Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f6a224e0-4064-3d7b-960c-27521b99fec6.roa
File:                     f6a224e0-4064-3d7b-960c-27521b99fec6.roa (raw, json)
Hash identifier:          bAWsl/9vkjmj3HYIEl8hgMVaaHtCUM0zEKvDbogRKn0=
Subject key identifier:   38:5C:F2:7C:15:15:B1:A4:EE:0D:EC:F2:32:29:E6:77:CF:E7:26:76
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D1B19F72DA0E1F5BDFF06FD80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f6a224e0-4064-3d7b-960c-27521b99fec6.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        206.108.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:f7:2d:a0:e1:f5:bd:ff:06:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=104a902f-3e73-4ee9-be81-952ca6eba342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:08:35:28:d2:bb:c8:1c:75:26:c8:5a:d7:
                    b8:cb:23:a7:3a:67:46:fd:4b:ed:28:c8:70:bf:b0:
                    10:c2:96:40:75:52:97:5f:16:c2:a2:4a:1a:23:41:
                    44:97:33:c1:9f:a1:be:63:fb:5b:a1:77:e1:9e:aa:
                    5e:9b:b3:83:bb:1b:3c:57:28:9d:1c:7f:c8:77:c8:
                    14:e0:e6:76:fc:20:5f:ef:0e:ac:36:2e:de:c2:69:
                    78:44:1c:e0:b9:60:4e:d8:4c:42:62:11:7c:2f:48:
                    47:ff:a1:04:bd:62:85:52:9e:7b:8d:14:fd:50:e2:
                    31:31:7f:22:a8:b8:f6:3d:6a:d4:47:07:b9:c0:e4:
                    6e:18:08:d5:93:68:9d:c0:2a:ee:cd:82:f3:b4:27:
                    2d:79:f8:6e:a7:a2:90:a1:cf:c3:37:3e:ed:5f:a2:
                    ad:38:9e:c6:a4:e0:7f:d5:0a:f1:d9:81:31:1e:77:
                    7f:f2:46:8e:a7:f8:48:e5:a4:fe:2a:65:64:db:38:
                    ef:91:3a:00:f0:a9:5b:d4:81:6c:d7:fe:13:60:bf:
                    41:20:eb:b2:45:cc:f5:9b:80:71:2f:ce:4a:42:31:
                    5f:9b:8f:dd:f3:6e:6e:b3:65:fd:c8:eb:3f:d0:cf:
                    c4:89:8b:b0:5c:c9:84:d0:77:c2:81:e7:0b:0f:bd:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:F2:7C:15:15:B1:A4:EE:0D:EC:F2:32:29:E6:77:CF:E7:26:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f6a224e0-4064-3d7b-960c-27521b99fec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:83:5a:94:89:48:03:36:a3:22:dc:1e:93:28:dd:bf:33:b7:
         4a:52:4e:e8:fe:1b:64:15:f4:a5:4a:69:1c:9e:f0:bb:b3:46:
         b1:cd:55:aa:ad:04:cb:c1:09:91:41:f5:cd:90:95:18:1d:35:
         fb:78:8d:a0:0f:dc:72:f5:13:da:4f:77:86:a8:ed:ab:89:b4:
         ce:33:dd:7c:61:8a:e7:69:85:ab:e3:a0:1c:12:e2:a9:e9:3f:
         ca:2c:5d:b3:54:f3:de:56:ab:da:2c:84:d8:1d:ad:38:3f:a7:
         11:57:7b:c8:4b:b4:48:d0:d8:1a:55:0f:cb:c5:62:b3:9a:3c:
         b0:cc:a3:c1:0e:dc:59:06:37:86:af:e2:94:c3:7c:70:0e:af:
         24:06:a4:12:05:72:43:6b:d5:f1:3c:90:f9:96:90:2f:2d:41:
         9b:36:91:86:77:e1:b5:f9:78:97:d1:bb:de:ce:58:35:4a:bb:
         c1:78:c6:16:e6:ce:e5:bd:19:0c:61:28:38:53:45:3b:a7:84:
         75:75:23:19:10:b1:c5:b3:db:0a:d3:97:21:03:b9:df:b1:ad:
         a3:7e:b4:a8:d8:12:a5:4f:7a:23:19:14:38:0c:6d:9f:59:3a:
         00:48:ea:5d:da:15:1c:f8:9f:0c:c5:59:c7:ce:b0:9e:70:a0:
         19:a3:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:55:36 2026 by rpki-client