Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09411eae-c6c6-3afd-ac8a-7339c44cca35.roa
File:                     09411eae-c6c6-3afd-ac8a-7339c44cca35.roa (raw, json)
Hash identifier:          6CBfBFt1qFwbUBNQIahChgdnJftPmVi9W6MjkFLGKfw=
Subject key identifier:   5F:39:CF:31:59:F0:80:15:4B:AF:37:8E:AE:F8:DB:1D:14:70:57:13
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D091259A692A0B9872E305A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09411eae-c6c6-3afd-ac8a-7339c44cca35.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     30633
IP address blocks:        206.75.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:59:a6:92:a0:b9:87:2e:30:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=667025cd-bdcc-486e-96f7-bb0b0a1639f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:35:bb:65:b9:26:07:a4:83:0a:60:07:eb:
                    e7:39:b0:5e:be:02:4d:80:e5:37:80:64:01:f6:7c:
                    18:b3:f0:05:cb:e7:cc:95:f4:ce:29:af:b0:8e:2b:
                    9d:77:c8:b3:6e:82:60:a0:ea:13:b9:7e:76:db:28:
                    d5:a8:3e:5e:0e:6b:9b:4e:33:b2:47:3a:32:0c:89:
                    18:2f:b7:68:17:b2:25:44:2b:c5:99:01:d9:ff:09:
                    81:40:3f:80:b9:7e:61:c1:b7:92:6c:b4:b7:2a:8e:
                    af:65:6b:f8:6a:55:54:32:5e:ca:9d:86:d1:d4:ff:
                    53:85:06:72:7d:03:65:5a:09:33:33:00:10:3c:ed:
                    c6:10:3d:7a:68:dc:b4:64:07:73:98:58:64:59:be:
                    e7:1d:f0:f7:3b:fe:15:68:a4:5d:00:2d:51:65:3e:
                    2b:3d:53:4e:9c:c3:66:fc:37:59:92:55:69:46:05:
                    e3:46:02:2e:09:79:26:ea:dc:d2:1e:b3:fb:d6:e6:
                    eb:bf:4c:94:3f:05:63:56:72:ca:1b:e5:ad:40:74:
                    70:df:ba:b0:aa:f3:97:4e:b1:e6:9c:c6:bc:6e:a4:
                    ef:0b:96:6f:5e:2f:d7:d7:af:05:46:c7:64:7d:95:
                    22:84:15:cb:ba:ee:1d:a6:78:8e:88:62:fb:7e:aa:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:39:CF:31:59:F0:80:15:4B:AF:37:8E:AE:F8:DB:1D:14:70:57:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/09411eae-c6c6-3afd-ac8a-7339c44cca35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.75.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:87:37:b1:79:26:e1:c3:f0:2f:76:f0:94:24:6f:33:b7:9e:
         90:cd:3d:24:90:31:44:8c:e7:b2:5d:27:52:38:16:ce:ac:03:
         a0:9d:b1:19:41:ee:e2:50:aa:5d:91:2a:fa:99:ab:54:b8:bc:
         6c:dc:10:4b:d7:0a:66:a0:3d:49:96:90:69:ec:2b:04:f7:49:
         d9:76:14:fc:a1:ff:91:b5:84:50:08:31:df:90:f2:f2:b8:3a:
         77:33:fe:9a:32:08:16:8e:5a:55:ce:7b:3d:76:7d:fa:a5:fb:
         28:00:25:24:e3:84:e4:9b:d4:ab:e9:65:7e:e5:e6:af:27:03:
         b6:dd:7e:45:db:4d:22:aa:f4:63:3b:15:33:c3:ee:9a:8d:2b:
         f9:d3:b7:b4:e6:ab:08:c6:11:6a:0e:cd:50:67:84:c5:c6:6e:
         21:0f:f6:82:be:69:09:1e:ec:40:bc:ab:4e:ef:9e:ed:0f:d5:
         6e:46:92:13:d5:4d:69:d8:bc:01:3c:01:c6:17:3e:c3:6b:b4:
         e0:70:6d:c1:44:e5:df:ec:23:00:94:b5:61:0c:ac:a3:da:3c:
         f0:41:79:c2:98:de:a2:e0:aa:6f:f4:a2:62:86:bc:d0:20:68:
         5d:4f:53:23:c7:2d:e3:4c:67:51:07:6c:61:d5:31:e2:a2:1f:
         39:91:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:56 2026 by rpki-client