Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa
File:                     04525e4f-2d87-3427-9319-d137e4a382fa.roa (raw, json)
Hash identifier:          LnrHxta3amEo1k6jX/H3YjWimNxAnXvQkblKr+tYW90=
Subject key identifier:   3C:5E:00:43:3B:71:BA:52:9A:7F:21:59:B4:56:39:59:19:C2:48:56
Certificate issuer:       /CN=ccfe663c-8878-4cc0-a772-17e76a493040
Certificate serial:       010D0C9F4328584D07AD222687268FB058AD4D40
Authority key identifier: FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     7018
IP address blocks:        206.121.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:22:26:87:26:8f:b0:58:ad:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccfe663c-8878-4cc0-a772-17e76a493040
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=89a68b99-8494-4e3d-b968-14067a97d4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:07:bf:d6:19:1b:31:61:99:c8:41:a5:d8:
                    98:a2:13:12:cb:7d:12:bf:55:ee:a7:26:f3:49:db:
                    f9:e1:4c:f2:ce:98:4a:df:08:a3:a5:03:cb:3d:91:
                    19:a8:70:f5:0a:72:ad:f5:2a:63:fd:3e:bc:d8:29:
                    7e:e6:ae:e9:df:f3:34:72:5c:dc:f1:a6:91:1f:2d:
                    c6:65:33:cf:2f:05:0f:6f:97:1c:34:c9:bb:fd:f0:
                    f0:24:3a:c9:72:1c:fb:bd:33:05:32:39:13:b5:ee:
                    d0:4a:10:72:03:2d:a5:b4:13:42:36:ea:4d:25:e5:
                    e6:41:b5:6a:f1:6e:54:05:e0:83:7c:e9:de:fa:97:
                    51:91:6f:42:d9:89:ed:0e:c2:50:96:93:5f:e8:1e:
                    01:1d:10:aa:a9:44:3d:0e:77:eb:01:f8:af:ce:8c:
                    60:63:fa:2d:e1:9c:1c:63:41:c4:33:2a:fa:72:e0:
                    a7:fa:9e:31:ef:d0:07:e9:c1:21:6a:99:13:50:64:
                    47:fd:44:c1:ee:5b:4c:41:0b:50:76:ab:b6:e3:10:
                    f9:40:ef:9b:04:94:05:ab:9a:e8:f5:6a:22:17:35:
                    33:9f:55:12:0c:eb:55:4e:c1:ea:1f:7c:bf:eb:7a:
                    4e:8e:25:a5:2b:12:85:a0:f5:dc:e2:36:11:98:c8:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:00:43:3B:71:BA:52:9A:7F:21:59:B4:56:39:59:19:C2:48:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/04525e4f-2d87-3427-9319-d137e4a382fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040/ccfe663c-8878-4cc0-a772-17e76a493040.crl

            X509v3 Authority Key Identifier:
                keyid:FF:62:FA:82:57:51:D3:39:FF:4E:2C:90:21:55:BE:D4:A8:D8:DE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ccfe663c-8878-4cc0-a772-17e76a493040.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:cc:69:06:74:5f:01:d6:4d:d2:41:0b:41:22:a1:28:70:
         7b:78:c0:6d:b3:a1:26:de:8a:c4:99:8d:2b:19:38:95:07:0c:
         25:ab:0c:14:3f:c3:be:09:56:ad:1d:5d:80:07:20:d1:4a:a5:
         34:bd:18:ee:31:6d:a7:3e:ca:a2:8d:36:23:99:64:82:d9:bd:
         58:4b:df:f4:28:ac:f9:f4:e5:89:e0:ab:fe:ab:45:3d:4d:56:
         6f:99:eb:90:ee:58:89:7d:af:61:4e:d2:dc:b5:4c:87:c5:32:
         78:46:06:f0:a1:3a:fe:bb:fb:23:82:50:72:00:71:0e:20:64:
         d8:17:64:a7:1b:4e:6a:b2:75:59:ba:7c:72:d4:6e:fe:1f:a4:
         41:9f:e6:7c:07:c5:00:31:cb:0c:44:4b:f0:29:d7:90:d4:47:
         88:0b:8d:51:8a:a2:50:60:3b:a2:b4:94:e0:82:30:c8:b0:68:
         2e:fe:b8:7f:2d:b2:6b:93:e4:a5:b8:2a:a8:a0:b7:31:b3:81:
         cd:03:3b:c4:d2:c1:4c:b3:55:9c:2d:60:71:9d:e5:20:16:9d:
         cc:61:d2:3c:16:f6:0a:bc:5e:10:fe:ad:d8:4c:bc:cb:fd:9f:
         76:49:6f:92:ab:57:8e:2d:a8:a4:a2:f0:0c:23:80:78:a1:66:
         a8:7e:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:39:10 2026 by rpki-client