Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa
File:                     5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa (raw, json)
Hash identifier:          hgRKu2mZxNsLnB2Z1ZVk8GFs4zTRJ3Y7k+lp7RVWc2A=
Subject key identifier:   FD:FC:FC:DC:5A:08:A4:74:D4:D4:B6:19:02:8D:C7:FD:35:C0:C8:98
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F4328584D5E1A4CB16AE5504A9BE9E400
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     22992
IP address blocks:        206.55.100.0/22 maxlen: 24
                          208.89.40.0/21 maxlen: 24
                          2620:133:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4c:b1:6a:e5:50:4a:9b:e9:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=d39ae9c4-9cc8-4eec-aa27-4f65ffa7bc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:55:72:34:f0:24:61:f0:5d:1a:8f:ff:86:
                    78:eb:d9:d8:12:7c:3d:28:40:6d:05:de:9d:fc:56:
                    37:9e:62:12:e6:e8:f3:f0:19:17:42:87:1b:df:36:
                    40:42:57:a9:d0:89:24:61:0c:31:37:53:85:ac:8c:
                    1c:25:09:82:e7:ea:91:ce:e6:02:b4:ea:72:48:b5:
                    8e:45:ed:e1:07:36:bd:40:b4:3c:ca:05:24:73:72:
                    c4:6f:01:24:6a:86:6e:22:88:b2:d3:cf:30:dd:ff:
                    86:8c:5c:43:e5:70:ea:71:c0:79:4b:02:79:8c:69:
                    cb:42:dd:aa:cc:2f:93:58:2f:3f:68:17:9e:a9:f5:
                    1d:29:1f:bb:34:29:8f:3d:33:e4:ce:1f:ca:4a:b1:
                    5c:f6:bb:58:a1:18:04:db:2a:35:74:08:4b:4b:2f:
                    05:87:02:12:27:3c:32:99:d5:25:85:aa:de:5e:03:
                    3d:eb:52:b3:ed:5f:26:0d:00:2a:da:51:a7:ad:3c:
                    a2:25:11:ba:83:3d:2b:9b:11:57:a6:1e:cb:b1:05:
                    36:11:d5:f4:94:42:72:68:89:3b:85:fb:15:56:bb:
                    b5:56:a4:29:48:f4:79:27:87:e9:24:89:83:81:86:
                    90:74:97:68:62:94:aa:84:3d:4c:56:13:6e:1f:a5:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:FC:DC:5A:08:A4:74:D4:D4:B6:19:02:8D:C7:FD:35:C0:C8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.100.0/22
                  208.89.40.0/21
                IPv6:
                  2620:133:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:b2:d7:28:35:36:5d:e0:2e:f5:15:c8:1a:50:c0:1b:d7:
         67:3e:a7:a8:b4:dd:e2:d9:c5:b2:01:25:0d:0e:16:19:66:42:
         d2:34:e1:bb:a0:7f:42:68:d3:75:d7:ad:45:9e:aa:0a:93:1c:
         06:44:a4:ce:dd:f2:05:be:5c:77:ab:13:49:fe:f5:ab:d6:0b:
         6a:d1:10:aa:8a:c0:22:38:6b:bb:7e:db:e5:b6:7a:59:53:7c:
         96:5a:f8:bd:ec:9c:e7:c5:e1:05:48:8d:9a:b5:4d:2a:db:ac:
         09:3e:2d:84:e5:82:3e:92:29:6f:1b:9f:88:80:b7:e7:ad:df:
         12:c7:c6:66:86:83:ae:d1:3c:e0:95:05:cd:f5:8b:19:7a:2c:
         a1:d9:97:d3:8f:ba:3e:95:4b:88:b1:8b:cf:11:d8:08:8b:0c:
         d3:cb:18:38:53:03:ad:96:04:fe:95:dd:cf:11:d4:1c:f5:f3:
         0a:03:3b:4d:bd:98:ca:8e:a7:33:e7:15:51:cc:b9:c2:3c:45:
         98:15:ef:7c:f2:dd:62:cb:1f:94:4f:af:39:42:b8:76:90:57:
         99:dd:72:ed:f0:31:35:6e:c6:67:ae:7e:39:49:bb:86:75:be:
         d9:54:c4:a2:45:37:e9:f7:bb:54:37:4c:07:9b:c9:60:91:93:
         f9:15:96:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:15 2026 by rpki-client