Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/b694a808-b192-38eb-b942-9c4ce2626e69.roa
File:                     b694a808-b192-38eb-b942-9c4ce2626e69.roa (raw, json)
Hash identifier:          QOkfAzL/1xceJMJeURx8R6gXa1cBurd7ow+MtoG7HDk=
Subject key identifier:   20:35:2E:F0:46:F0:89:8D:C3:BF:92:29:F5:6C:E5:47:80:B2:44:83
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F4328584D773A84569E032B8953B55820
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/b694a808-b192-38eb-b942-9c4ce2626e69.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     397283
IP address blocks:        206.168.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:84:56:9e:03:2b:89:53:b5:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=679c5588-d88c-490c-b999-02e3f1cd3686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:64:82:d8:7d:12:23:31:d8:70:e5:25:c5:
                    f7:25:39:6d:cb:5b:61:da:8b:9b:63:45:c7:ca:77:
                    ee:56:d1:2d:90:c3:a9:cc:86:4e:23:81:56:9e:bc:
                    39:e4:dd:8c:e5:57:d8:06:b4:67:79:d1:32:f3:21:
                    e4:96:25:0f:19:a9:6f:9d:af:6b:2d:0a:c0:b1:e2:
                    40:0f:cb:d2:48:e4:23:6c:cd:68:9f:a8:08:0e:ff:
                    05:53:86:50:28:91:a3:79:f4:20:b1:a3:d6:a6:9a:
                    04:c6:45:2a:b7:0a:eb:03:5f:38:55:af:c1:89:d2:
                    ba:7c:55:51:ae:de:74:7d:2d:7f:70:2e:78:e4:7d:
                    22:35:93:da:31:03:3e:94:a9:75:2c:19:bc:75:3a:
                    74:22:45:60:67:21:af:01:3d:c0:d1:72:c7:9f:bf:
                    29:25:0a:5f:ce:0c:b8:e1:01:74:3d:9c:ca:f1:a4:
                    01:25:2c:92:36:10:2d:08:76:c0:b0:22:78:c8:72:
                    c1:0b:58:18:d8:a5:a0:39:ba:01:99:9f:5c:d8:92:
                    a1:24:bd:f8:b3:ae:09:13:b8:9a:87:7c:be:3b:12:
                    c6:a0:18:40:e8:0c:d8:a0:25:4c:98:cf:07:00:08:
                    a5:8d:ef:51:fb:52:46:dd:2c:de:f8:13:16:ba:0e:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:2E:F0:46:F0:89:8D:C3:BF:92:29:F5:6C:E5:47:80:B2:44:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/b694a808-b192-38eb-b942-9c4ce2626e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:09:be:19:71:93:df:a9:88:f6:de:71:ec:1c:34:5e:bc:
         4b:fc:5f:c8:ca:b3:35:28:43:2d:31:ec:50:9a:5d:f0:86:bf:
         38:85:c6:f4:31:5a:b0:8b:36:a8:16:42:c9:84:98:0a:89:3c:
         d1:83:8c:fa:31:d2:52:89:d9:65:70:ae:ea:44:38:56:e3:6d:
         84:f8:17:9e:95:a2:65:12:ef:04:8c:c9:fe:b7:ce:4f:4b:af:
         44:48:b5:da:4a:81:6a:a1:52:21:7c:d6:00:20:04:7c:71:1e:
         52:4f:5c:1f:13:ac:32:dd:20:2a:6a:84:2f:3d:9d:84:a9:db:
         6b:db:5b:22:0b:2d:2a:b3:82:8b:0b:42:3c:4e:c8:d4:4f:64:
         98:91:50:7e:4d:24:c1:eb:1d:fc:0a:ab:25:2e:ce:77:59:09:
         bc:49:1b:84:fa:3d:00:4d:05:74:c6:aa:1b:d3:d8:b4:28:a9:
         56:e9:03:17:16:78:db:b7:d5:98:5d:34:97:01:43:33:b4:63:
         2e:88:c9:9d:07:de:5f:ef:82:45:99:3b:76:5a:af:df:87:18:
         09:6d:2c:ae:8c:56:9f:c7:92:a8:9f:a6:e9:1b:a9:04:48:51:
         9a:7d:3b:3d:42:38:d6:33:9c:55:81:3a:bd:cf:39:b7:c1:b7:
         c7:04:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:29 2026 by rpki-client