Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/df820e25-8db0-3c7e-93b1-1100c8628b64.roa
File:                     df820e25-8db0-3c7e-93b1-1100c8628b64.roa (raw, json)
Hash identifier:          AquB4f3HxP4NxC98GGFBsmFiykeiUtlzJ7Ko8cW4ulc=
Subject key identifier:   A4:C7:99:AC:49:2F:5A:91:D3:27:BE:2E:20:B4:32:B1:2D:AE:8C:1B
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584D422F8673EB8B7A7F00824880
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/df820e25-8db0-3c7e-93b1-1100c8628b64.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     22418
IP address blocks:        206.71.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:86:73:eb:8b:7a:7f:00:82:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=de736f3a-c047-4761-b211-5c2691dd851c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:7f:21:80:b9:f4:51:5c:4b:4f:dd:34:bc:
                    a5:76:31:83:6b:4c:a5:27:b3:71:4c:10:c5:03:46:
                    77:6e:6e:0c:14:9c:3e:bb:f2:b1:04:3b:8f:61:de:
                    e1:67:4a:4c:01:24:f0:d9:0e:62:c3:25:a8:17:fe:
                    cf:d7:1d:b3:39:6b:b2:92:71:d4:c1:6b:f4:31:1d:
                    b8:f1:5c:3c:cb:e2:7e:22:a2:8b:95:ff:fd:09:6e:
                    c5:18:6e:30:fd:70:37:55:21:00:a9:41:91:61:0f:
                    e7:8a:ba:31:4f:11:86:9b:04:ec:de:13:c8:e3:76:
                    c5:b3:ef:ee:e0:78:8a:6e:a7:b0:16:02:aa:ff:25:
                    8e:30:54:cc:f9:f9:7b:4f:12:dc:c8:f3:6c:b4:f1:
                    f5:76:d3:62:2d:99:1d:48:41:5e:28:b8:da:dc:05:
                    05:d7:d6:35:9d:18:46:d6:db:3c:0a:35:f5:83:13:
                    9c:92:cd:a5:30:fd:bd:32:f6:a6:ca:22:7b:ff:80:
                    e4:e6:35:23:97:c0:84:f5:fd:0e:b2:5b:d8:97:2c:
                    76:9d:26:f9:e7:38:51:be:f3:13:9b:4f:9c:0c:c4:
                    8b:fe:76:5b:49:38:6e:68:78:03:d0:07:5d:fa:a5:
                    cb:c6:98:37:32:cb:81:cc:90:9e:14:46:68:37:6d:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C7:99:AC:49:2F:5A:91:D3:27:BE:2E:20:B4:32:B1:2D:AE:8C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/df820e25-8db0-3c7e-93b1-1100c8628b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:fc:79:d9:cc:e9:93:87:8d:3e:87:ae:7d:bf:f0:63:2e:
         2b:18:cb:3d:a1:97:31:73:51:3a:2e:7f:39:a9:a2:bd:14:d2:
         0e:82:b8:a2:b3:ef:7f:2a:ab:cc:e3:c0:e8:ec:93:a5:0c:77:
         f6:38:f5:66:52:a0:55:ce:9c:ca:6a:f0:8f:8e:ac:9e:fe:09:
         ac:0d:1f:00:8f:c2:94:03:00:f0:5e:ba:9b:d5:34:07:cb:7c:
         e9:ff:e0:30:26:9b:c6:75:bb:59:c1:68:56:e8:11:e4:d9:d2:
         7e:02:d1:b4:8f:f9:d6:3c:0e:0b:25:cb:e6:07:af:6f:1b:47:
         68:1d:78:22:1b:93:64:48:6b:6d:ee:18:7b:e3:6c:a6:cb:53:
         4e:a6:ed:5b:04:74:85:69:17:c2:59:c0:3f:5e:57:ff:75:36:
         f8:26:93:5a:2d:0f:29:30:9a:67:c5:51:5e:d4:c8:e5:20:c3:
         67:91:2c:3a:b3:d2:57:07:31:a8:53:88:8d:b1:1c:bd:5c:d9:
         4c:75:bd:d6:fa:27:4d:51:bf:58:33:1e:bd:2f:f1:da:f1:06:
         df:b3:ea:ca:5b:0f:69:9a:17:03:e5:0c:10:b3:9a:1c:86:bb:
         74:41:b6:ae:fb:de:98:87:95:3e:59:95:c2:e4:54:69:1b:f7:
         67:7f:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 17:00:48 2026 by rpki-client