Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa
File:                     af173c0d-f4dc-352d-aebe-48f783c50a13.roa (raw, json)
Hash identifier:          BoynBsBobAawrysXCokmqIw0rtcEeZAmiynU57HuK1Y=
Subject key identifier:   81:F9:BD:6E:C0:53:03:76:BA:7F:5A:11:94:AA:8B:EC:42:DA:4E:E6
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584D4D5A43B013E2F90DA7618AC0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     6453
IP address blocks:        216.6.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:43:b0:13:e2:f9:0d:a7:61:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=247600bd-3bd5-438f-acdd-81cca6264f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:ea:c4:04:32:4c:44:c8:79:f8:08:b1:b3:
                    5d:8a:46:ef:a2:35:d2:7f:10:f4:bd:36:cf:ba:52:
                    8f:f2:f3:ed:02:3a:42:e9:7b:b9:78:a5:b5:60:ea:
                    63:d5:5c:b6:f0:50:b6:70:48:c8:bc:62:df:e8:73:
                    ca:1c:e3:b7:26:42:90:27:0f:b4:43:c7:ff:a7:ef:
                    de:7a:5a:f8:a8:ba:65:56:b0:a6:52:8b:46:a7:7d:
                    8f:27:5a:c1:5c:5a:c1:36:86:7c:43:16:1b:47:67:
                    08:47:cc:f7:9a:ff:f7:b9:6d:7e:d8:33:bd:7b:cd:
                    70:ef:0f:2b:db:43:38:4d:73:e5:c7:a2:2d:40:6c:
                    a7:42:f9:66:15:c3:bc:54:5b:47:f1:3b:00:b2:d5:
                    8f:0b:f3:3a:aa:87:5f:25:0b:aa:0a:7a:e3:72:08:
                    52:fd:97:ad:08:a1:47:95:89:d0:f8:53:85:42:0b:
                    41:5f:8a:a3:42:d4:ed:92:02:59:0b:a4:a8:cb:22:
                    12:d8:99:ae:c5:ce:fa:44:ff:57:ed:c0:72:d5:d4:
                    33:2d:60:e3:a8:ce:40:6d:22:3b:92:50:0a:ca:b2:
                    cd:1c:df:3a:47:dc:11:3e:d2:b8:ab:bb:c1:ff:72:
                    39:cb:c7:eb:9e:e6:33:29:68:6c:cc:27:35:8b:c2:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:BD:6E:C0:53:03:76:BA:7F:5A:11:94:AA:8B:EC:42:DA:4E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/af173c0d-f4dc-352d-aebe-48f783c50a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:92:e1:23:77:aa:3d:ad:da:75:76:5d:4b:85:8d:75:99:
         1e:9d:31:2d:d0:2b:83:d6:83:d9:0c:02:fb:ef:2c:a7:04:26:
         a2:87:a6:74:79:ad:01:77:10:c8:4d:74:01:89:1b:7e:0d:0d:
         f0:de:00:03:3c:be:d5:e6:18:f0:77:3d:a7:3c:68:3f:1e:28:
         3b:5f:8b:9d:ff:84:db:10:5c:7a:62:10:7d:e0:bc:1d:12:14:
         de:f7:de:72:e3:4b:ec:c8:06:6b:10:6b:fa:bc:4d:6e:1d:1a:
         73:6b:82:b9:ca:38:b2:35:b2:b2:41:bc:ce:bd:82:4b:a5:dc:
         22:27:95:bb:e9:61:c1:4d:cd:71:b7:e1:6b:31:7c:5e:01:17:
         f0:69:83:3e:67:a4:a0:c5:d3:24:20:fb:28:05:ae:3d:84:43:
         94:39:b8:10:a9:2d:e1:24:42:f8:82:0f:9c:c8:b2:63:ca:ad:
         38:96:8f:41:fe:ec:e3:21:63:db:0e:fb:68:39:c8:df:f3:e6:
         66:44:e7:04:40:26:58:dd:27:48:0c:06:a4:6f:24:e2:e2:83:
         e3:60:02:0a:a0:08:c3:16:b4:53:f5:5e:ad:da:c7:fc:bd:61:
         c2:6b:ea:f5:0e:c8:3d:13:4e:b4:fd:8d:28:8e:cf:15:7e:47:
         c8:e1:a5:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkOwE+L5DadhisAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MjQ3NjAwYmQtM2JkNS00MzhmLWFjZGQtODFjY2E2MjY0ZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOjqxAQyTETIefgIsbNdikbvojXSfxD0vTbP
ulKP8vPtAjpC6Xu5eKW1YOpj1Vy28FC2cEjIvGLf6HPKHOO3JkKQJw+0Q8f/p+/e
elr4qLplVrCmUotGp32PJ1rBXFrBNoZ8QxYbR2cIR8z3mv/3uW1+2DO9e81w7w8r
20M4TXPlx6ItQGynQvlmFcO8VFtH8TsAstWPC/M6qodfJQuqCnrjcghS/ZetCKFH
lYnQ+FOFQgtBX4qjQtTtkgJZC6SoyyIS2Jmuxc76RP9X7cBy1dQzLWDjqM5AbSI7
klAKyrLNHN86R9wRPtK4q7vB/3I5y8frnuYzKWhszCc1i8IEHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIH5vW7AUwN2un9aEZSqi+xC2k7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvYWYxNzNjMGQtZjRkYy0z
NTJkLWFlYmUtNDhmNzgzYzUwYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2AYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADX/kuEjd6o9rdp1dl1LhY11mR6dMS3QK4PWg9kMAvvvLKcEJqKHpnR5
rQF3EMhNdAGJG34NDfDeAAM8vtXmGPB3Pac8aD8eKDtfi53/hNsQXHpiEH3gvB0S
FN733nLjS+zIBmsQa/q8TW4dGnNrgrnKOLI1srJBvM69gkul3CInlbvpYcFNzXG3
4WsxfF4BF/Bpgz5npKDF0yQg+ygFrj2EQ5Q5uBCpLeEkQviCD5zIsmPKrTiWj0H+
7OMhY9sO+2g5yN/z5mZE5wRAJljdJ0gMBqRvJOLig+NgAgqgCMMWtFP1Xq3ax/y9
YcJr6vUOyD0TTrT9jSiOzxV+R8jhpYE=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:47 2026 by rpki-client