Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
File:                     62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa (raw, json)
Hash identifier:          cKWC/99VqeWgUmn6pS8kbeDMf/7VBpuuwaXtfyUgeCg=
Subject key identifier:   8F:49:FC:E2:83:D2:CF:13:C7:68:21:CB:10:EB:EE:3B:F0:84:C1:F3
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584E4AEF40B313785D380FAABC00
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     64269
IP address blocks:        168.245.216.0/21 maxlen: 24
                          208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:40:b3:13:78:5d:38:0f:aa:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=a6e99536-e87a-4c36-bf6c-ff4d04ed6dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:c7:18:43:60:ef:06:7b:c3:2f:c4:69:ee:
                    26:8f:76:e6:fc:df:19:ea:c6:ab:70:59:19:d4:1a:
                    87:e4:4f:e0:e8:4b:64:98:e0:3a:c9:5d:81:32:3f:
                    bb:d7:2d:2f:90:f8:b2:cb:22:67:c8:38:6d:2a:fa:
                    a1:b8:be:00:b7:33:82:b7:3f:a3:12:06:9e:87:f6:
                    f9:fc:16:c0:f2:7d:d7:e2:6d:33:62:ba:63:d5:b2:
                    cc:3f:7c:b8:4a:23:3e:0d:25:d6:4d:e6:9b:a0:88:
                    05:11:be:b8:80:cf:95:0d:2c:48:8a:e8:ec:6c:8d:
                    e1:de:9a:e6:f0:0d:0b:0e:d2:15:f6:a6:4b:c0:64:
                    5a:4a:b4:4d:92:00:66:1e:80:22:2d:3b:83:54:18:
                    0c:88:05:e0:12:32:e1:6e:ae:80:e3:76:aa:72:8d:
                    0c:71:92:6c:8c:e9:4b:6c:48:64:ed:f5:ec:24:77:
                    d2:99:ef:42:43:c5:6d:19:45:14:cf:09:5c:90:63:
                    d1:61:ac:4b:e6:4b:28:69:00:4a:80:5d:86:1b:64:
                    1d:69:9f:61:97:65:3e:ca:d9:a1:26:a7:d0:f9:c2:
                    43:cf:4d:73:46:4c:7d:56:07:a4:91:56:da:ff:d6:
                    c9:4d:01:1f:17:ca:4c:6b:49:25:5c:80:3c:66:d7:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:FC:E2:83:D2:CF:13:C7:68:21:CB:10:EB:EE:3B:F0:84:C1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:99:ce:90:8a:ab:e9:dc:c2:20:ca:68:f4:72:25:fd:0c:dd:
         5f:5c:be:d6:50:62:7d:37:f1:a6:9f:3e:bc:70:7d:ea:b0:da:
         c6:82:47:8b:e9:d4:cd:70:70:e5:06:40:68:33:ae:f5:6f:b1:
         8e:b5:33:ce:d2:e2:a0:32:8c:5a:e4:bd:c2:a4:f8:1f:d7:ce:
         2f:4d:fa:57:c8:3b:b3:5e:d4:76:9b:e2:b1:c1:ab:6e:97:56:
         81:4a:e3:35:57:05:ac:e9:a5:7d:66:15:62:51:40:43:86:cb:
         67:22:b1:51:28:c2:54:9e:95:1c:45:6a:99:92:e4:07:d4:37:
         7f:0a:a9:9a:8e:2d:c3:fb:b8:01:69:09:97:62:a0:3c:5e:64:
         bb:b7:8d:fe:b5:31:68:dc:da:9b:18:e4:fd:7b:50:23:37:73:
         00:ee:96:c6:41:7e:e6:83:7d:10:4c:82:af:2f:0e:3b:22:4c:
         3b:42:60:e0:53:6e:d2:84:91:4b:81:cc:60:fb:ee:e0:3d:5d:
         43:36:ba:8d:15:ad:ea:50:8d:24:b1:d2:2d:c2:52:5a:ef:95:
         59:0d:da:a9:ef:c0:85:3c:66:c5:8f:11:09:37:1f:93:09:52:
         a9:f7:1f:bd:e2:dc:d0:21:66:f7:5f:56:09:d7:2b:93:22:15:
         68:11:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:53:10 2026 by rpki-client