Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa
File:                     df21d110-4970-3241-a169-7ac7cce64a91.roa (raw, json)
Hash identifier:          b67KvLjO0lvpV32ys5asnTzvZUXahasBWY97rDNZ+bo=
Subject key identifier:   E2:61:D9:79:E6:CB:4A:7E:7D:B8:95:18:0D:F5:C8:5E:95:5B:B6:0C
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584E104EE2698B5F09BCD25F7680
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     36734
IP address blocks:        173.195.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e2:69:8b:5f:09:bc:d2:5f:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=d91cf2ed-5e46-432d-8a6c-863c621a1d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:c5:17:51:8a:c7:fb:3f:0b:9f:2e:6b:fc:
                    81:4b:09:a5:85:d2:51:75:88:62:4b:ec:8a:81:66:
                    6f:52:5f:65:58:74:70:74:17:dc:f9:cd:1e:6f:9a:
                    a7:42:bc:e8:a9:82:90:aa:e4:2d:b6:8e:1d:43:08:
                    eb:bd:21:7f:bd:7b:67:8a:31:27:11:a9:41:8b:c1:
                    5e:ef:37:53:b3:97:09:23:0b:da:e0:b4:5f:2b:b2:
                    ae:22:c2:84:7d:43:b2:81:9f:2e:9b:c1:b7:78:14:
                    f0:ea:45:64:35:d1:f7:1f:eb:5a:ba:0a:b3:b2:7e:
                    2c:1f:98:5d:b0:75:88:d4:13:a6:88:99:80:ec:05:
                    fc:b0:b2:cc:31:05:9f:69:16:a9:67:3e:78:dc:ea:
                    6c:70:87:87:60:1f:ea:b8:6f:1c:97:11:1a:46:dc:
                    2e:ab:9c:da:70:6d:62:4d:04:1c:71:3b:da:4f:80:
                    1d:44:aa:bf:2b:1e:9b:46:7b:35:dd:f1:6f:d4:d6:
                    69:33:1a:b1:7f:14:98:17:71:6b:3c:8b:96:9f:5d:
                    27:c4:73:3a:09:77:37:9f:8e:d5:e8:4e:49:a3:f4:
                    92:40:58:16:0f:9f:c8:36:a1:c5:f8:cf:b1:d1:d3:
                    3f:0c:fe:ea:9c:6d:b8:a8:b3:0b:af:d6:03:dd:f5:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:61:D9:79:E6:CB:4A:7E:7D:B8:95:18:0D:F5:C8:5E:95:5B:B6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/df21d110-4970-3241-a169-7ac7cce64a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f1:b5:67:54:e7:31:cf:fd:06:16:11:73:97:87:43:8a:d3:
         6a:09:08:1e:61:96:59:c4:86:0c:c3:da:f0:3a:d8:d7:fd:9d:
         df:12:19:18:7f:a0:ee:81:6c:de:3b:74:74:54:0d:2e:7c:cd:
         3e:c3:d0:74:3a:60:8e:4a:37:fe:c3:40:76:53:5c:a6:48:ed:
         3b:b3:a6:0c:e6:d4:91:18:81:7b:de:89:87:1b:04:7d:97:18:
         42:1f:83:37:be:05:de:9d:80:f7:48:4d:3e:c9:13:4d:8d:39:
         1d:7c:80:e8:f4:ca:31:22:4c:32:5a:ba:95:a0:fe:4d:f9:fe:
         ac:c7:f2:18:79:d8:de:1e:fa:d0:18:64:6e:6a:e9:6a:52:83:
         81:36:70:c9:0b:5f:6b:72:db:5f:bc:c4:a1:ed:5a:29:54:df:
         f6:b4:1d:77:3d:ba:d0:6c:6f:9d:0e:6b:ea:5d:f3:e3:8e:c4:
         07:44:c9:38:52:c3:89:57:d6:0d:9d:c2:17:e3:eb:f7:af:35:
         79:70:34:bf:64:fc:a5:4e:9e:d0:fd:f1:d7:3a:3c:12:4e:7a:
         21:25:06:ef:38:03:7b:4e:9c:c2:67:f1:24:06:1f:43:f6:9a:
         c0:af:e5:89:5c:30:9e:16:97:81:6e:d5:30:a2:18:0d:c6:2e:
         10:13:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:01:22 2026 by rpki-client