Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa
File:                     2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa (raw, json)
Hash identifier:          EBvuI1DELAFa3nkUBQuL/WPK9mziviNRR1X0ayN18TU=
Subject key identifier:   6D:16:82:55:BF:0B:BD:F4:1F:EF:9B:15:29:78:CC:88:BE:82:CC:BD
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584EA7A0F51F857A7AEFAD39F9C0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9304
IP address blocks:        206.212.241.0/24 maxlen: 24
                          206.212.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:f5:1f:85:7a:7a:ef:ad:39:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5e2a33ba-948e-4f13-bfce-621ef7b7731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:be:f1:06:7b:4f:0a:6d:ae:25:22:c5:a1:aa:
                    ac:15:f3:25:a9:0d:1c:d5:61:ca:5e:00:b9:e4:d4:
                    21:3f:bb:89:3e:e2:0f:d6:3d:d9:e5:5b:15:d2:f0:
                    87:51:e1:dc:46:a8:f8:34:91:b5:aa:8c:8b:61:a9:
                    46:de:32:68:ba:97:fb:a2:77:d4:89:b4:b6:27:5d:
                    ee:1b:04:cf:d8:96:bd:ed:06:54:04:b0:3d:49:f8:
                    f1:2e:31:af:7f:0b:51:73:2a:3a:6f:43:e4:6d:97:
                    87:fa:5e:0f:d6:3b:17:99:f6:35:fa:0a:d7:25:26:
                    59:6d:c9:a9:0c:49:f6:fc:14:06:0f:8a:87:e5:4e:
                    7f:70:4b:e5:35:0b:b0:4b:52:07:dc:a0:98:cf:27:
                    c8:3c:7b:5a:c0:dd:17:ab:21:6d:89:82:0a:f9:90:
                    3a:26:81:c3:ab:72:83:98:65:74:99:16:91:e6:45:
                    11:fc:f3:21:f3:39:eb:49:2b:01:20:85:cd:c0:d6:
                    f8:18:22:e0:85:b2:2f:16:a2:a4:01:c8:f9:de:a8:
                    bd:bb:d7:14:c4:71:7c:49:2e:bd:ef:c5:65:40:be:
                    31:af:59:43:70:4d:6b:c9:1c:09:39:8c:06:0e:81:
                    e0:92:02:0b:6e:c6:79:f7:d6:16:45:37:b2:94:c4:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:16:82:55:BF:0B:BD:F4:1F:EF:9B:15:29:78:CC:88:BE:82:CC:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/2ce9bbe9-c02b-3c51-b987-c9188c40f0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.241.0/24
                  206.212.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:77:77:40:73:52:86:99:6f:75:77:ae:5e:d7:61:9a:4c:0b:
         10:7d:ec:ae:7f:3d:10:77:da:66:b9:71:fa:f2:d9:89:f9:34:
         69:2e:f9:0d:ea:42:69:b1:42:66:69:29:ac:81:46:84:73:8e:
         0d:7d:a1:17:4b:16:5a:13:b5:c9:3e:56:84:30:14:63:29:7e:
         72:a6:aa:c7:32:c3:f8:69:80:93:34:f1:c5:08:5b:d7:38:18:
         dd:d1:f1:47:2b:27:7f:da:78:28:b6:4a:07:1c:76:8c:5a:ca:
         36:33:5a:ff:7e:73:86:b4:a0:6f:8e:4a:75:3a:bc:16:e5:c9:
         14:42:42:66:7d:2d:4e:0d:e0:17:17:a8:82:a6:9f:9c:81:15:
         5c:d5:7f:00:b7:57:87:ad:b0:6b:40:fd:30:36:de:64:53:de:
         65:1f:8d:90:ac:06:44:4f:7a:37:9b:e7:ff:85:4f:73:e1:3d:
         06:46:0c:d4:2c:23:17:eb:76:5b:91:ed:87:d2:20:c7:38:cf:
         83:64:33:89:b1:5e:b9:e3:aa:bb:2d:2c:bc:e8:00:40:d1:76:
         cb:98:e6:92:64:60:1f:de:1f:6f:74:4d:1a:96:cf:c9:ec:3e:
         9a:10:9f:57:d3:00:fb:0a:eb:07:82:4f:c7:96:6b:81:45:da:
         dc:02:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:23 2026 by rpki-client