Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
File:                     678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa (raw, json)
Hash identifier:          j++oXDp5eaymtKT9uQnc4PXE1iJggtCAcUxw5M/VC38=
Subject key identifier:   E8:C5:7E:11:7E:29:4C:F5:3D:5E:40:CE:93:15:C2:FB:CB:FE:A9:B9
Certificate issuer:       /CN=48f56219-8ac3-430e-90fc-cf0aea21115d
Certificate serial:       010D0C9F4328584E6C33F50BA7D613846862C440
Authority key identifier: C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
Signing time:             Tue 07 Jul 2026 19:00:30 +0000
ROA not before:           Tue 07 Jul 2026 19:00:30 +0000
ROA not after:            Mon 05 Oct 2026 19:00:30 +0000
asID:                     402714
IP address blocks:        206.197.76.0/24 maxlen: 24
                          2602:f368::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:33:f5:0b:a7:d6:13:84:68:62:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f56219-8ac3-430e-90fc-cf0aea21115d
        Validity
            Not Before: Jul  7 19:00:30 2026 GMT
            Not After : Oct  5 19:00:30 2026 GMT
        Subject: CN=5a13545e-3861-40c2-8e6a-0d44f267a5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:05:8a:8b:7f:1f:df:11:f0:b5:8b:dc:21:
                    f3:c8:86:fd:94:c2:15:61:82:12:66:c3:81:03:55:
                    1e:39:14:2d:a1:ff:ec:5b:a3:86:f5:ec:d7:1d:15:
                    ee:9a:cd:fd:23:9c:72:3d:30:47:40:26:62:13:2c:
                    e8:bc:74:76:a1:3d:16:bd:7b:dc:5f:f0:69:8c:b7:
                    93:d1:f0:01:7f:31:e1:59:f1:62:c5:60:af:4f:7a:
                    6a:4a:c8:11:a8:5f:b2:ad:50:33:6f:dc:9a:49:68:
                    40:70:5e:c7:f7:ef:4d:99:8f:61:d0:c7:8b:48:cf:
                    fb:e0:49:5f:f9:3d:57:3d:2b:d0:54:5b:53:84:66:
                    f0:24:56:9b:9e:31:29:94:71:5f:a5:ce:a2:a1:4d:
                    61:7d:4a:49:b2:2b:98:ec:19:1d:e9:a4:de:88:98:
                    4c:d0:03:3b:c3:17:bf:ed:2c:03:89:c4:8f:c2:19:
                    c7:7b:8f:67:8c:5c:b1:4f:91:fa:be:00:9b:53:23:
                    20:c8:43:71:38:ac:ec:dc:7d:d8:19:04:16:02:71:
                    bc:7c:74:d7:42:ed:04:9f:8f:e6:ed:fa:f5:e2:1f:
                    56:c8:2c:07:8a:27:c7:3a:da:38:c0:24:0a:6a:b0:
                    02:7f:fd:a1:a9:be:06:89:2d:44:9e:ef:13:56:e1:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C5:7E:11:7E:29:4C:F5:3D:5E:40:CE:93:15:C2:FB:CB:FE:A9:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.crl

            X509v3 Authority Key Identifier:
                keyid:C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.76.0/24
                IPv6:
                  2602:f368::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:74:1a:c7:08:5a:35:79:98:9f:a2:ae:de:33:6d:61:6e:24:
         79:f8:c0:37:e3:23:84:cb:d0:5b:28:1a:d6:b7:c2:63:0e:d3:
         a3:7b:18:ce:8c:dc:10:98:d4:6c:6c:5b:c3:52:ef:21:91:4c:
         9c:e2:fe:d4:84:1f:fc:67:2b:3f:c1:d3:47:8c:08:c5:5e:f2:
         f3:40:45:44:70:43:e8:44:89:48:73:88:5f:89:b3:65:fa:be:
         e8:87:9f:19:d1:e8:de:6b:6c:df:2c:5b:c1:6f:52:49:ad:e2:
         e7:5d:1d:d9:fe:e8:bb:6f:5e:ab:5f:31:d0:1d:85:b7:38:70:
         29:32:f2:f9:ea:ff:7b:b2:37:13:a0:28:d8:92:72:fc:c2:17:
         4e:c9:8d:37:39:32:76:2c:9a:27:e8:dd:c7:c3:81:88:b9:a8:
         df:cb:be:72:c4:cc:a4:ce:42:48:85:bd:21:63:5c:30:45:f3:
         4c:15:1e:84:a1:a7:44:5d:72:41:14:e6:f8:30:b0:34:1b:b3:
         b8:d9:ed:9d:2b:89:fb:84:e5:04:8a:98:cb:99:6b:70:ff:ec:
         ec:b1:91:92:11:ab:ba:2b:b3:8e:2b:bc:1d:1d:9f:bf:51:12:
         2f:3b:be:85:6b:81:89:44:9e:57:c2:bb:fe:c5:d0:5c:0f:92:
         fc:68:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:48 2026 by rpki-client