Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/c1529af3-d853-3116-ab55-0d4e1c919408.roa
File:                     c1529af3-d853-3116-ab55-0d4e1c919408.roa (raw, json)
Hash identifier:          PoURIK7SUXk+9tnSc7NQkRXkNGzwA20hgdHeq6P0pW0=
Subject key identifier:   2D:A3:17:4B:3E:59:82:69:58:A0:0D:BA:B9:3B:D0:B8:04:61:DD:A3
Certificate issuer:       /CN=61ad7677-7d67-434f-9051-821a223997ce
Certificate serial:       010D0C9F4328584E43E5BA55C1DDBD3B2410B380
Authority key identifier: FB:C9:AB:63:01:42:08:0C:F1:F0:7E:CA:61:F4:9E:35:E6:82:42:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/c1529af3-d853-3116-ab55-0d4e1c919408.roa
Signing time:             Tue 23 Jun 2026 08:30:33 +0000
ROA not before:           Tue 23 Jun 2026 08:30:33 +0000
ROA not after:            Mon 21 Sep 2026 08:30:33 +0000
asID:                     16509
IP address blocks:        216.177.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:43:e5:ba:55:c1:dd:bd:3b:24:10:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ad7677-7d67-434f-9051-821a223997ce
        Validity
            Not Before: Jun 23 08:30:33 2026 GMT
            Not After : Sep 21 08:30:33 2026 GMT
        Subject: CN=52a3b32a-033d-4226-a258-edb698b4242a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:ab:47:53:a7:cd:26:05:c0:30:5b:c2:6a:
                    1b:61:0f:17:09:50:5b:36:b4:a8:8b:5a:fb:24:60:
                    3c:b6:45:95:dc:7b:b1:7b:ab:c7:cf:c1:d4:a3:af:
                    29:63:08:e8:94:07:e6:c7:dd:3b:34:8f:1b:7c:8a:
                    ab:66:14:46:5c:79:a9:9c:4c:30:0e:8f:b7:2e:aa:
                    14:03:88:20:06:ed:f7:5f:52:e0:39:7f:b3:77:6b:
                    70:d5:74:ae:0f:48:26:7d:3f:40:d0:24:17:75:50:
                    39:24:aa:8d:7a:bf:0d:e4:4d:80:25:7d:6b:4f:e4:
                    b3:83:fe:50:f3:d4:4e:23:a3:5c:5a:72:35:e7:6d:
                    92:7e:1e:56:45:06:02:eb:c4:75:ef:ca:b5:e8:fb:
                    e4:da:b7:0a:b3:0f:f8:5c:c0:46:a7:0b:c8:f9:62:
                    2b:c6:1c:00:ae:82:b2:ac:bf:e3:c6:26:f9:8a:b1:
                    18:bd:2e:0e:7b:90:70:c1:a8:aa:39:a7:76:d3:0f:
                    98:e2:f6:c1:93:74:b5:fc:0d:3d:38:7d:99:68:66:
                    04:0c:da:42:d6:8d:89:9f:2b:0d:95:33:8f:8b:94:
                    31:b9:87:70:2d:d7:08:7f:65:02:21:3e:a8:b2:db:
                    98:40:3e:63:ce:84:91:b2:88:4d:b1:18:c8:50:57:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:17:4B:3E:59:82:69:58:A0:0D:BA:B9:3B:D0:B8:04:61:DD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/c1529af3-d853-3116-ab55-0d4e1c919408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce/61ad7677-7d67-434f-9051-821a223997ce.crl

            X509v3 Authority Key Identifier:
                keyid:FB:C9:AB:63:01:42:08:0C:F1:F0:7E:CA:61:F4:9E:35:E6:82:42:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/61ad7677-7d67-434f-9051-821a223997ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:b1:89:cf:4b:d8:79:4b:1f:ae:89:71:9f:68:91:40:f9:
         4d:13:80:51:ca:a3:89:c9:f7:b6:24:3d:94:5d:43:cb:51:5a:
         c5:c1:33:d4:2e:57:2f:14:11:f4:99:d7:85:b1:d3:b7:1d:67:
         90:84:3d:cf:ae:60:75:c0:cd:f8:f1:9b:2b:1a:a2:19:7c:59:
         1d:e6:1f:5c:a2:cc:04:fe:76:05:96:e6:50:72:fd:10:af:dd:
         01:cf:f3:f7:d4:29:c1:ca:f0:2b:76:1c:e4:39:10:20:9f:ed:
         95:50:90:f9:0a:34:5b:c0:c9:fb:b3:64:f1:48:fc:36:d1:ec:
         a4:6c:11:53:f7:fd:60:dd:f8:27:1c:13:c1:09:13:c3:db:e1:
         e2:0d:c0:69:92:8b:0b:b0:40:d8:1c:e4:9c:32:f7:bf:81:52:
         de:64:89:41:0d:a8:87:94:81:b3:9d:1d:f3:ac:36:ea:d5:e0:
         e3:b9:61:5d:9e:1a:90:d0:c3:26:bb:bb:8e:f2:58:7e:42:28:
         ab:f5:95:a2:ee:f2:5d:ba:43:86:9d:16:3d:9d:70:29:92:1e:
         1f:ce:09:74:7c:3e:87:9d:76:7d:cc:09:d9:2e:33:72:83:67:
         42:d6:02:9b:17:dc:16:75:ea:d3:28:6a:23:06:49:20:71:05:
         eb:74:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:02:48 2026 by rpki-client