Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6ac4c133-e191-3432-811d-3cbebd06e3db.roa
File:                     6ac4c133-e191-3432-811d-3cbebd06e3db.roa (raw, json)
Hash identifier:          FEzsEZebumlFnIdu+mhuMGBvY2EMEUI7Q2AVta9pyyI=
Subject key identifier:   D4:A2:40:5B:E0:BC:F6:42:85:34:DA:D9:50:BB:77:DC:46:AD:07:90
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F4328584D83CA9A610E35B86B83C4D700
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6ac4c133-e191-3432-811d-3cbebd06e3db.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36445
IP address blocks:        208.81.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9a:61:0e:35:b8:6b:83:c4:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=acf84358-a3fc-4f84-8c2a-d7513b13756b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:05:37:4f:82:c9:fe:24:5e:4e:e4:0e:ac:
                    fe:3e:84:08:06:a6:07:ef:42:f1:bc:82:b3:4a:a6:
                    9d:6b:8a:ea:4b:32:8d:74:dd:ed:09:30:33:8e:3a:
                    c8:f4:4e:25:cc:3f:f0:05:56:bf:b2:31:5a:56:c1:
                    d5:5d:8c:37:ba:49:8b:35:e2:0c:16:89:0f:e6:b9:
                    5a:b0:5b:62:10:28:90:d6:d5:11:a8:68:41:0f:4c:
                    80:2c:13:f2:86:c0:14:81:67:39:62:25:97:5c:4a:
                    84:f6:22:df:9f:69:d9:fc:f6:bc:1c:7b:c8:8c:ef:
                    e6:fc:ea:3f:55:c0:15:ec:bf:13:3c:b1:78:4b:64:
                    b9:63:c6:ba:04:40:4b:1d:fd:f1:dc:8e:9c:fe:f2:
                    df:74:2a:c7:25:40:7e:1e:b5:52:e7:10:e8:93:70:
                    fe:72:40:50:23:15:b9:b6:b0:b1:06:f6:3a:8b:83:
                    8c:ad:10:8d:cd:17:4d:1a:99:18:94:b6:33:a7:9f:
                    f4:52:2b:43:d2:37:ab:04:fc:0f:c5:3a:88:13:d5:
                    bf:90:4e:78:ed:c7:91:e7:c5:d2:61:ce:3b:2f:2d:
                    17:eb:5f:5b:33:ba:4e:e5:d8:8d:b3:07:40:55:ae:
                    bf:24:67:fc:ef:16:ea:be:31:a5:ac:d7:2f:45:a3:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A2:40:5B:E0:BC:F6:42:85:34:DA:D9:50:BB:77:DC:46:AD:07:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6ac4c133-e191-3432-811d-3cbebd06e3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:77:a5:9f:cd:ec:61:67:16:b4:d5:eb:75:72:fb:82:4c:4c:
         05:3c:fc:30:ea:10:de:c8:0b:d1:ce:68:27:a6:6b:59:16:44:
         46:48:90:b9:2c:50:e1:85:36:ce:d3:cb:d9:d8:d3:d2:88:d0:
         ce:35:fc:24:3f:d8:19:e5:05:19:a9:28:4e:2c:d4:6a:61:8c:
         3a:f9:e3:19:ed:55:9c:a6:5b:c2:c1:ac:63:15:49:b1:75:97:
         6e:7a:21:10:c6:69:23:a9:ef:f8:73:4f:55:47:8c:e4:b1:ee:
         ff:5f:be:83:e8:0e:c1:48:e7:46:2e:32:f1:89:5b:56:27:91:
         30:2b:b3:2c:ca:b6:d6:23:ff:02:fb:4b:98:d9:53:50:55:cd:
         29:45:f5:47:03:3b:64:59:c3:ac:68:5b:f8:bd:97:ea:88:cd:
         3f:b0:13:4f:95:0d:05:d6:5d:73:ac:9d:d6:55:01:b9:98:00:
         b8:04:57:5d:1b:5c:70:67:59:fe:63:a3:28:76:1d:19:d7:c5:
         37:e1:17:2d:80:bb:d3:65:32:66:02:ba:f6:e2:da:8e:60:a1:
         88:9d:14:98:77:e1:1a:dd:68:f6:64:a7:a3:f0:65:55:e3:20:
         59:e0:22:0f:c7:ee:12:c5:b3:4c:1e:04:b8:87:93:64:7a:f5:
         e5:da:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:00:46 2026 by rpki-client