Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6cc850c0-564a-3ca3-9417-4cc83b37cdf1.roa
File:                     6cc850c0-564a-3ca3-9417-4cc83b37cdf1.roa (raw, json)
Hash identifier:          Mu0m5jUgX5XjZ8wk8/H+SrDx686QTGVlNvatHkjxH7Y=
Subject key identifier:   E9:57:5B:47:FF:91:7A:B2:D1:E4:F8:35:79:D0:EB:1E:9B:50:C9:11
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D24E04C83B6CFDCDF53AA0C80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6cc850c0-564a-3ca3-9417-4cc83b37cdf1.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        208.117.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:4c:83:b6:cf:dc:df:53:aa:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=8fa2a5b3-dbb3-4a57-80ab-04764e3f88e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:a6:99:23:e8:ce:00:54:e0:52:2f:81:5f:
                    30:63:70:15:7a:97:ef:26:09:68:9f:11:32:0e:e2:
                    1e:58:2b:3b:a9:65:7d:5e:fd:cd:f2:19:75:1c:cc:
                    75:f5:4a:30:03:de:f6:8a:9e:dd:4f:eb:55:de:db:
                    9d:bf:a9:71:ac:b6:b1:26:28:ec:37:1d:db:87:7e:
                    18:d9:03:5c:f3:ff:5e:aa:c5:13:3a:34:9d:42:e5:
                    14:fb:47:be:5c:c1:65:c3:a5:67:f6:be:fa:a9:9d:
                    5b:d3:bb:45:4d:c7:9a:55:c3:84:ff:da:86:76:67:
                    90:f9:3c:ed:8e:95:65:22:85:11:dd:38:6e:75:2d:
                    30:d9:51:46:7f:ea:5a:15:aa:3b:d1:b2:48:ac:88:
                    a3:d6:46:f3:6a:ad:86:ce:a5:00:cd:22:71:d9:a1:
                    ea:41:b1:a0:1e:99:7b:67:11:38:20:ce:be:81:82:
                    ea:75:df:97:65:83:73:1e:e5:9e:73:57:b2:1f:32:
                    5c:25:cf:c0:b1:0b:80:79:73:39:94:7d:07:7c:4c:
                    95:32:cf:35:ac:c9:52:e6:19:d3:2f:fb:b4:ef:02:
                    43:30:ab:3c:d5:95:28:7e:4c:c1:19:f5:28:a1:89:
                    7a:ff:ba:79:9a:d4:5d:2e:eb:80:58:74:9f:b9:65:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:5B:47:FF:91:7A:B2:D1:E4:F8:35:79:D0:EB:1E:9B:50:C9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/6cc850c0-564a-3ca3-9417-4cc83b37cdf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:7d:66:2f:c6:f4:df:b6:2f:78:66:43:5a:0e:df:87:d0:78:
         5d:e8:98:76:d6:09:47:70:f9:b9:33:e2:2e:a1:d4:d9:7e:c6:
         b6:b5:ef:93:9d:03:54:25:f5:ca:59:9c:18:05:93:a6:f2:2d:
         fa:21:ac:c8:cd:97:23:6a:e0:85:ba:70:e2:08:64:cf:d7:62:
         81:5d:4e:fb:e7:de:0d:03:f9:e1:c5:bc:9f:a1:4e:12:c7:ae:
         5a:6e:7d:24:5b:ec:b3:2f:23:02:54:a8:f5:35:9d:59:59:fc:
         ac:c4:91:9e:6a:e3:78:8b:fb:9e:14:93:14:e4:86:e6:a6:f6:
         ee:a0:23:e8:ac:18:57:2b:16:f2:1f:7a:d7:70:73:d9:b1:54:
         63:2b:ec:66:de:cf:63:b9:fd:bd:3d:b9:42:41:54:7c:4f:b9:
         12:10:c6:fc:e8:d7:91:14:c5:35:6e:97:c0:bd:8f:84:99:18:
         42:71:0d:e3:5f:32:72:77:1c:fe:6b:69:9a:8a:bd:3d:ab:05:
         da:26:9d:1c:58:a9:53:92:8c:3e:9f:88:12:16:bb:57:3c:c8:
         4f:85:37:5c:2f:6b:b4:9f:f3:d9:b0:29:31:f8:50:57:7e:27:
         1b:3b:94:d9:27:20:f3:40:d3:70:f0:75:69:be:56:84:08:4b:
         01:1a:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:56:20 2026 by rpki-client