Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/896f84ed-27b6-3967-9e9c-26986df025ad.roa
File:                     896f84ed-27b6-3967-9e9c-26986df025ad.roa (raw, json)
Hash identifier:          oqLUrObTgJmDZBzWEluymx8EJlH1EOz5cxF3Xa1PCvc=
Subject key identifier:   12:8D:72:8E:8B:2C:49:33:3F:5F:75:DC:A0:F7:E7:C6:24:35:58:AE
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584E104F2F6ED30B9A2A0C0E4080
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/896f84ed-27b6-3967-9e9c-26986df025ad.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     36734
IP address blocks:        204.153.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2f:6e:d3:0b:9a:2a:0c:0e:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=6c9c5b50-f2aa-49cd-9436-f4364ac3355f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:20:9b:b1:9d:78:56:ec:72:26:ea:f6:ac:
                    4a:38:2d:b5:29:29:94:8b:15:58:ef:3c:f6:46:1c:
                    20:92:1c:6c:dd:4f:18:63:fd:79:39:5d:33:9c:5c:
                    9d:2c:96:0c:50:79:86:9b:f6:1b:39:a2:da:23:9b:
                    f5:af:b5:ee:5b:26:a4:90:22:c5:9d:d5:8e:d9:91:
                    8b:e6:82:c2:25:87:c7:53:0b:eb:41:1b:f8:62:6c:
                    e3:77:f4:4b:0d:0a:5e:80:0c:74:f9:48:e6:3c:aa:
                    bf:46:23:b1:3d:ba:24:4d:f8:be:15:d0:57:ef:e3:
                    04:14:90:28:45:d1:57:d6:48:22:31:8e:85:fd:25:
                    4b:12:67:c5:6b:8c:65:d0:be:68:88:71:40:37:cd:
                    e8:a1:67:a4:a0:8a:ca:ac:e8:84:cd:9c:e5:5a:3a:
                    24:b5:f8:ad:1e:40:35:21:ce:8b:4a:82:dc:52:06:
                    c9:9b:c1:dc:b4:f4:e7:d2:4f:af:3c:2e:0a:1b:b3:
                    9e:04:5d:d1:8e:1d:41:b3:a0:b1:63:f9:34:22:05:
                    11:bd:64:23:55:73:9d:56:67:ce:b5:f3:7f:7d:5f:
                    4d:38:84:fa:05:0c:ba:50:5c:84:a8:bf:1c:74:72:
                    39:24:35:19:0a:c3:0d:35:4e:a4:18:3a:55:c6:96:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8D:72:8E:8B:2C:49:33:3F:5F:75:DC:A0:F7:E7:C6:24:35:58:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/896f84ed-27b6-3967-9e9c-26986df025ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0c:4d:4d:10:e4:9e:d7:3e:4b:b1:8a:6a:2a:0f:82:b8:c5:
         41:31:ea:89:4c:a7:21:df:c6:b2:b8:b5:e7:73:b2:fc:11:59:
         90:8c:be:6c:5b:ee:2e:c7:4c:a1:fb:7a:fc:da:17:0c:3e:b4:
         0e:bf:7b:6d:99:9c:f4:9f:ae:07:1f:24:4c:b4:1c:9a:9a:93:
         3e:8f:95:33:54:51:70:e6:02:6a:1e:e7:22:3a:20:a7:80:4c:
         43:5e:d8:6d:65:ca:f4:8a:2b:3f:cf:a1:58:e5:8b:a6:b1:d7:
         e9:39:a8:02:fb:82:45:b3:cb:23:48:ab:d4:32:67:96:74:65:
         b1:bf:91:e5:f2:67:da:b4:42:cd:79:6b:29:5b:39:23:e8:41:
         7d:bf:18:90:28:73:3a:ed:67:25:f5:8c:da:d2:03:bd:a8:02:
         5d:8f:92:22:b2:94:38:e8:34:cb:11:36:e1:59:5e:f6:54:3c:
         d2:58:e1:a2:5b:07:21:8b:0c:5b:2a:47:cf:ab:2e:dd:a6:4d:
         6e:6d:1f:7c:ed:7b:c8:8c:55:4f:93:b2:8d:cc:7b:49:cd:c7:
         eb:ad:32:7c:3d:2c:c4:7e:d5:a0:e2:b9:a8:8a:db:70:56:9c:
         27:8b:3f:90:e7:4a:85:b3:ea:c0:f0:3c:dd:61:c5:47:fd:2d:
         cb:d2:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:27 2026 by rpki-client