Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa
File:                     57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa (raw, json)
Hash identifier:          jizAF8wfvYlnslo4OChsmCsBehiNq3KmKw/hncNvY5w=
Subject key identifier:   25:0E:83:B1:21:17:C0:AA:8F:68:F0:21:9F:76:35:2C:5D:61:09:42
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584D4D5A5B797BA57B9C294FC990
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        206.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5b:79:7b:a5:7b:9c:29:4f:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=1198db8d-fb6a-45e7-808f-ae95f6d3706e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:04:60:cc:92:f8:f2:78:93:28:96:12:b9:
                    c5:79:2e:1c:d8:46:14:e0:2d:83:9e:a6:60:1c:df:
                    bf:58:d8:e7:e8:dc:6b:20:52:f9:0c:65:1e:6a:a1:
                    f1:ae:c4:b8:78:33:22:9d:be:0d:e6:50:c6:d9:fe:
                    23:a2:43:d2:da:86:80:3c:4e:b7:29:23:a3:a3:77:
                    b7:42:41:7d:9d:88:6a:c8:cb:00:4d:b9:74:09:0d:
                    1c:14:c0:79:51:c6:7b:64:cf:52:d3:e5:91:b2:68:
                    65:ea:cd:a5:70:ce:98:61:a5:55:23:73:65:23:51:
                    26:27:a1:2f:f0:69:39:e3:f0:43:7b:a9:59:d3:96:
                    dd:b8:ad:be:47:ff:f4:e0:22:09:83:6f:2f:03:bb:
                    7e:e1:a6:36:8e:00:82:b4:28:46:4f:f0:02:24:cf:
                    c9:37:b8:26:8b:e9:4b:d5:d5:2a:1a:f8:93:5d:a8:
                    11:0d:10:a4:5d:f9:29:a9:8d:98:c0:67:98:30:f8:
                    a4:69:14:ed:56:20:82:68:27:58:e4:2f:f9:2b:ae:
                    ef:1d:d5:c8:15:c2:67:58:07:0d:20:6e:6e:d2:c2:
                    00:cc:e0:3b:96:8b:be:2f:e3:95:d0:18:35:8c:97:
                    3b:4c:70:a8:8d:69:6e:d7:fb:32:09:18:4e:83:1f:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:83:B1:21:17:C0:AA:8F:68:F0:21:9F:76:35:2C:5D:61:09:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/57621f0d-a7b4-34dd-b649-ec05ab4f5900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:cc:84:b3:ea:46:e5:e6:33:9f:a5:a4:18:79:84:4e:19:
         78:e7:18:b3:41:85:23:a3:f4:7a:e3:5b:65:ac:32:ab:a0:fc:
         b1:5f:56:ea:17:95:f3:63:cb:d9:22:ed:77:34:52:eb:da:0b:
         f5:7a:39:61:33:fc:13:e1:59:9f:a2:25:4d:ca:52:10:40:3d:
         c9:b8:e6:82:57:6f:19:f5:7c:74:6b:5e:45:77:35:be:64:2e:
         79:01:50:25:35:d1:5c:2c:cb:d1:fb:00:8f:7a:e9:1e:a5:77:
         95:b9:78:ab:27:43:35:7c:12:36:da:68:cb:9f:8d:13:a2:be:
         f8:af:f9:6d:8b:8a:79:43:11:ad:3e:3c:bd:6f:5d:95:f8:ae:
         8d:12:14:ba:c0:ed:3e:b2:0f:bc:17:31:0b:d1:5c:b9:6b:c2:
         85:6d:22:a0:62:41:ee:3c:08:4d:68:c0:4b:1e:a4:b9:9e:e3:
         95:a9:21:74:64:69:80:e0:df:1e:dd:45:76:3b:ac:47:07:b9:
         e0:b4:32:91:66:29:73:d9:0d:02:88:36:42:82:a3:7d:77:cc:
         94:d3:79:73:86:40:e5:10:e4:17:f2:cc:2f:8d:94:93:af:5a:
         c6:94:44:83:01:fc:09:88:0a:4f:4f:07:00:7d:42:70:bf:b0:
         84:0a:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 14:04:46 2026 by rpki-client