Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/006ed840-75b5-3aff-860f-a22dd51970a0.roa
File:                     006ed840-75b5-3aff-860f-a22dd51970a0.roa (raw, json)
Hash identifier:          UbB9HuNSEAvmsVViIO5GburzPl2JgFGelOYEWbPSrXQ=
Subject key identifier:   2B:8D:38:FE:A2:C4:EE:09:88:70:96:79:16:F3:5A:AD:8C:54:FB:D1
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584E6F3A4A559DCF3F7855AD9B00
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/006ed840-75b5-3aff-860f-a22dd51970a0.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     214640
IP address blocks:        206.168.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4a:55:9d:cf:3f:78:55:ad:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8dfa1257-97b1-493d-99eb-38b7fbf463ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:42:93:a9:5c:3f:c7:9a:f3:bc:74:e4:b5:09:
                    70:05:a6:d7:4a:e3:33:5c:31:02:3d:03:94:84:72:
                    76:73:16:42:e2:38:47:c8:5b:50:f0:4e:b8:a8:26:
                    74:9d:e4:75:6a:ca:bf:3d:f1:db:b4:c7:c0:be:90:
                    73:24:7a:62:89:78:7a:e2:a2:ee:43:41:c5:1c:f6:
                    a9:33:5d:24:20:65:40:62:2c:c4:54:8f:af:20:81:
                    7b:1e:be:5c:ae:f8:8d:59:5c:ab:74:26:c8:53:a3:
                    1a:03:85:23:ca:91:47:18:53:ba:37:e4:05:ea:8f:
                    4a:6e:3f:6b:46:35:1c:1b:f7:2d:da:71:e8:67:55:
                    b8:9f:04:74:9d:5f:3e:83:0c:d0:2e:7c:9c:2c:1a:
                    04:d9:07:c8:49:78:d1:46:b7:99:3a:23:79:96:35:
                    ea:5f:2b:43:08:4c:69:c6:8a:be:0f:15:3b:e5:0a:
                    55:49:6d:01:50:c9:78:2c:d1:a6:66:4f:d8:69:0f:
                    b6:89:75:00:b7:39:e0:de:3c:b7:5e:a8:d3:1e:2f:
                    f9:f6:34:ae:31:82:8c:98:6b:17:44:be:48:87:6c:
                    a5:85:47:dd:7c:2c:28:b4:46:c9:7c:bc:1b:0e:0c:
                    da:94:e4:98:d5:1b:05:75:04:14:65:33:57:ff:0d:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8D:38:FE:A2:C4:EE:09:88:70:96:79:16:F3:5A:AD:8C:54:FB:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/006ed840-75b5-3aff-860f-a22dd51970a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:3b:b9:ae:b6:1c:67:b0:a5:02:76:89:b7:c6:4b:2c:f8:
         d0:a2:84:0d:65:49:d3:7a:77:85:99:06:ef:7a:dd:29:1b:f2:
         82:9d:71:41:42:a3:0e:5d:3e:b1:a9:8e:7a:96:a2:42:05:2e:
         48:46:3e:6c:0f:33:d2:6e:dd:e6:0d:74:25:a0:c0:7b:7b:71:
         16:39:ae:49:84:5c:07:30:bf:b9:f9:ad:41:c1:09:d6:6a:b5:
         d4:db:bb:00:e3:ae:10:b2:f2:dc:a9:28:c5:57:90:24:99:13:
         84:0f:3d:40:ad:54:07:00:e7:5f:db:46:61:b3:c6:39:93:58:
         88:a9:1a:66:e3:53:fa:a8:fa:f1:40:21:ed:0c:cf:32:72:23:
         bf:5c:cf:fc:5f:6c:ba:92:c2:d8:60:1e:ed:6a:32:69:85:17:
         4a:ea:cc:9f:e9:f8:32:56:ac:c4:8d:6e:92:f7:09:e5:40:3c:
         d4:c5:12:fa:eb:65:c1:a2:80:6e:aa:58:11:4c:13:cd:5f:f7:
         f8:16:ed:80:76:ad:8b:8c:dc:c6:13:37:70:ec:53:1e:e5:b3:
         f5:2e:5d:47:c0:ab:b2:bf:3c:6e:9e:04:38:10:78:1e:4f:7a:
         28:78:af:d9:b5:9e:f9:bf:6a:af:9b:6d:31:40:03:2e:60:f7:
         c7:dd:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:36:03 2026 by rpki-client