Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa
File:                     4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa (raw, json)
Hash identifier:          u1LrdvRdeHm+RU9muEL7sBE56c1Yh8xiSXMdr/gbMSA=
Subject key identifier:   DC:FD:60:A1:18:B6:61:17:D1:60:D3:9C:24:A0:60:E9:3F:EE:8F:A1
Certificate issuer:       /CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1
Certificate serial:       010D0C9F4328584CFB4EED37E9194EC0E6C34800
Authority key identifier: 82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa
Signing time:             Wed 25 Feb 2026 15:41:34 +0000
ROA not before:           Wed 25 Feb 2026 15:41:34 +0000
ROA not after:            Tue 26 May 2026 14:41:34 +0000
asID:                     20001
IP address blocks:        208.113.6.0/23 maxlen: 24
                          208.113.16.0/23 maxlen: 24
                          208.113.22.0/23 maxlen: 24
                          208.113.32.0/23 maxlen: 24
                          208.113.46.0/23 maxlen: 24
                          208.113.48.0/23 maxlen: 24
                          208.113.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:4e:ed:37:e9:19:4e:c0:e6:c3:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1
        Validity
            Not Before: Feb 25 15:41:34 2026 GMT
            Not After : May 26 14:41:34 2026 GMT
        Subject: CN=c1df809d-2b36-4bb1-a73b-6c674a40c15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2d:3c:83:6c:7e:8d:ba:bc:28:9f:ea:74:e4:
                    64:ff:72:6d:16:47:ae:51:ab:99:01:56:c3:36:41:
                    c5:49:6e:90:db:f9:9c:eb:59:3a:f1:f9:45:77:2f:
                    da:0e:06:2a:c8:51:b2:7c:66:e4:b0:2b:3e:d0:83:
                    86:3e:84:f9:0a:4d:84:41:f8:e9:9d:2e:e0:77:09:
                    dd:d9:b2:5c:b5:be:41:f1:ab:7e:1d:0f:f6:2b:6e:
                    2e:ba:ff:72:86:c7:51:f5:1f:f4:79:c9:ca:8c:52:
                    3e:4c:a1:db:a1:15:d9:60:d9:1d:16:5c:78:88:28:
                    61:b0:68:f3:dd:8e:51:68:2a:5e:1c:5d:e3:fe:87:
                    66:df:69:fc:15:44:c9:dc:46:9a:59:4f:35:93:29:
                    74:8a:93:20:42:47:7e:74:68:d7:f4:ee:85:bb:21:
                    6c:30:5c:d3:f6:54:12:bc:96:b7:e8:32:6d:21:a8:
                    b0:cf:10:22:f9:5c:68:d6:75:de:bf:cc:90:8a:d3:
                    9c:ad:89:30:26:64:f6:96:c6:21:5a:28:e6:4e:5c:
                    38:92:8e:d0:89:7a:a2:b3:f0:8d:e8:2a:9a:42:10:
                    95:e0:48:7f:9a:aa:9f:00:84:1d:92:b6:fa:e5:f7:
                    19:49:1b:fc:95:ae:1a:58:21:c2:8d:41:00:41:99:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FD:60:A1:18:B6:61:17:D1:60:D3:9C:24:A0:60:E9:3F:EE:8F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/4594ec4e-deaf-3ef5-9aa2-945cacbc3b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.crl

            X509v3 Authority Key Identifier:
                keyid:82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.113.6.0/23
                  208.113.16.0/23
                  208.113.22.0/23
                  208.113.32.0/23
                  208.113.46.0-208.113.49.255
                  208.113.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:bd:28:70:c4:3f:93:e1:c6:3e:68:9b:6b:1b:31:24:66:
         1e:64:23:43:30:40:17:31:b1:c9:c0:b2:51:c6:9d:83:e9:9d:
         33:c3:92:21:98:ff:a0:71:27:08:f8:a9:72:7d:8b:0f:cb:e1:
         14:af:e4:cc:fe:f6:7e:59:a5:05:e5:c6:47:38:a6:77:8e:3f:
         28:3c:29:7b:7a:3e:fc:85:0d:30:88:72:ec:f3:85:07:fe:1b:
         b0:14:cc:5c:8f:58:44:eb:74:b9:f4:86:72:29:c6:6f:bf:dc:
         17:5f:ed:c1:85:cd:fa:5f:f6:9f:47:5c:b2:9c:35:61:bf:92:
         4c:d6:3c:f9:be:62:59:43:f5:78:ad:32:07:97:24:5e:57:6e:
         db:32:f7:c6:00:8b:0c:ce:ec:11:e0:a0:de:5d:e4:eb:bc:d3:
         6b:6e:2c:bb:16:15:ad:bf:14:f5:86:17:8f:0e:08:5d:b7:c5:
         52:aa:2d:ed:78:c9:3f:17:96:03:2a:16:f5:30:a2:b7:be:f5:
         d2:df:51:c9:1f:09:72:5f:6a:fd:16:2b:61:ef:49:7d:d5:65:
         e2:1e:5a:35:c1:94:b6:86:70:f1:ed:59:df:8d:41:9a:f8:16:
         e2:5a:b4:e4:92:fd:41:1c:68:f1:59:ed:02:ef:c1:e5:d7:d4:
         3a:15:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:29 2026 by rpki-client