Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/26521ff2-9f7d-3ed9-a431-6d2681d4420e.roa
File:                     26521ff2-9f7d-3ed9-a431-6d2681d4420e.roa (raw, json)
Hash identifier:          mECLhGxMlS0OVy/SykNVFL9kQW84Yym1HdKhFCajqfg=
Subject key identifier:   C7:96:EE:60:C0:C4:BF:35:DA:B8:44:AD:49:F3:E6:61:4A:FC:CA:EA
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584D59EA48F36D06EC47508D8200
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/26521ff2-9f7d-3ed9-a431-6d2681d4420e.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     3561
IP address blocks:        206.100.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:48:f3:6d:06:ec:47:50:8d:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=387470e3-8d59-4ea4-9e38-25481a19cc16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a3:50:c7:62:54:39:38:89:40:d8:f4:70:0c:
                    c3:51:97:46:02:4f:97:8f:5d:2f:e6:64:00:8c:d4:
                    54:96:6a:ae:cc:fe:02:93:90:4e:ae:89:a0:9d:6c:
                    41:29:3e:01:5b:c7:4b:11:eb:6c:be:58:ef:84:52:
                    64:86:1d:a2:6c:bc:b1:d5:e8:6b:50:cc:a9:73:da:
                    a4:c6:7a:41:ea:d5:5b:52:6c:cf:84:72:73:4d:4d:
                    fb:d9:0d:6c:d5:9c:f3:84:ed:13:01:7f:40:9e:d3:
                    e2:ba:30:ce:96:50:42:16:a1:ea:ae:5c:3d:6a:58:
                    2a:5d:4c:db:59:0b:4b:64:a8:90:21:fd:5a:a2:7c:
                    00:e0:32:cd:69:0f:ad:bf:1f:00:50:8b:23:c0:32:
                    87:36:8d:31:8a:16:c4:21:7c:1a:8d:5c:04:d1:43:
                    1d:ac:22:a4:19:95:22:aa:f8:14:3a:59:dd:30:a3:
                    0d:eb:50:af:4c:b2:b5:9d:b2:ec:ee:15:da:b4:8e:
                    0f:00:a2:9c:22:f1:1c:a7:95:d6:4f:59:61:f1:46:
                    81:7b:f9:d0:6d:c4:c0:c0:d9:49:b4:ea:11:b2:1a:
                    d3:ac:e5:e7:d2:69:ad:72:2a:35:44:10:6f:17:ba:
                    8f:7a:12:db:7e:3f:c4:2a:66:5f:de:64:72:a1:64:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:96:EE:60:C0:C4:BF:35:DA:B8:44:AD:49:F3:E6:61:4A:FC:CA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/26521ff2-9f7d-3ed9-a431-6d2681d4420e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.100.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:90:31:a8:94:3c:2c:14:96:a5:cb:8c:ec:6d:44:16:02:53:
         8b:77:ed:f6:bc:6f:50:0c:22:8e:90:ce:c3:84:3d:22:06:45:
         6a:5f:6f:cd:9a:c2:d6:b6:94:3f:73:b2:38:7f:26:ec:86:55:
         56:74:f1:60:fe:19:11:df:c3:5b:f5:b3:c7:45:39:0e:dd:1c:
         66:43:0a:6a:8d:17:d7:fe:f4:34:33:a7:3f:92:ff:7e:9e:0b:
         f4:07:e2:cf:b8:4f:52:ea:e5:75:49:d3:3b:77:9b:bd:ae:7d:
         58:32:e7:4d:0a:40:96:e0:39:43:2c:b2:75:51:89:77:34:ef:
         bc:23:fc:34:f4:4d:21:d0:93:29:c5:af:cc:9e:76:0f:f8:71:
         26:47:ef:13:18:e6:2a:b3:42:12:25:32:e5:cb:7a:69:65:4d:
         24:ad:b3:9c:77:5c:30:c2:a4:56:62:50:23:9f:ae:12:dd:d0:
         fa:06:ad:e2:91:2a:6b:9c:f0:08:c1:f3:a5:7f:63:66:1e:ff:
         5c:65:c0:d6:dd:cd:fe:fe:f9:38:c8:60:b1:97:aa:f0:c8:e1:
         42:9c:9a:fd:06:6c:db:63:d1:eb:6c:9e:88:93:4a:7c:b6:da:
         5b:eb:0e:a8:fc:88:b8:4e:34:5b:28:d2:7b:14:bb:c9:2a:2a:
         dc:6b:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 10:15:43 2026 by rpki-client