Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/f70b4207-9d81-343c-8366-de84e2638a1c.roa
File:                     f70b4207-9d81-343c-8366-de84e2638a1c.roa (raw, json)
Hash identifier:          fLRP4YtnJtzBwd1Rh6vSNulHBKRV0rNIH1AZ5ck4ao4=
Subject key identifier:   C3:D9:F3:D9:07:DE:9E:DD:C8:32:4A:B2:ED:7E:38:36:D9:09:C6:46
Certificate issuer:       /CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea
Certificate serial:       010D0C9F4328584E13198458448C94AC89913780
Authority key identifier: 24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/f70b4207-9d81-343c-8366-de84e2638a1c.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     210
IP address blocks:        163.6.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:84:58:44:8c:94:ac:89:91:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=5dc507d6-3eab-4daf-b140-6c7a8b0912e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:8a:6b:25:41:b4:d5:e3:ab:2a:27:3f:14:
                    2e:57:3d:2b:96:38:45:d0:6d:22:96:06:52:6c:40:
                    5c:b8:e0:1d:37:4f:48:26:c0:f7:96:5e:8b:94:b5:
                    c4:0e:0a:64:68:3c:de:7d:94:bb:2b:f8:b6:a4:6b:
                    c9:c3:f4:38:4b:81:2e:6a:71:e2:73:f9:5f:02:dc:
                    8a:2a:97:3a:a6:a7:25:d8:39:5d:54:39:1e:cd:89:
                    c5:32:01:c8:09:98:fc:91:d2:97:52:17:6a:f7:5f:
                    69:2b:c6:99:04:39:6b:e3:fc:90:52:7d:5d:a8:ef:
                    a2:58:56:4e:7d:ab:85:ca:be:aa:fc:01:77:98:67:
                    fb:29:25:49:19:a4:66:7c:87:a7:59:fc:da:75:93:
                    da:64:eb:54:12:4a:47:68:fa:bb:e2:12:13:e4:3b:
                    91:5d:b2:0b:37:85:62:f5:07:ce:dc:0d:18:9d:45:
                    31:1c:db:00:6a:87:27:09:9e:de:3d:72:d0:5b:2e:
                    6d:24:ce:bb:01:7b:92:bf:ab:ec:37:b9:d3:48:49:
                    8f:52:38:3a:9d:ab:6a:0c:f7:fe:e6:60:a8:96:ea:
                    fd:c7:09:0c:7d:7b:a6:b4:20:94:df:a7:01:9d:85:
                    e5:a2:fb:11:28:99:73:f6:79:9f:0f:4e:bb:6e:64:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D9:F3:D9:07:DE:9E:DD:C8:32:4A:B2:ED:7E:38:36:D9:09:C6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/f70b4207-9d81-343c-8366-de84e2638a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl

            X509v3 Authority Key Identifier:
                keyid:24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.6.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d9:18:2e:26:fc:96:7f:b4:c1:6a:78:82:17:35:fe:e8:9d:
         50:f9:23:69:a1:d4:6c:fd:4a:bb:9f:8b:a5:47:46:8a:f9:6c:
         50:bc:8a:bd:45:ea:53:c6:1a:29:01:ee:81:b8:b7:a1:6d:87:
         ba:4e:3f:e9:45:66:89:46:bf:91:2e:54:8a:b3:c1:e9:b1:3a:
         f0:b7:a8:6e:48:59:3b:63:ce:5d:bb:28:40:cf:bb:0c:24:58:
         ea:c7:68:1f:cf:6a:68:f1:24:28:8f:a5:61:e2:bf:68:28:11:
         54:c8:21:5f:f7:34:e6:3d:27:4f:38:25:cd:45:b1:80:71:d8:
         ad:41:0e:9d:62:8a:16:e1:00:b8:dd:7b:6d:2c:10:19:9b:25:
         b5:30:74:cd:92:96:39:73:fe:a8:af:3b:bf:31:5e:93:c8:a0:
         38:94:90:9c:0d:26:fe:15:5c:fd:37:ab:d3:97:67:e3:2a:69:
         ea:fa:ed:ac:f6:89:2d:27:cb:78:1e:f4:33:9e:ce:4d:81:c6:
         39:09:c0:99:d6:21:2f:19:50:c7:ca:e3:fb:51:b9:9b:34:04:
         a3:24:1f:f5:cc:0d:37:68:d9:bc:30:58:f5:2c:2a:70:1d:c9:
         87:73:8a:2d:08:96:5c:16:a6:2a:55:28:bf:27:1c:75:1b:4e:
         38:c0:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:04:21 2026 by rpki-client