Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa
File:                     c80ec47b-3377-3193-adad-335df6fc44c3.roa (raw, json)
Hash identifier:          du5RMhQxU+fpY5i1MXpTDHPJbLp23pB7Oxp5UAUC3NI=
Subject key identifier:   8D:EE:DC:B9:55:DF:6E:86:4F:3E:9D:99:DC:F4:59:F7:E3:5E:CA:7A
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F4328584D571FAFC1F108274EA3EEBC80
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     0
IP address blocks:        206.80.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:af:c1:f1:08:27:4e:a3:ee:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=ac01a96d-dac2-449c-a205-cd99478e44d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:7b:0d:7b:dc:2e:2c:b2:9d:32:ce:8a:98:
                    14:a4:0d:97:e4:2a:98:3a:10:6e:48:3c:c6:ca:fb:
                    02:71:b8:0d:e1:44:b8:e3:b2:82:3e:77:aa:e2:d5:
                    30:85:f0:73:8f:48:47:0a:9b:48:18:ca:46:d6:24:
                    62:40:dd:c1:c6:1e:a5:d7:e7:52:06:0c:22:d1:01:
                    36:28:62:4e:1d:96:7e:19:50:81:21:e5:e6:e9:6c:
                    b2:af:d5:a6:ad:9b:fb:d7:9f:fe:72:e9:6a:cb:99:
                    31:22:bc:b1:84:00:ef:37:7e:93:0b:cd:9f:be:43:
                    70:5e:6a:f5:a1:af:e1:31:89:de:96:fb:d6:4a:5c:
                    17:ac:fe:f0:26:62:11:b9:5d:4b:de:c8:20:30:81:
                    df:72:cf:37:09:2e:8b:45:5e:2a:8a:53:a7:0a:2d:
                    f6:d7:60:aa:05:f7:0b:33:1b:5a:a5:76:3c:a8:79:
                    d9:7e:69:85:ae:8c:71:88:d0:fc:4d:ad:a2:de:15:
                    ee:6c:a2:5e:ce:39:be:88:35:ef:c0:31:e7:a1:4d:
                    e8:7a:da:b6:d1:8d:af:53:29:a2:d5:78:59:79:2f:
                    e0:4f:05:71:7c:2d:58:20:d4:93:6d:f7:62:32:58:
                    0b:37:61:0f:9a:45:61:c5:20:c9:bc:bb:c1:43:b9:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EE:DC:B9:55:DF:6E:86:4F:3E:9D:99:DC:F4:59:F7:E3:5E:CA:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c80ec47b-3377-3193-adad-335df6fc44c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:44:79:ff:4e:3d:11:58:29:bc:8d:21:eb:b2:fe:96:83:c7:
         f1:5b:01:a6:d7:0b:49:fc:3b:2c:cc:03:68:05:4b:e0:a6:00:
         a3:fc:12:78:46:7a:25:94:49:50:46:a2:c6:30:8c:bc:5c:67:
         ae:65:4b:82:38:45:91:d2:fd:20:c5:21:fd:84:08:0c:c7:f3:
         7d:ba:59:47:ef:8b:45:dd:e7:8c:d6:57:d1:cd:d3:99:77:18:
         85:a8:92:fb:6c:b6:35:eb:90:9c:53:84:08:cf:7d:2e:9d:a8:
         3d:ab:f0:03:92:f6:42:a6:e3:4c:ad:97:21:7b:b0:3f:b5:c0:
         57:64:4a:bd:1b:22:a1:15:25:e6:ce:6b:94:a2:c7:68:71:75:
         cf:7a:fb:0b:c7:20:bd:91:93:30:ea:63:aa:c5:23:13:07:7d:
         bc:ba:1a:a9:7b:a3:ab:9b:35:86:8d:2e:9e:9e:2a:29:6d:6e:
         34:93:dc:53:a1:f5:1e:8e:68:cf:77:ac:d3:95:a6:51:ec:8f:
         d5:b2:34:98:c5:ed:b7:c0:f1:d4:e3:c2:82:de:39:03:48:07:
         06:94:4e:a7:c1:4e:a3:a3:31:2a:5a:ab:bf:8f:b0:57:99:72:
         37:27:0d:78:fb:0b:3c:cb:b1:6e:0e:82:b7:e8:79:d0:f3:eb:
         6b:e8:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:39:00 2026 by rpki-client