Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0b85b55f-56a5-3db5-a3e2-de5c825c650d.roa
File:                     0b85b55f-56a5-3db5-a3e2-de5c825c650d.roa (raw, json)
Hash identifier:          IQdG4SZUbPVsQs7QEYPaJfO5YNbwY5n7i1NBqyq0hhM=
Subject key identifier:   47:75:06:F7:34:21:F6:C5:7D:DB:1C:07:DE:29:1B:DB:D1:C6:BD:B0
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584E1CDEE2C3C25699DD63F48000
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0b85b55f-56a5-3db5-a3e2-de5c825c650d.roa
Signing time:             Tue 09 Jun 2026 09:00:13 +0000
ROA not before:           Tue 09 Jun 2026 09:00:13 +0000
ROA not after:            Mon 07 Sep 2026 09:00:13 +0000
asID:                     212238
IP address blocks:        198.145.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:de:e2:c3:c2:56:99:dd:63:f4:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun  9 09:00:13 2026 GMT
            Not After : Sep  7 09:00:13 2026 GMT
        Subject: CN=d8475e6c-9710-4230-8245-8a5464cf09d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:79:f2:ec:5b:b4:0a:85:ca:d1:44:fa:02:
                    54:0c:48:6a:e9:0d:35:ed:6d:4c:75:d9:f2:8a:3b:
                    b5:5d:10:25:a8:1e:03:f5:c8:89:05:b1:4b:d4:20:
                    2b:55:42:48:36:4a:b6:48:90:2d:c1:c5:fa:a4:50:
                    ca:8c:a1:81:c0:21:21:f4:5d:95:4f:f1:04:8b:6e:
                    e0:f4:9b:85:27:00:e6:e3:45:c2:73:a0:d2:a8:8f:
                    9b:f5:d0:c5:35:b5:a9:f1:6c:b9:c2:26:ad:15:15:
                    5c:9d:35:0b:5e:f3:86:9e:7e:e0:d7:6f:66:0c:59:
                    8b:a5:c6:bf:90:78:91:ff:a6:6b:92:e8:76:33:0e:
                    63:e1:bb:20:9f:e7:f4:02:6d:e5:29:bb:5d:b5:81:
                    48:ce:73:60:81:f8:c0:2b:15:0d:72:aa:0a:67:e3:
                    57:ae:10:b9:02:44:23:38:0c:06:27:f0:09:ac:ff:
                    73:13:3f:59:51:3c:29:89:f3:9d:08:30:4d:40:6d:
                    f5:87:5e:86:61:70:dd:4c:35:ac:c6:ad:51:02:b3:
                    bb:63:13:2d:47:7a:7a:dc:95:cb:92:22:23:b2:6d:
                    91:9f:df:7b:65:32:96:a4:fa:c1:7c:d8:d4:d9:ae:
                    18:f5:00:6e:19:ca:2b:db:22:4b:1f:5a:c0:77:b1:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:75:06:F7:34:21:F6:C5:7D:DB:1C:07:DE:29:1B:DB:D1:C6:BD:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0b85b55f-56a5-3db5-a3e2-de5c825c650d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c7:52:27:7e:b7:34:2b:73:ad:38:e3:50:0b:ed:cc:e9:53:
         52:89:23:37:04:e5:eb:98:c4:08:f2:1a:46:ec:b3:77:84:38:
         04:a3:6b:0b:9e:0b:8c:58:08:6e:17:73:cd:a4:79:f3:79:d5:
         a8:81:8d:4a:65:5d:fa:59:ed:5d:e2:8c:41:09:74:37:ab:7a:
         47:2a:c7:6e:27:fb:65:5c:e8:8c:80:4c:60:cd:1b:39:3b:30:
         ab:a3:02:cc:c6:a1:ed:e0:70:46:49:ab:ab:0f:29:77:53:3a:
         b1:ae:af:a1:5d:21:58:74:12:d5:d3:75:b8:ed:96:cf:d3:cb:
         89:c0:1d:f6:1a:da:a0:e0:4e:15:49:d9:c4:9a:31:13:15:e5:
         b2:57:c9:2b:cd:da:0b:19:fb:74:7c:fa:0c:db:f1:7b:63:dc:
         79:95:76:ab:e5:ba:20:ae:ad:0a:91:ff:4c:8e:ce:70:07:5d:
         a8:ff:07:cf:52:9c:00:c0:36:46:49:f4:8c:4c:bc:50:26:b6:
         51:d6:99:16:fd:8f:9e:5a:40:88:5c:c0:4d:31:06:9d:0b:0c:
         79:f7:f4:97:b9:3f:71:bc:dd:a8:69:e3:9a:be:d5:aa:ad:fc:
         6e:53:d5:6b:40:46:b3:b0:14:a3:9e:d9:97:21:df:12:32:b6:
         86:4d:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:22 2026 by rpki-client