Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa
File:                     4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa (raw, json)
Hash identifier:          tqqAhoXne5VEqi3gh6vOaxWkk3qyKZMguuGJpymAjXo=
Subject key identifier:   49:2E:11:B5:4E:0D:65:65:14:09:CA:51:CF:6D:75:E5:FD:09:96:44
Certificate issuer:       /CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Certificate serial:       010D0C9F4328584C874167B9930220B0FAB3DF80
Authority key identifier: 74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     62681
IP address blocks:        192.206.32.0/23 maxlen: 24
                          2620:3b:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:67:b9:93:02:20:b0:fa:b3:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=aa2e22a9-f960-4f13-826e-17bb0b7dfa32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c0:4f:c2:7a:24:04:9b:d0:db:68:78:c3:2a:
                    b7:5c:24:be:6b:38:3b:82:71:78:9d:24:97:c5:11:
                    8d:78:8f:e5:04:ca:bb:92:bd:c7:b9:a5:23:08:fc:
                    d3:76:4e:70:77:a3:80:e6:e0:c3:15:e4:ef:c2:38:
                    39:b7:11:a8:4d:ef:b8:37:1d:e8:55:1f:3d:4b:2b:
                    a5:c9:ee:bf:cb:79:22:95:1b:91:8e:37:b3:58:40:
                    7f:f3:27:31:78:2c:c2:3d:b3:27:af:65:98:6a:1b:
                    14:7c:f4:93:5b:e3:0c:0c:d7:6e:6a:60:6c:fa:5d:
                    a7:92:f4:0c:4c:8c:44:d1:fe:97:65:44:ff:6d:a9:
                    2f:67:36:92:44:5f:74:e4:22:da:f3:80:e0:ef:c9:
                    cb:ad:7f:4b:d6:3c:ac:2a:16:da:b9:2a:6c:fa:08:
                    62:21:7d:56:a5:ee:0e:5f:ae:31:54:b1:b6:7a:59:
                    d1:a7:16:a2:14:7e:84:5a:19:04:14:48:3f:06:32:
                    f5:c9:35:e8:20:ee:c7:00:66:93:da:26:d2:00:80:
                    92:34:51:86:9d:b3:74:ea:26:e3:8c:71:f4:8b:70:
                    6a:7b:f4:73:4f:f9:bb:7e:a2:5d:2f:53:c8:37:ff:
                    d0:35:c4:2b:30:de:0e:0d:fd:2f:ba:6d:5b:6e:dd:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2E:11:B5:4E:0D:65:65:14:09:CA:51:CF:6D:75:E5:FD:09:96:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/4bd9c907-2635-314b-9622-7e9c0aab1cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl

            X509v3 Authority Key Identifier:
                keyid:74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.32.0/23
                IPv6:
                  2620:3b:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:f1:69:f4:87:95:89:a8:cc:7b:14:d8:3a:71:82:07:79:
         2f:a4:71:8f:61:6f:57:6e:3f:dd:f1:83:ff:98:96:6a:91:ee:
         dc:3d:be:42:6f:5e:83:3e:d0:c9:92:1a:66:31:7c:64:0b:f4:
         e6:11:54:46:ae:60:af:06:e3:99:29:bc:cf:71:80:c1:33:26:
         45:f1:f3:14:d4:9e:a7:b1:90:41:2b:8d:e2:7b:5a:cb:e5:b6:
         52:31:5c:75:5a:5f:10:2d:0f:9c:83:5b:88:90:81:98:e4:71:
         3c:8c:bc:43:94:c6:0e:ee:58:9d:1e:e6:dd:f4:b7:3a:65:34:
         ef:1d:c1:ed:c6:94:a3:f2:1e:fd:c0:4f:44:41:49:4f:d8:de:
         90:f6:b7:02:99:b4:96:d8:e7:60:33:61:a1:ae:ff:77:fc:a6:
         c6:ac:00:80:da:8c:06:a2:5b:bc:aa:b6:26:1e:54:4b:6f:fd:
         f2:e5:66:d7:87:f8:8f:f8:c0:de:6c:43:3e:98:dd:96:9a:44:
         2d:bf:90:88:55:b7:71:b0:81:8d:15:32:48:b0:92:5b:7b:8d:
         cc:bf:5d:0e:ca:31:e4:25:bf:7a:c0:22:8c:3e:60:67:c6:51:
         3c:f4:67:32:fc:1a:71:91:28:1e:ed:5f:28:25:44:21:9c:20:
         e2:24:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:17 2026 by rpki-client