Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa
File:                     6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa (raw, json)
Hash identifier:          /UgucRq6LZS/SnQUYleBAitSOOU56TzYh07rEMeZKlE=
Subject key identifier:   BC:30:77:84:B2:46:CF:34:7B:A5:2D:9E:6B:94:91:71:38:EE:3E:A0
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584E0435FFE10F377AE853F32A80
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     29802
IP address blocks:        186.190.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:ff:e1:0f:37:7a:e8:53:f3:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=973223f0-344e-44cf-be17-a3b14c2ba76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2c:dc:9e:49:0e:68:07:66:f1:ee:cd:9c:73:
                    89:2b:e5:9c:6b:90:de:eb:b4:7c:f7:2f:f2:63:b1:
                    ab:f1:c7:15:2f:ae:e6:80:e0:1c:96:f9:a8:64:d7:
                    f5:d9:23:fa:aa:b7:d8:cd:a8:75:35:4c:6e:86:86:
                    1b:83:46:6f:5d:c6:be:a1:85:5f:89:00:60:c8:b6:
                    12:80:9a:2b:35:06:a2:be:90:c9:f1:4d:bd:bd:cc:
                    66:cb:06:36:49:fe:f1:bd:c8:db:94:ef:b3:52:13:
                    6a:ae:56:42:79:c1:d0:a9:de:7c:d7:83:70:e9:fc:
                    92:03:21:9e:b9:44:94:7b:06:cc:70:b3:3d:4c:cf:
                    8f:84:a3:fe:58:8a:c3:c0:cf:05:d1:d7:fc:87:f9:
                    9d:15:eb:5d:65:4e:01:08:b4:ea:d6:e4:24:0e:f6:
                    59:11:6a:91:72:7c:7b:9f:a4:1d:15:01:65:cd:5d:
                    a3:f3:3c:c3:c7:7f:77:5a:13:69:b5:fc:00:b8:be:
                    2c:dc:b0:98:76:70:da:c8:7e:bb:2c:ba:9d:8f:b8:
                    b4:30:f9:cf:a3:6c:6c:fb:2e:8d:7a:58:cd:f1:bb:
                    8c:fa:36:b5:ef:b7:b9:33:be:0b:3c:26:03:90:35:
                    e5:cd:e8:e3:75:35:64:69:2d:5c:61:72:9c:f5:aa:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:30:77:84:B2:46:CF:34:7B:A5:2D:9E:6B:94:91:71:38:EE:3E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/6e3736c0-7b6a-329b-b7a9-ffcecec9d5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:55:41:7a:b8:a4:57:04:eb:67:85:5c:fd:d4:64:5d:d3:fe:
         15:00:29:f0:fc:9a:63:9d:91:cb:0f:52:18:e4:c9:c6:eb:b3:
         3e:a5:ce:9e:a3:e4:91:3a:92:83:24:5a:76:5f:3b:46:75:d6:
         86:75:f0:e8:42:ae:13:0b:f0:5d:f4:b1:17:bb:74:c8:08:b9:
         d0:29:18:45:a7:4e:6d:3e:42:e0:06:d4:25:4b:ce:1c:29:32:
         85:07:94:ab:32:b6:46:a5:00:4b:a5:0f:5d:30:df:53:1d:64:
         d3:83:9f:d9:aa:1f:c9:6d:95:5d:61:0d:73:53:23:a7:67:ae:
         1f:71:d5:31:ae:46:32:8b:b1:8e:9e:57:cb:92:1a:ee:8f:ae:
         cd:7b:b3:3a:0a:4d:b0:21:e5:fa:38:7e:4f:cf:00:83:33:f3:
         f9:5e:9e:1d:c4:04:02:1e:dc:96:a4:8b:68:70:ed:17:5b:12:
         34:58:89:d3:91:47:e6:08:6a:1a:6e:c5:91:df:63:93:72:72:
         e4:4f:f7:95:7d:52:f5:c7:8b:5d:90:45:d8:25:d4:89:2c:70:
         be:f4:bd:5e:65:ba:07:17:ce:6f:71:8d:81:b9:e2:3a:e9:43:
         e5:35:5c:4e:3c:d6:1e:62:fe:50:1a:42:2f:f6:4c:76:61:5d:
         1f:7c:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:30 2026 by rpki-client