Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa
File:                     f2b995eb-586f-39ad-969c-884580b42a0e.roa (raw, json)
Hash identifier:          +uTvyWsx2PdjzCAn0CgJF49g9ONx3EP1c13AX/kMqAw=
Subject key identifier:   51:B0:E6:AF:D8:D9:A8:CB:83:E7:F2:B1:61:15:77:B5:A8:46:54:A6
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E3A2F37F587375DCA4B130740
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     25899
IP address blocks:        206.192.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:37:f5:87:37:5d:ca:4b:13:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=257752f0-d365-45ed-9913-9474877aae47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:f4:41:fe:33:52:a6:c7:d0:65:35:69:57:
                    b6:00:7f:71:f5:43:48:60:e9:58:89:c3:cb:90:cc:
                    3e:7c:af:05:70:5a:31:e5:8f:84:15:22:77:40:d8:
                    63:fd:0b:85:3e:b9:2e:94:c6:ed:56:4b:96:b0:46:
                    96:f8:d0:4e:61:c3:ef:ec:cf:4f:69:da:00:0e:89:
                    3c:75:36:96:5c:e6:ca:1a:07:14:35:c3:2e:10:54:
                    61:24:1c:84:52:ab:3d:a3:27:8b:89:ba:3d:8f:38:
                    86:7e:37:f6:5e:aa:35:48:72:83:a1:5f:d6:c9:76:
                    ea:76:11:d2:dd:86:35:6b:fa:5d:a4:e3:4e:83:9c:
                    bb:05:be:73:66:f5:ad:34:d3:2c:76:20:fb:80:ec:
                    d3:ff:e7:57:fa:1f:ff:c0:db:e8:b8:59:53:1a:aa:
                    df:ea:f3:7f:98:b1:c2:66:70:ff:51:ad:a0:12:71:
                    eb:15:af:55:c9:16:6c:83:af:98:5d:55:c0:d9:c9:
                    0a:4a:4d:db:92:4b:41:db:f9:b6:de:37:60:16:ab:
                    dd:ed:6c:48:9f:bc:90:ad:89:da:f5:07:32:8a:af:
                    1b:74:6b:ce:64:0c:bc:fc:e7:f2:f1:de:c6:4a:ef:
                    20:ce:91:35:18:cf:5d:cc:71:6c:e6:06:54:0d:02:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:E6:AF:D8:D9:A8:CB:83:E7:F2:B1:61:15:77:B5:A8:46:54:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:97:f1:87:1f:21:af:b6:d5:4d:2b:48:ea:89:3a:80:cf:
         e6:6f:42:b1:95:09:4c:7c:19:a7:75:c3:d8:1a:23:11:20:83:
         c9:ba:19:70:18:4c:8e:33:06:6e:09:10:f3:eb:8e:a1:2a:98:
         9d:fe:93:63:55:cd:bf:eb:6e:d7:16:62:5f:f7:c8:f7:0b:67:
         19:13:7d:da:cc:eb:c9:04:a1:9d:12:02:d6:91:d1:84:ea:37:
         ac:b5:2e:63:93:a6:6b:b6:56:c6:a5:b7:8f:7f:a8:6c:eb:fb:
         f7:9b:56:92:2b:62:09:0c:f4:29:dc:6f:d5:c0:98:5d:f9:55:
         26:25:87:9a:36:f4:fc:1e:1b:14:56:aa:10:52:5b:90:e1:3d:
         4c:67:bc:c5:5b:4c:5f:76:cc:d2:ed:f7:90:c9:71:a0:ac:e7:
         fa:e7:af:03:53:0c:3f:4d:ea:19:f4:b2:6e:fe:7c:e1:c3:0a:
         16:f4:05:c7:34:75:b8:fd:61:fa:b7:02:72:1b:d9:f8:77:a6:
         8e:40:24:74:26:b2:18:d4:0d:dd:7c:39:01:4e:24:12:2e:8f:
         6b:e3:c4:7b:34:71:2a:cd:63:83:37:8f:a1:63:92:49:cf:9c:
         19:40:35:6f:26:66:0a:94:83:0f:f9:7e:65:8b:69:d9:70:5b:
         e0:23:6a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:52:17 2026 by rpki-client