Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/dc913485-8767-3b25-8568-4c55b066f3b7.roa
File:                     dc913485-8767-3b25-8568-4c55b066f3b7.roa (raw, json)
Hash identifier:          y+ifzZqwX7+1nUsgYtXGYKnPLF/tF8TIvuli2vLqzYA=
Subject key identifier:   52:30:39:B4:44:83:65:8A:50:A3:59:CC:2C:C5:7F:99:5A:4C:BA:64
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584D6AAA6C0BFC7EBB13F4562200
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/dc913485-8767-3b25-8568-4c55b066f3b7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     0
IP address blocks:        206.53.203.0/24 maxlen: 24
                          2606:a980:0:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6c:0b:fc:7e:bb:13:f4:56:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=fdc07360-7afc-4a71-970d-c37c36741182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:49:de:b4:22:f5:57:5c:12:47:28:e8:e2:
                    93:b0:51:25:6f:88:05:51:fb:b5:59:3d:72:23:da:
                    37:80:ef:53:7e:fa:52:b2:49:f4:29:4a:d1:33:a3:
                    d7:02:f7:63:d8:4a:1d:b2:86:f3:cf:5c:71:88:93:
                    50:28:a5:6d:b8:7f:ce:85:b8:2f:86:28:0c:56:89:
                    40:d6:f5:0b:d6:99:34:24:9d:05:8e:67:6a:84:f1:
                    70:df:1f:3b:ee:e1:ac:ec:16:48:7a:46:6f:71:f8:
                    ac:18:c5:7a:7a:a9:c7:cd:b3:a9:29:71:c3:95:77:
                    0f:45:f8:82:68:27:1c:ba:ba:38:c1:9c:10:b6:2e:
                    18:19:4f:51:e6:7d:a2:5c:7c:ff:1e:8c:8b:d4:04:
                    ca:0f:90:e3:97:ef:52:9e:a0:32:65:f8:d6:68:56:
                    fa:79:45:27:42:15:25:36:c4:d5:ee:e3:7f:74:d8:
                    65:12:d4:ac:47:c9:aa:3e:39:d9:8a:2f:c0:9d:c5:
                    b4:f4:20:0f:23:d3:dd:27:1f:db:76:ba:f9:f9:17:
                    84:4f:c4:39:d2:2a:1a:7f:a8:44:d9:3b:e1:7d:a2:
                    b7:6b:b3:a4:94:a3:54:ae:97:cf:3d:58:a4:38:64:
                    09:9f:5b:c2:92:3a:59:e7:ce:90:e1:f0:e9:03:56:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:30:39:B4:44:83:65:8A:50:A3:59:CC:2C:C5:7F:99:5A:4C:BA:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/dc913485-8767-3b25-8568-4c55b066f3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.203.0/24
                IPv6:
                  2606:a980:0:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:57:50:eb:42:3d:0d:4e:ef:c5:05:04:d5:96:86:96:f0:
         9e:73:55:1e:9a:2c:a4:a0:d7:b2:c1:ea:4a:96:8b:52:2c:58:
         b8:61:2e:0d:93:40:53:e7:ae:44:fe:1e:bd:0a:bf:c7:e7:75:
         2a:9f:ca:ce:ff:cd:9b:7f:6d:7a:8b:01:16:18:e7:5f:21:b3:
         f9:84:19:fe:ce:c0:52:d2:3b:d1:c1:9e:e6:a0:ac:16:0f:b9:
         31:d5:ca:8b:56:dd:b5:b5:bd:02:79:48:a4:9f:9b:b7:cf:5c:
         3e:64:35:a2:ee:11:13:1b:ee:d6:e5:75:2e:34:6c:be:e5:a4:
         16:e1:e0:c9:89:37:c8:a0:e8:f7:00:b1:6a:e0:95:aa:48:e5:
         e0:18:20:68:de:ce:6e:ac:84:54:ae:65:66:9c:44:dd:06:5a:
         fd:b5:d3:dc:f0:d6:f1:28:de:0f:85:32:e8:25:70:7f:4d:35:
         49:e8:4a:ab:26:92:fd:2e:f4:bf:01:84:c2:e1:2d:be:a1:4e:
         a8:fe:df:72:04:15:27:c5:9c:42:68:19:68:d4:06:f9:9f:73:
         78:94:37:c6:00:d5:14:ba:51:25:08:d9:8d:6d:96:5b:af:c8:
         d5:68:54:2e:e4:b1:8c:cd:9f:3f:a7:40:f5:18:29:35:3d:62:
         53:6f:9d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:36 2026 by rpki-client