Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
File:                     07010c4c-e7fc-34be-b307-456a7d77aa20.roa (raw, json)
Hash identifier:          XI03gUodqbwDcwwvyIkv9US4IaLYsRpbMAVXa9rXLCs=
Subject key identifier:   5D:50:20:A6:8F:FB:CB:30:8F:7D:28:9B:2B:BA:7B:C4:F6:9A:1D:7D
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584E0C1EC87F3D020B23604C2280
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     33208
IP address blocks:        206.109.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:c8:7f:3d:02:0b:23:60:4c:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=72c6aeb8-e1c0-42f9-8c69-f5680ceb6445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:de:43:6a:a9:88:ec:d5:c1:11:23:9c:c1:
                    ea:c8:71:28:f3:f0:12:6c:84:62:61:ce:ca:a6:4e:
                    12:9f:90:b5:05:71:c8:e6:c5:f4:81:e1:a8:32:c4:
                    97:58:88:59:cb:1b:db:9d:7d:ae:ce:0f:c2:dc:09:
                    c0:80:6a:b8:9f:47:a6:e3:ac:f8:01:8d:7b:59:99:
                    6d:a8:02:2b:7c:7a:76:4c:ce:c7:06:8f:55:4f:31:
                    d7:e9:c0:ca:6d:c8:c7:4a:41:37:ed:87:4d:cf:01:
                    9a:bb:8b:83:2f:7b:53:10:c9:2c:f0:3e:ee:b5:18:
                    3b:83:7f:d5:e0:1b:35:a4:7c:08:31:be:2e:20:66:
                    3e:57:4c:26:28:4b:3c:88:43:c1:0a:7c:e0:97:14:
                    23:e8:bd:23:bb:6b:7f:ea:58:cc:e7:58:a1:e9:51:
                    c5:01:dc:76:53:15:d5:3b:68:00:54:80:87:31:08:
                    52:9f:90:e2:b1:3f:51:f4:a7:41:55:83:92:6f:88:
                    6a:1c:37:a6:52:fd:08:eb:74:a2:f6:00:27:3e:28:
                    94:b8:85:e9:26:ba:b8:e4:a8:6d:32:2c:1c:1a:1a:
                    16:ba:99:2d:99:40:31:d6:25:52:37:a8:00:06:b4:
                    02:91:8d:82:f7:86:3d:34:fb:8e:cc:9c:92:b3:fa:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:50:20:A6:8F:FB:CB:30:8F:7D:28:9B:2B:BA:7B:C4:F6:9A:1D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:5b:47:b9:2f:3a:ed:7d:60:03:a4:d0:ee:a6:8e:54:e6:
         a2:08:ad:51:46:28:16:0b:5b:e6:9c:78:34:45:10:6b:81:67:
         3c:10:98:55:07:86:9a:bb:e3:db:5f:8c:9d:a3:36:6c:12:c0:
         79:1b:89:6f:a4:92:90:7d:f0:fc:72:cb:c3:85:8e:02:30:42:
         32:c1:0e:40:80:4c:eb:cb:35:82:82:d1:10:12:e9:16:2e:7e:
         21:5f:8a:ad:ee:c2:62:cc:ac:84:d8:79:e0:80:4e:7e:fa:27:
         ea:88:78:c7:3c:98:d3:59:8b:47:7e:24:4f:90:e2:63:e5:84:
         e8:d4:2c:88:73:af:23:67:69:12:f0:af:e8:99:32:4f:6d:14:
         ee:eb:02:11:1c:5c:73:15:09:06:b0:4d:ba:07:e2:c5:7c:77:
         aa:07:65:fd:56:2f:89:47:14:67:77:2a:1a:07:1e:f8:23:4a:
         ce:1d:1c:5c:37:39:fb:f7:2c:2a:c0:6c:06:4e:f5:62:53:95:
         0d:35:a5:aa:82:ff:b6:32:03:fd:48:97:93:5e:bc:29:6d:3a:
         d0:3c:f0:f3:f8:a1:98:d0:ac:48:16:94:1b:ea:0a:00:a7:4f:
         a7:61:5b:11:25:ff:67:cb:bf:7a:5d:41:9a:c6:6e:02:e9:c7:
         b8:93:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:14:33 2026 by rpki-client