Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
File:                     936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa (raw, json)
Hash identifier:          19iO+ojEVR92wpLZltgY7EhxZCfGT+KftNQMv4IHcBE=
Subject key identifier:   40:FD:F7:07:74:67:5A:14:38:B9:CD:96:51:65:7B:96:C5:45:54:E0
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F4328584CAE5E7C564A093F4245139400
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     398071
IP address blocks:        206.227.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:7c:56:4a:09:3f:42:45:13:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=02e5b655-4cec-442a-978d-25d2effebeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:02:38:80:d8:b0:22:37:82:bc:f8:a4:e5:
                    da:3c:9d:16:26:dd:7f:98:e6:8b:5a:d5:c7:33:d8:
                    1f:77:8f:45:cd:e3:a6:08:44:97:41:d9:8f:43:33:
                    a1:a1:bc:0d:fa:41:11:80:c4:9a:c9:dd:7f:08:cf:
                    2c:37:f1:0d:91:d6:df:15:cb:f5:92:27:93:1e:ef:
                    51:73:42:fd:07:bf:94:5a:dd:28:00:d6:89:25:dc:
                    d0:55:07:1e:23:3c:23:7c:2f:c6:87:84:ee:ff:d1:
                    af:d8:65:f5:b9:f8:6e:b9:eb:a4:e1:cd:07:58:bc:
                    94:a7:ae:43:e7:67:9e:d8:3b:c5:1a:31:2d:8b:a4:
                    13:12:26:77:7d:47:6a:31:e2:e7:e5:06:a2:fb:83:
                    eb:28:a6:b7:82:e8:be:e3:44:65:87:30:08:00:e6:
                    d8:03:1e:10:da:61:7a:07:6e:35:14:24:00:47:df:
                    3e:18:91:cf:59:e8:82:2e:01:d7:00:0a:c9:63:e5:
                    0c:fd:e0:1f:c5:6b:b4:d1:f4:c9:4d:a7:36:40:eb:
                    7e:33:3c:d9:c4:3f:e3:43:2c:ff:42:68:82:36:49:
                    98:c5:68:17:f5:c8:8d:21:ed:b8:51:c6:f7:03:dc:
                    d8:4c:1f:b3:02:d7:ed:5d:f4:cc:6e:a3:ef:e0:1d:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FD:F7:07:74:67:5A:14:38:B9:CD:96:51:65:7B:96:C5:45:54:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/936f2f41-5c18-3c4b-b750-f03c0a28e3e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:15:e1:d0:bd:81:75:f3:7a:98:1b:8b:a0:ac:c9:56:68:8c:
         2b:80:ca:7b:2f:82:c6:97:5d:88:94:94:ce:2c:b1:f0:23:3c:
         51:9b:f9:bd:c9:53:dc:16:9d:e5:bb:f5:7a:97:83:40:78:00:
         3d:4b:f2:7e:e6:d1:cf:19:0d:61:34:7a:af:03:a2:37:0e:cf:
         0a:b5:f0:e1:d5:7b:46:0c:3e:7e:1e:88:08:da:d1:f3:f8:49:
         27:d5:18:4b:ac:5a:84:c5:88:45:b5:a7:06:d4:6c:55:68:41:
         9e:0a:1d:f4:54:a2:99:8a:3a:98:c9:14:d5:5c:00:26:f9:27:
         15:10:93:6b:7b:07:a4:81:0c:c6:2d:9b:d8:e6:24:13:e8:9b:
         61:5e:5e:81:64:8d:96:00:43:d9:f3:a1:7b:ce:9b:8c:32:d1:
         4c:e1:57:f8:3e:86:4a:de:76:5c:9a:d3:d3:ff:c2:76:e1:21:
         db:47:f0:72:8c:21:7a:08:a1:ad:8d:52:cd:0d:ad:81:f0:6a:
         87:3d:92:84:16:ad:45:6b:65:52:ff:f4:82:5f:0c:9d:ef:f3:
         6a:d0:8f:b8:40:78:c2:f8:55:e0:3e:04:dd:b6:28:c5:41:bc:
         e6:37:68:11:7e:b4:4b:9d:30:00:96:81:fd:0a:96:75:5d:8a:
         69:ba:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:59 2026 by rpki-client