Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa
File:                     7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa (raw, json)
Hash identifier:          wLoAm7SfGfQnnIfpgz9Df79a0dxA+Bebc8HLU3Ua/No=
Subject key identifier:   1E:F4:A7:2A:D5:E9:AB:9C:C3:33:41:6D:BC:29:39:D5:C0:0F:6B:84
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584DD78B1C54927B82E08E5BE480
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     3738
IP address blocks:        192.250.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1c:54:92:7b:82:e0:8e:5b:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=60c4276c-5852-4ead-890e-8d424f7cdb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:ee:aa:d3:b8:fd:66:85:15:0e:e4:f3:69:
                    d7:15:8f:2a:66:a3:c3:1a:66:8d:28:07:cd:1f:48:
                    cc:29:97:7a:65:7a:04:dc:43:2c:09:e5:54:e3:20:
                    d9:3e:74:33:23:16:30:f9:a2:3c:0f:2a:f5:10:47:
                    55:45:8f:89:8a:bd:18:cf:d0:dd:19:0f:b8:6f:0d:
                    7e:35:75:13:79:68:4e:06:3a:88:0d:0a:06:8e:41:
                    4f:2d:e2:51:73:b0:e8:99:46:1b:59:79:f2:80:57:
                    a8:54:f1:fe:ba:5e:77:b4:63:67:e1:d1:26:9f:43:
                    79:94:f8:d0:35:e2:36:3f:8e:36:43:1d:ed:85:a2:
                    b9:36:a0:d6:a6:7f:7a:88:75:9d:d1:8c:f6:62:97:
                    14:7f:38:1b:99:9c:61:be:c5:fa:e7:4e:33:97:a6:
                    37:0f:7c:f4:d1:3f:da:4f:74:8f:67:6a:8a:ab:40:
                    a1:2b:fe:59:f3:4c:5a:d4:45:20:c5:af:e2:d6:9f:
                    f8:09:55:9e:45:b5:5a:98:89:14:fe:c1:d7:ba:14:
                    c3:06:b6:b2:ef:be:c6:53:aa:7a:72:1f:8c:ec:91:
                    71:2b:c8:29:2f:3a:21:13:41:e6:3e:58:a3:4c:4e:
                    44:91:ca:19:27:06:42:8d:96:f5:00:b4:97:a1:75:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:A7:2A:D5:E9:AB:9C:C3:33:41:6D:BC:29:39:D5:C0:0F:6B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ab47e7f-3e72-31b4-b0ec-5a89ba465e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:c6:33:97:55:bc:4e:51:38:31:65:b7:ce:31:64:60:9b:55:
         83:36:53:a6:d3:49:d3:62:bb:7d:0c:5b:9d:22:cf:50:fc:ff:
         01:98:a5:0d:19:fc:fa:7c:f3:cd:db:5a:94:4f:ba:94:7b:2a:
         7d:a6:b7:07:88:f9:d8:8b:76:49:43:99:ad:ad:d1:61:a8:d0:
         aa:b9:d0:ce:ff:79:13:6f:b1:12:41:79:d9:b9:10:d7:de:ac:
         b9:5a:0a:7f:ac:bf:f0:e9:1b:75:0b:81:8b:e1:56:f7:e8:97:
         7e:e7:db:9a:21:12:bc:fe:6a:41:cb:3c:21:22:47:b8:a3:00:
         38:9a:7d:ff:84:a3:11:b7:49:16:1d:14:c1:b3:7a:81:77:d4:
         38:28:f6:8d:e8:0f:5e:5f:bb:4d:71:fd:71:23:50:f1:d7:ab:
         8e:fa:3a:3f:ea:e2:ff:11:f2:5b:b1:71:72:a7:3a:4a:65:db:
         c5:33:15:6e:cc:2a:16:27:41:aa:00:a1:ca:24:46:97:eb:5c:
         f0:a7:d2:e2:f3:f1:55:0f:0e:e6:06:4e:ea:f9:50:ce:05:c6:
         3f:47:23:89:b6:ba:4d:1e:fd:0b:00:1c:3d:65:c1:a0:e4:c8:
         00:52:95:cb:43:e7:30:0b:12:50:b7:7f:27:0b:68:fe:d5:6d:
         13:2e:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:23:39 2026 by rpki-client