Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
File:                     8edcb168-4dfe-3fff-883b-ec95736ecd00.roa (raw, json)
Hash identifier:          Wp9+qgpuk02GAtGbKYwZHQcyHNKObx+QHYcUB1y+ETk=
Subject key identifier:   FA:03:14:66:41:5C:2A:F5:74:CB:C6:0D:6F:3C:60:C0:13:71:04:34
Certificate issuer:       /CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
Certificate serial:       010D0C9F4328584E6144BA132ED43B26C15FB640
Authority key identifier: 58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     0
IP address blocks:        149.112.96.0/22 maxlen: 32
                          206.81.80.0/22 maxlen: 32
                          2001:504:16::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:ba:13:2e:d4:3b:26:c1:5f:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6e9c51c-6cf9-458e-a3ac-47c497a2617c
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=b89eb22c-2470-49a1-8884-83c612a152a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:29:cb:7c:c8:88:90:ac:b4:20:d3:48:48:
                    08:c5:f9:ad:67:b9:fe:b7:dc:d8:59:c5:29:77:de:
                    97:fa:22:e0:5a:3f:11:4e:a7:c6:59:9c:0c:fc:4a:
                    42:f5:78:af:1c:04:0f:df:19:24:9e:e5:46:1e:2c:
                    81:6f:57:ab:d8:f1:19:5e:08:4c:1c:2d:80:b8:2e:
                    db:f8:9d:52:80:04:7b:89:39:b6:8c:0c:5d:4a:13:
                    f9:2e:77:35:c4:47:5c:c7:bb:29:6c:dd:d2:ec:c5:
                    c7:e5:0e:1d:e2:d7:26:b9:41:34:f2:a5:0c:6b:44:
                    5a:c8:c5:5d:c9:29:9a:d6:04:42:6d:6e:37:b0:d0:
                    82:22:2d:cd:2b:95:7a:92:aa:fc:9e:28:2b:67:74:
                    ee:ab:56:ef:50:c8:aa:2a:80:5d:e9:55:59:f2:f8:
                    68:fb:6a:c3:d2:19:ac:a3:2c:bd:ee:3d:9b:9b:f8:
                    45:9d:ef:6a:83:ce:cb:9e:de:ae:93:18:73:a8:e4:
                    38:c5:45:75:7d:2f:27:80:23:7a:c0:b6:fe:8d:ee:
                    83:0e:5c:09:d2:e7:54:e7:6f:2d:d3:5e:76:b5:85:
                    2a:ab:77:c3:56:dd:60:3c:e9:52:d9:1d:ba:ce:92:
                    a2:bc:df:30:cf:cb:f5:2a:1e:bf:0d:09:de:72:69:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:14:66:41:5C:2A:F5:74:CB:C6:0D:6F:3C:60:C0:13:71:04:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/8edcb168-4dfe-3fff-883b-ec95736ecd00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.crl

            X509v3 Authority Key Identifier:
                keyid:58:43:74:56:C8:F5:48:77:8A:42:F3:73:EA:2B:D7:0D:86:04:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6e9c51c-6cf9-458e-a3ac-47c497a2617c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.96.0/22
                  206.81.80.0/22
                IPv6:
                  2001:504:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:27:ca:68:85:00:22:aa:ac:96:8d:30:b5:2f:e4:6f:3c:7a:
         3c:ec:ef:1f:1c:f5:1f:2b:37:86:d1:2f:2f:5c:57:df:ff:b9:
         2c:0a:c9:b0:2b:12:a0:05:fe:bf:d9:ca:b4:ac:6c:17:3e:24:
         03:aa:dd:f5:4f:16:bf:d7:0f:2d:a9:1d:13:34:0c:e2:b8:8f:
         bb:a7:eb:a5:37:c6:16:91:db:07:32:df:e4:32:2b:53:10:e3:
         aa:50:ef:bd:16:5e:3b:d1:a3:38:74:80:11:ec:ae:a2:da:f7:
         fe:53:c6:e2:92:45:96:01:78:2a:e0:07:e9:31:9a:71:b7:50:
         d6:43:47:f5:d2:d7:df:49:4a:c4:73:40:1d:43:8f:89:74:1c:
         3b:3f:24:50:64:5f:c6:3f:55:da:d8:0b:1e:e5:f6:a0:9e:8e:
         24:96:4b:4e:e5:e3:d1:bc:aa:db:d4:6a:d8:c2:6a:3e:e0:21:
         c7:53:94:16:5d:4e:f7:79:3a:ad:92:9d:b1:c0:24:30:51:cb:
         5d:bd:9a:27:99:ff:15:b2:65:65:d3:d8:99:15:91:20:f2:77:
         c3:3d:f7:83:28:ad:7f:30:ba:b5:a6:a0:1d:35:8e:5e:c1:5d:
         34:4a:cc:25:b0:d3:96:5e:cb:01:09:8c:54:b8:02:65:c7:fe:
         82:8f:44:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:48:21 2026 by rpki-client