Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa
File:                     21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa (raw, json)
Hash identifier:          snUG5tVAKgDTMJBqj1k0X1yrPPatxEvhKi9XGwlTlDs=
Subject key identifier:   EC:0D:92:5D:F3:CE:E4:01:C6:CB:8D:D9:41:CD:25:50:0A:C8:6A:04
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584E104EE604BF9A9C0895C20780
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     62494
IP address blocks:        158.120.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e6:04:bf:9a:9c:08:95:c2:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=92d44ea0-de4e-4d82-83f7-232dfaef7639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:37:91:5d:ec:a8:2e:81:f5:ac:85:b2:4a:
                    19:11:1e:76:f6:6e:99:6a:6e:f6:c1:d0:97:5a:f0:
                    ee:ce:95:75:d5:d0:f0:5b:4c:7d:58:b7:6f:7f:43:
                    e0:c7:d8:11:89:f3:b8:c2:bc:70:f5:7d:38:37:7a:
                    58:35:0a:dc:d8:ea:db:79:00:d9:fa:04:7c:df:f2:
                    a5:46:20:9b:f6:a3:9e:7a:22:fb:3b:b2:e9:a6:3c:
                    28:6f:94:e8:5b:78:af:64:3d:2b:56:1e:38:5c:da:
                    24:f6:30:ed:47:86:b4:e6:17:49:95:e2:90:57:72:
                    01:ce:ef:e9:3a:86:d2:76:66:c6:b2:3a:36:df:32:
                    dc:c1:77:d6:30:c9:3d:74:ba:29:73:58:44:6f:00:
                    71:b4:5d:42:fe:45:60:77:f2:44:f1:ff:87:73:c8:
                    39:89:8f:e9:1d:6c:e8:87:1f:eb:cd:b8:2e:13:24:
                    bb:1d:7a:ed:1f:33:79:c9:6b:9d:20:93:0a:9f:7f:
                    01:a5:40:8e:aa:5a:d5:22:e1:17:4d:03:ed:be:a6:
                    f2:e4:4e:b5:84:77:77:b5:25:c1:4a:8e:ef:3c:48:
                    bf:db:70:b9:10:1d:cb:6f:f8:bb:67:97:00:27:c8:
                    89:80:d9:a4:ef:57:ce:8b:4d:ff:6f:40:1e:22:2f:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:92:5D:F3:CE:E4:01:C6:CB:8D:D9:41:CD:25:50:0A:C8:6A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:7b:ba:cc:ec:74:89:cf:14:27:26:1d:29:e9:04:02:a2:
         28:46:bf:a8:44:15:bf:14:34:ec:d8:99:92:1d:02:50:67:60:
         24:da:7d:2e:4a:d9:36:be:28:80:d7:da:f2:b7:a4:db:60:8a:
         92:e9:f1:af:e4:ee:98:ee:3f:9a:5a:20:91:03:b6:fb:4f:3b:
         f9:ce:87:7c:83:f6:8a:a7:dc:4b:4a:5b:64:75:b9:b4:00:93:
         ba:9c:95:8a:24:d9:eb:aa:8f:45:ca:4c:99:37:99:e2:64:29:
         f8:2e:38:49:0e:af:41:4d:cc:3c:68:0f:9d:e0:28:46:1e:a6:
         e5:d7:57:59:c0:90:fb:a8:67:ec:97:40:cb:94:25:1f:c0:b5:
         9e:df:95:94:a9:c7:b9:c7:74:ae:09:03:1f:4c:57:9e:f2:52:
         cc:1e:d4:53:c2:a5:44:53:c9:ab:94:5f:d2:61:aa:31:d6:16:
         51:98:d9:72:60:5d:0b:7a:09:10:d3:c9:01:8e:42:63:fc:f5:
         9a:9c:c9:a2:1a:22:6f:be:69:48:f8:54:4f:54:2f:36:d3:70:
         58:d5:6b:aa:7c:61:5f:16:23:2e:13:f7:4f:97:bc:2f:d6:dc:
         56:e2:e2:fd:e5:88:89:f2:20:3f:80:d1:b2:d7:2c:bd:68:4f:
         0c:e5:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:41 2026 by rpki-client