Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/13d011ea-1014-34fe-b176-df3ab1e507b9.roa
File:                     13d011ea-1014-34fe-b176-df3ab1e507b9.roa (raw, json)
Hash identifier:          MTDD5YzsDgE0fPnNf66OYA3ne2jS6tbpFJqxt/k+EiQ=
Subject key identifier:   D6:49:B5:20:05:5A:47:6C:DE:58:B7:EE:CB:69:E6:63:EE:1B:C8:FA
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584E253F024BC191F93EFA2D7780
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/13d011ea-1014-34fe-b176-df3ab1e507b9.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        204.110.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:02:4b:c1:91:f9:3e:fa:2d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=06ced246-7184-4420-9a38-d0a2486634b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:62:5f:5e:67:03:7b:66:5d:5f:74:0e:4e:
                    3d:22:52:d4:ee:26:16:ce:d5:14:35:5e:99:10:2c:
                    35:ee:1e:55:bf:8b:d9:e6:80:cc:e2:35:2b:9f:65:
                    c5:bc:6f:a8:44:fa:cd:c0:70:0e:99:31:01:55:a2:
                    b7:9f:27:9a:70:26:d1:2f:74:6f:3c:54:49:65:2e:
                    b3:14:e9:bc:68:b3:a6:09:fa:b6:13:fb:7c:b0:58:
                    35:90:94:b8:06:25:eb:79:de:29:b4:a7:b8:95:f2:
                    61:1b:9a:ed:77:09:b6:c8:ef:13:a6:66:ec:cb:8e:
                    4a:a4:99:ee:0a:da:fd:23:dc:f4:34:de:15:66:79:
                    70:bf:bb:3e:3d:91:52:aa:fc:d2:45:eb:5e:6e:29:
                    f4:f8:3c:39:f7:84:52:89:f2:7c:5e:62:bd:68:c3:
                    39:59:ce:37:53:25:3d:9b:82:40:ed:12:9c:90:e1:
                    84:1a:41:7b:78:c8:0b:d0:c0:55:94:a6:59:0a:9e:
                    11:fd:65:1b:d2:9e:ec:c3:f5:22:51:31:85:30:3a:
                    d2:68:12:7a:f6:d4:ab:36:60:db:d6:e7:f3:6e:54:
                    30:c2:d4:af:2d:53:c2:1f:0b:07:01:19:10:83:a7:
                    47:40:ed:1d:0c:75:75:44:b1:ca:75:c3:c4:03:17:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:49:B5:20:05:5A:47:6C:DE:58:B7:EE:CB:69:E6:63:EE:1B:C8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/13d011ea-1014-34fe-b176-df3ab1e507b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1d:76:8c:52:e6:f4:70:4b:4c:7c:c2:8c:b1:35:6d:06:19:
         86:cf:96:78:7b:69:2e:ee:f9:4a:3a:9b:41:b0:26:df:1e:55:
         08:1b:49:aa:c7:69:91:ac:06:17:5e:ef:d8:c3:48:47:91:35:
         94:91:1d:87:da:0f:d9:52:19:73:34:ae:06:2f:b3:4b:aa:8b:
         68:28:a0:25:79:68:fe:1a:22:04:72:49:ca:70:9b:1e:6e:69:
         5e:0a:9b:14:02:e9:4c:bd:3b:3a:51:16:8a:36:de:0e:29:3a:
         86:8d:26:50:05:ec:38:c7:37:4a:c1:25:f2:af:46:09:31:1a:
         fc:54:cb:e3:4e:a8:94:72:e5:9c:fa:fc:2e:d7:0e:65:97:ea:
         82:4c:c9:c7:3a:89:ac:f8:dc:1f:fd:51:87:ea:92:77:14:ee:
         71:39:4e:5d:e9:21:7c:e9:eb:02:af:0c:8a:d1:5f:59:f4:d3:
         0e:a4:81:ff:b2:bf:72:36:5c:60:0d:c8:60:82:e3:7a:21:9e:
         f6:01:b2:e4:a2:c1:2a:c1:7c:e5:21:30:70:cf:be:f5:fa:7d:
         4d:1f:79:a4:34:af:f9:53:ae:b7:33:b1:5a:ff:c7:85:b6:0f:
         12:d7:b2:c1:8d:12:08:8f:63:57:65:46:ac:51:8e:f4:32:3c:
         18:f4:75:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:59:44 2026 by rpki-client