:52:4b:ce:57:14:f4:f2:f6:ff:ba:a1:24:f1:70:
         6a:52:ad:39:92:f5:74:29:81:be:0b:2b:22:5c:61:b4:75:90:
         94:c3:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:56:09 2026 by rpki-client