Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/15bbf827-4f9b-30ec-8330-0066c4ab9b79.roa
File:                     15bbf827-4f9b-30ec-8330-0066c4ab9b79.roa (raw, json)
Hash identifier:          P3W8F5DU5lhgJkKMIEI5gxYM2OBzKHlGOWbFgIbngn0=
Subject key identifier:   43:E7:4C:8E:A9:56:A4:E7:1D:76:60:57:E8:8A:4E:E1:77:89:08:0D
Certificate issuer:       /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial:       010D0C9F4328584E016B28F3B2CD601C2784F700
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/15bbf827-4f9b-30ec-8330-0066c4ab9b79.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     834
IP address blocks:        206.174.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:28:f3:b2:cd:60:1c:27:84:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=bd994c0e-772b-47b9-a33c-60ac1913d815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f4:2a:b7:73:37:a5:1c:a2:05:f8:96:f5:8b:
                    bc:68:d0:6b:88:e2:b7:4f:67:e2:37:39:8d:4c:90:
                    7b:6e:9b:74:2d:d5:bb:f6:b7:fe:15:83:cd:a6:b4:
                    83:02:0a:50:b0:58:de:ad:5b:8c:e8:e9:0a:fe:65:
                    09:02:d1:31:28:15:27:42:73:11:9f:70:17:aa:70:
                    dd:56:cd:54:5c:8e:55:b5:6b:41:2f:e8:d0:b9:7d:
                    cb:61:54:01:a4:47:3a:a8:c5:14:db:be:bf:10:d8:
                    81:27:0a:d0:95:0e:13:c2:ce:aa:ca:68:7c:87:b9:
                    64:2b:af:b2:5b:24:86:47:22:8e:1b:1a:aa:f9:1f:
                    c5:89:dd:a9:2a:fc:f1:0e:34:5d:98:26:a1:5c:72:
                    b3:64:ee:55:0f:1a:e3:f6:69:25:d9:c1:26:1d:0b:
                    15:c9:0f:31:d3:4b:e6:a7:ff:b7:75:69:bf:38:89:
                    16:45:0e:93:9e:c9:d8:de:4a:c4:b4:70:be:41:ac:
                    99:0d:0d:9d:bf:f6:84:89:86:89:fb:5e:ad:17:d0:
                    81:3c:f7:da:bc:66:ea:c5:ef:dc:ac:95:0d:d9:c3:
                    e7:12:35:46:71:d0:8b:2e:89:40:3b:08:b7:3f:93:
                    24:d8:98:2e:84:c3:3f:bc:38:4d:22:39:74:8e:9b:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:4C:8E:A9:56:A4:E7:1D:76:60:57:E8:8A:4E:E1:77:89:08:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/15bbf827-4f9b-30ec-8330-0066c4ab9b79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl

            X509v3 Authority Key Identifier:
                keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.174.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bb:77:39:4f:f1:29:f7:cd:13:cd:07:8b:9c:7e:ca:ef:e1:
         75:c2:13:48:8a:5d:2a:a1:5e:48:66:06:84:14:96:a3:f4:cc:
         06:35:e6:d0:fa:91:c3:99:24:4d:36:5a:4b:16:9c:b6:b8:14:
         0c:df:30:e4:e8:5f:13:66:6f:c8:34:f6:3d:05:58:da:6c:d9:
         e4:b9:82:26:be:2c:93:df:29:88:07:d9:ac:3e:39:29:83:7c:
         1d:dc:32:b0:85:c1:0c:b8:50:d1:3e:06:cd:8a:0f:ee:44:21:
         15:78:1a:35:07:c2:5c:ad:80:ea:97:b4:c0:14:20:3d:98:ca:
         16:76:37:2e:f3:a5:a2:75:06:77:ba:28:82:0b:75:f5:43:2b:
         33:66:13:0e:00:81:e9:9a:92:ee:d1:1a:bb:6b:56:c2:82:3f:
         2d:39:ea:c5:fc:57:a7:9d:5b:4c:92:ca:34:3a:bd:b4:00:c3:
         4c:09:2f:68:44:92:b4:92:d1:9a:d6:35:63:65:46:14:b2:ef:
         38:4e:da:0f:8c:4a:05:bd:43:ab:77:01:1a:6b:dc:d0:15:9c:
         34:70:12:bb:2d:2f:2c:d6:5b:9c:9d:48:60:6c:ec:cb:23:f3:
         4b:f6:89:4d:d0:a6:fa:47:48:c4:92:b4:36:58:42:38:07:91:
         49:95:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:19 2026 by rpki-client