Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/e96caa58-3818-374f-85c1-a2e432451e56.roa
File:                     e96caa58-3818-374f-85c1-a2e432451e56.roa (raw, json)
Hash identifier:          vqydsWDN9shL2KadS6wTgmA07w3z1WzQ/aAODNZREpY=
Subject key identifier:   C7:BD:8D:47:F8:40:13:C1:B8:E5:64:58:83:47:33:37:A3:28:DF:C4
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F4328584EED521A4304527A68A7D4F200
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/e96caa58-3818-374f-85c1-a2e432451e56.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     53991
IP address blocks:        206.188.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:1a:43:04:52:7a:68:a7:d4:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=756e49c3-e6e4-4b01-9f3c-a25b53194de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:32:0a:de:be:58:3d:be:e7:b2:29:e6:fb:
                    2a:d7:13:04:fe:ac:fe:07:f9:8d:a3:0a:d5:a4:42:
                    dc:91:96:d3:18:35:92:b2:5b:45:98:d9:e2:14:94:
                    32:87:0d:5a:68:5b:60:67:b8:ae:45:93:87:6c:2d:
                    85:91:c9:86:0c:00:2b:e7:1f:fb:83:1a:89:58:84:
                    68:05:cc:7a:4c:16:1a:4a:b5:df:ed:53:8c:d4:d4:
                    41:f7:16:6a:f9:71:bd:c8:23:46:7c:71:76:4d:b8:
                    8b:f8:72:03:56:a8:fb:1e:e8:d6:9e:6d:e6:49:44:
                    ed:b6:45:eb:88:ec:cf:98:35:e6:b7:c0:81:ac:41:
                    5b:e9:0c:ca:d8:bb:f5:d6:9a:bc:df:11:b3:94:43:
                    69:13:63:45:46:0b:ea:ff:22:81:80:b2:03:60:2e:
                    2b:f7:6d:db:d2:ca:34:bd:46:cb:e8:c5:49:d3:46:
                    90:f2:2b:16:8d:76:07:d9:e4:d3:37:3d:2a:91:2b:
                    fa:0f:f7:8c:df:b2:0e:9d:1c:6c:76:f4:2b:af:7e:
                    90:cf:5c:db:15:2b:71:71:ac:f3:9f:fe:01:eb:46:
                    a7:a2:b2:35:13:a5:2f:36:09:44:97:36:ed:49:a7:
                    41:75:de:f5:17:21:11:14:2a:40:57:50:63:21:d3:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BD:8D:47:F8:40:13:C1:B8:E5:64:58:83:47:33:37:A3:28:DF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/e96caa58-3818-374f-85c1-a2e432451e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:21:b7:f1:15:c0:ea:30:14:78:6c:60:19:56:4f:7c:b6:
         39:20:1a:98:06:87:ca:b1:f6:f8:a1:ac:c9:4c:01:2d:5f:64:
         36:5f:d9:9e:83:12:bc:1b:20:cb:40:44:e7:3c:c8:b4:9f:de:
         36:53:c8:b8:fd:c2:dd:28:c8:8f:7b:64:40:9c:2d:c8:73:8e:
         f8:d8:17:7d:ec:15:67:cf:00:17:be:d4:aa:b2:d8:fc:19:e8:
         e7:f7:e7:25:3d:1e:03:54:ac:2c:03:ac:36:12:69:24:27:49:
         c5:78:e6:da:65:b0:c6:3a:0f:dc:9f:04:f1:3c:37:1a:3d:4f:
         fa:6f:c4:1a:7e:6d:45:4e:67:aa:f5:04:12:0c:ea:22:64:2e:
         9a:c4:95:11:2f:28:e9:50:21:55:a0:5e:0e:02:9d:d7:2b:1b:
         c7:39:ed:4c:56:1f:43:94:ec:0c:61:c2:83:b7:74:f4:96:f8:
         8e:1f:7d:04:e5:7b:2b:7e:e1:b8:48:b8:3b:ae:af:c9:6a:66:
         92:3e:7e:f0:32:05:56:1d:43:d4:0b:50:2a:56:07:8c:c6:9a:
         ec:ef:e9:be:31:01:cb:b3:00:ae:04:a7:01:8f:60:c3:a2:5a:
         9b:03:73:47:1d:f0:83:16:af:31:0f:a3:c8:54:0c:4e:2d:bd:
         df:bc:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:52:53 2026 by rpki-client