Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
File:                     6f6c6da7-938f-331f-aa19-5573ef780ea3.roa (raw, json)
Hash identifier:          hPWe5n8FPo7CeY04YcxZsq3TZumb5+UpOig8lmtWdis=
Subject key identifier:   11:AE:C7:AF:B7:76:61:4A:2D:86:E5:CE:DC:57:9A:6C:25:98:63:BA
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584E1B79912E9862D3924C060560
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     397913
IP address blocks:        192.148.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:91:2e:98:62:d3:92:4c:06:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=f3f7e3d0-fd78-4698-88e0-a687080d94ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:67:11:fd:98:3b:56:28:21:b4:76:bd:74:
                    f5:b9:1e:2b:84:06:6f:ef:6c:f8:94:b8:9a:51:5e:
                    93:61:4f:81:42:25:b2:10:43:ca:d5:af:09:bf:b0:
                    09:f1:81:b4:86:48:21:21:4d:33:1d:ab:46:a6:bb:
                    a5:e4:29:85:54:75:cc:1d:3f:d8:19:5d:12:83:86:
                    e0:d2:6b:6e:9b:86:a0:b4:3b:cd:27:1d:69:fe:c7:
                    26:2c:b7:70:08:ec:c4:a4:1b:17:45:94:89:db:a5:
                    6d:2d:3f:b1:f9:95:74:5a:24:20:e6:bb:aa:5d:97:
                    6a:53:60:d1:69:b5:3b:d2:dc:d3:9b:2f:f5:c0:76:
                    d8:16:e6:e7:d2:31:83:85:35:fd:01:33:d0:57:78:
                    15:3d:c8:e3:5c:00:60:a5:a6:e4:48:0a:b7:90:06:
                    0c:9e:c1:71:16:70:fe:9c:d6:08:10:60:43:9a:72:
                    cb:55:9c:e2:83:9e:4b:95:b1:a9:db:99:21:eb:f2:
                    77:0e:69:f8:ca:33:08:9c:1a:57:f9:03:ae:5c:95:
                    f2:99:c7:1f:ec:ff:3a:12:2e:cb:d0:58:7e:54:2a:
                    df:d8:39:05:16:3f:4f:36:36:ce:f8:db:ce:82:bc:
                    ac:bc:36:83:ea:0c:ce:ee:02:f8:ad:20:f6:a9:3f:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:C7:AF:B7:76:61:4A:2D:86:E5:CE:DC:57:9A:6C:25:98:63:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/6f6c6da7-938f-331f-aa19-5573ef780ea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:bf:a6:f0:95:39:89:70:3c:0c:cb:b6:c6:83:f0:aa:cc:
         7a:a1:35:03:43:bc:12:fc:b2:f8:39:df:21:1d:65:6e:fa:ee:
         0f:74:e2:2b:f9:2d:95:a8:2e:0a:00:02:64:96:93:a3:13:d7:
         88:e9:d4:ea:d3:e1:04:5b:24:ab:a0:4a:a4:d0:5e:96:de:7e:
         b0:dd:ec:90:8c:e5:48:c7:0a:bd:88:d6:df:6c:14:ad:21:94:
         c9:a7:4e:d9:c4:7f:2c:b7:a0:61:3e:cd:12:2c:54:41:e3:da:
         0b:7c:40:60:96:27:02:fe:5c:60:ef:06:09:93:85:4d:d6:13:
         8b:f4:47:e4:79:07:5d:17:44:90:8e:53:71:3c:7e:5a:56:cc:
         1d:35:5a:63:f3:18:aa:62:b2:0a:7d:97:04:62:d9:87:c6:f3:
         23:93:0b:c2:0a:eb:c0:09:3b:ab:71:2b:43:1d:54:ac:40:2c:
         71:15:7f:f1:fa:7f:cc:dc:2a:0a:ab:98:64:19:d1:ba:7e:a3:
         e2:30:8f:49:47:e4:93:54:29:14:99:d1:d3:c4:b4:0c:bf:92:
         d2:f4:17:cd:62:aa:bf:22:18:ba:40:de:59:59:b7:b8:8d:ed:
         36:71:5d:30:dd:f9:f7:e9:2c:db:61:50:e7:b9:8f:cd:1c:5d:
         e4:71:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:25 2026 by rpki-client