Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
File:                     6fd4acdc-dcae-3060-9289-fccba0d195f6.roa (raw, json)
Hash identifier:          IFkK/mXrS4v7FUBC4J8Kr89x8RW+kHsadfg/mwJyJYg=
Subject key identifier:   65:69:09:4D:06:4D:3B:48:44:EC:C3:C9:32:7E:55:C4:77:EE:1F:06
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584D037D4941FE4B0F3E35219780
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16591
IP address blocks:        136.61.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:49:41:fe:4b:0f:3e:35:21:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=b879c85e-87ed-4f32-8d57-b98ea8396221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:50:1e:c7:2b:b9:40:01:b5:69:53:b1:75:
                    ca:f4:93:ea:6f:22:d1:07:f2:b9:b0:ed:ec:99:fd:
                    db:eb:3f:47:02:b0:b1:46:75:b7:bb:9a:b4:f4:98:
                    0c:b4:be:9c:9d:d0:3c:b1:43:50:b3:fd:a9:c2:c1:
                    da:d5:e3:41:5b:68:12:44:ac:d6:6a:2d:ee:b4:be:
                    b6:73:e3:21:83:2d:21:87:35:73:56:f0:df:e6:e7:
                    75:83:d7:ed:c4:0f:a8:33:a7:5d:62:92:35:90:af:
                    f6:5a:e3:04:b9:0d:ac:5e:05:05:8f:b8:b2:9a:07:
                    33:90:e1:23:3b:e0:67:98:4f:07:f5:4a:3b:d5:c4:
                    6e:36:96:7b:0f:5e:10:3e:5c:63:06:bb:68:09:6c:
                    68:1c:04:cc:92:e6:7b:85:5b:4d:48:2b:f2:7a:83:
                    53:e3:33:27:c0:b2:cf:26:7b:97:11:f8:ff:cd:a1:
                    88:62:44:f2:f5:fe:89:38:1c:21:9e:f6:40:51:ae:
                    c8:8a:71:cd:9f:84:f3:1e:20:b6:38:01:fc:7c:b9:
                    43:7c:aa:b1:3c:a5:e8:f4:a7:f6:8f:5b:47:d3:d2:
                    ac:b1:7e:4b:1e:d3:ae:c8:92:1d:73:4a:da:0e:0b:
                    27:79:eb:83:62:22:87:2f:eb:6f:45:cb:c2:22:65:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:69:09:4D:06:4D:3B:48:44:EC:C3:C9:32:7E:55:C4:77:EE:1F:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6fd4acdc-dcae-3060-9289-fccba0d195f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:69:a9:0f:3e:81:fa:63:fc:29:94:6c:c0:2b:2e:10:f6:85:
         3b:b8:0c:f0:2d:f6:65:59:16:df:e9:40:9d:99:9a:a9:a3:0d:
         97:ad:3a:42:02:9c:1f:d6:fd:ea:0a:d4:89:e8:65:cb:7a:b8:
         a6:bd:4e:f6:ad:b1:12:43:ed:86:7d:1c:f5:6e:92:84:69:cf:
         db:40:e0:88:e5:06:02:57:52:96:26:07:62:b4:0d:84:c3:16:
         36:f9:2b:d7:0f:0a:41:d6:f1:32:70:a9:9b:41:70:59:f1:1c:
         16:db:ef:70:72:d8:4f:0a:25:38:03:7a:9d:89:cb:88:0c:f7:
         30:dd:1c:15:12:06:72:c4:59:5d:71:c2:23:6b:93:26:03:55:
         dd:e7:92:4c:5f:25:a4:fa:0c:e4:22:84:44:21:13:29:66:81:
         ac:ed:b9:02:68:a1:e3:d8:16:19:37:db:d5:df:b7:00:bb:95:
         37:89:b4:a3:01:85:bd:97:65:b9:dd:22:dd:a5:a8:da:87:72:
         81:49:5b:93:82:d0:c5:b8:bd:24:12:58:ef:0f:26:ef:8b:af:
         dd:1a:3c:25:e3:4b:c8:b8:4a:c2:be:a5:81:74:39:72:62:11:
         a5:85:ed:af:89:a5:dd:e0:af:42:37:72:83:2f:ea:ad:5f:d4:
         03:bc:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:28 2026 by rpki-client