Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6deb8966-f68a-3c13-b5ca-d69f962ee014.roa
File:                     6deb8966-f68a-3c13-b5ca-d69f962ee014.roa (raw, json)
Hash identifier:          zIlxUx+LlGPuI973bycQukbnXEMsmI/Pzp4aM3xXMmQ=
Subject key identifier:   FC:76:74:98:F2:01:26:20:A6:53:D8:E6:D0:1E:3B:79:7E:3A:04:30
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E5A49F385D66A9B7CEAC81680
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6deb8966-f68a-3c13-b5ca-d69f962ee014.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        134.224.169.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f3:85:d6:6a:9b:7c:ea:c8:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=619641dd-d3dc-41bc-bb40-c7a4f85d14f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:d0:8a:97:1a:e4:25:5d:15:45:ae:a8:d0:
                    19:38:06:0f:61:19:9f:44:b1:d4:c0:c5:ef:c0:c5:
                    3c:8e:32:88:da:07:6b:d6:6f:85:1d:4c:f2:d0:21:
                    ab:98:7b:d6:a7:fd:eb:d0:36:2b:21:a9:b4:95:a3:
                    a7:b7:72:4e:09:20:ca:30:ba:8a:5e:95:f8:d0:8f:
                    eb:f9:ec:cd:dc:1b:0f:69:43:5c:2b:15:66:a9:e3:
                    f1:43:6d:0a:c1:45:48:5f:2e:49:84:1f:bf:bc:c5:
                    86:7b:a2:b2:dc:68:93:15:af:4d:bc:73:6f:94:5a:
                    9a:b4:7a:fc:10:f0:1a:34:1e:4e:d7:9d:8c:ff:88:
                    a7:2c:32:99:36:25:54:33:fb:b2:27:36:f6:e1:4e:
                    f4:ee:69:62:dc:80:de:82:fa:f6:fe:c1:c5:85:d0:
                    37:e7:71:8b:08:ce:c6:df:7b:d7:81:98:8a:a7:13:
                    58:40:15:9e:f4:d7:77:4f:dd:ef:f0:48:bd:de:dd:
                    27:8d:a3:01:ab:a1:f3:60:0b:f3:5d:60:4e:89:28:
                    ff:85:78:23:27:84:9d:4a:d1:8c:53:41:c2:d4:99:
                    4d:a7:6b:41:39:f1:6d:24:7f:80:a8:dc:88:69:5f:
                    b8:4f:9e:ae:2f:0e:e5:ad:21:53:45:83:db:29:99:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:74:98:F2:01:26:20:A6:53:D8:E6:D0:1E:3B:79:7E:3A:04:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6deb8966-f68a-3c13-b5ca-d69f962ee014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:b4:5a:49:3e:f8:75:24:86:79:4e:53:5a:3d:d6:04:8d:
         18:af:81:24:00:fc:ad:90:dc:4a:dc:e3:46:62:51:df:ce:3e:
         43:05:ea:77:4e:49:1c:23:f8:63:b4:30:a5:f7:29:97:e0:4f:
         d5:64:4f:ee:5d:5a:f4:aa:87:2c:4c:8b:c8:a8:24:0b:83:30:
         65:ff:b8:2c:43:30:1b:2f:07:02:52:3d:a4:1d:36:85:76:c5:
         10:25:5f:1a:32:5f:5b:c6:3d:4c:15:e0:5e:9e:12:d7:ec:7d:
         ab:99:09:c9:3c:bd:e6:4e:d4:19:df:b7:29:a1:7e:48:1c:5d:
         89:98:11:66:f7:29:38:e9:51:3e:81:ff:c8:7a:44:ee:b7:b7:
         f9:f4:69:9b:e9:cd:32:17:9d:f6:3e:f5:fb:db:32:a9:d2:0a:
         f9:b7:98:61:38:f5:51:88:93:1d:ee:52:71:f3:4b:ce:22:2a:
         4f:72:fb:1a:96:49:e8:15:5e:82:0e:d9:ea:11:c2:d7:a4:28:
         d9:82:b4:94:bd:99:f9:f3:25:bf:58:84:fe:14:37:ea:92:fe:
         5c:51:db:19:2b:5e:13:d6:58:db:64:fc:8f:d1:17:d0:e1:ad:
         ef:76:eb:bb:66:63:44:cb:a6:a8:2c:ce:37:33:96:d8:82:98:
         22:b0:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:25 2026 by rpki-client