Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa
File:                     38917362-89be-3070-88f1-aeb91e6b0dea.roa (raw, json)
Hash identifier:          4S61jk3iSHGTFpMtfji3hZrjvhZ4dhHkJhGAvbPYybs=
Subject key identifier:   51:7E:2A:B3:66:21:A8:D1:6A:DA:20:D5:06:E0:8E:E0:80:7F:7C:E8
Certificate issuer:       /CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be
Certificate serial:       010D0C9F4328584ED861DBE6DB1DBFA0F7AD1800
Authority key identifier: E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     47027
IP address blocks:        69.60.64.0/20 maxlen: 24
                          172.97.120.0/22 maxlen: 24
                          184.171.192.0/20 maxlen: 24
                          192.243.76.0/22 maxlen: 24
                          199.188.172.0/22 maxlen: 24
                          204.235.208.0/20 maxlen: 24
                          206.123.28.0/23 maxlen: 24
                          208.84.124.0/22 maxlen: 24
                          216.118.128.0/19 maxlen: 24
                          2607:fff8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:db:e6:db:1d:bf:a0:f7:ad:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cd6cec-4cd6-4fa0-b3af-354a7bc325be
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=ff8df4c4-59ce-4c39-8b24-52dd6893e960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:6b:9e:6a:fc:c8:57:24:f8:f2:5f:41:3a:
                    6b:ad:c9:5c:43:1e:70:4d:03:cd:ae:a8:b2:cf:e5:
                    bb:92:68:b9:cb:78:95:9a:1f:86:e5:43:e6:6d:7b:
                    ab:8c:79:7d:ce:57:b4:8c:85:81:d7:9d:61:5c:3d:
                    a6:58:8f:25:d6:29:40:8b:14:85:3a:8e:0b:4e:51:
                    91:07:c5:28:42:4f:66:eb:31:cc:65:fc:7e:72:18:
                    76:bc:42:4f:a0:c8:60:d2:6a:da:fc:be:3c:5f:5e:
                    30:3a:31:da:f9:0d:fc:b6:ab:c7:4c:d0:70:de:d3:
                    0e:f5:5f:ae:3a:65:b5:da:74:7f:3c:69:64:00:b5:
                    e9:8f:61:d7:fa:dd:69:ca:4a:bf:aa:62:74:75:58:
                    71:35:98:29:c6:af:76:3d:20:83:bd:65:5d:83:4a:
                    eb:52:28:00:55:a0:2d:41:b2:4e:14:bc:f9:01:a7:
                    5f:07:7e:f2:e4:f0:87:44:e7:4f:1e:db:67:b7:52:
                    40:b6:bb:06:0e:9f:04:49:ba:1a:cf:f9:ee:81:30:
                    82:44:96:0f:78:de:9f:39:1d:e4:db:95:c1:7f:9b:
                    2d:1f:5e:83:1f:85:ff:cd:95:f6:56:47:b1:0c:46:
                    2e:37:14:1b:6a:80:7b:4a:f7:72:f4:48:05:d1:9c:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:2A:B3:66:21:A8:D1:6A:DA:20:D5:06:E0:8E:E0:80:7F:7C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/38917362-89be-3070-88f1-aeb91e6b0dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.crl

            X509v3 Authority Key Identifier:
                keyid:E6:CD:57:39:66:B9:B5:6E:AB:52:58:D7:5B:71:43:D8:A7:58:DA:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6cd6cec-4cd6-4fa0-b3af-354a7bc325be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.60.64.0/20
                  172.97.120.0/22
                  184.171.192.0/20
                  192.243.76.0/22
                  199.188.172.0/22
                  204.235.208.0/20
                  206.123.28.0/23
                  208.84.124.0/22
                  216.118.128.0/19
                IPv6:
                  2607:fff8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:74:fa:a7:e9:59:0b:70:b0:0c:18:47:9f:54:52:e4:3e:
         ea:18:a1:87:a4:14:80:e2:44:b0:99:fd:c6:b1:a0:7e:51:14:
         29:17:5f:b5:c0:72:57:7a:2e:8e:69:84:d5:78:08:71:ea:55:
         47:a1:bd:79:03:08:a2:0b:0a:85:6a:9f:63:36:c8:9c:b3:08:
         59:d8:b4:ae:29:aa:96:79:01:25:5b:9e:ca:77:6f:c1:77:5c:
         01:33:ad:54:91:b2:50:93:d9:e9:45:0b:1b:7d:75:40:2d:d2:
         b4:dd:23:74:f6:90:f9:de:e0:87:99:db:aa:54:26:8d:ab:8c:
         35:84:b9:6a:11:cc:0e:57:58:8b:e1:30:be:b6:94:fd:30:53:
         34:ba:4b:10:cc:d6:0b:f6:c2:fc:04:8e:07:cf:8e:c6:b8:16:
         33:fd:e6:d5:ba:7f:86:85:d1:e7:ed:6d:18:6b:0e:0b:b1:45:
         00:a7:a2:e0:5e:16:17:bf:49:c3:79:c9:79:da:ac:56:db:ba:
         1e:ab:25:57:24:10:58:15:ed:a9:84:a0:26:fe:bd:2b:a0:c1:
         1a:bf:bb:bc:8c:7f:9b:11:18:51:6d:a1:ac:68:4d:be:b6:f8:
         0e:b1:5d:1f:49:b1:01:a0:90:fe:1e:5e:32:3c:15:34:5b:55:
         87:83:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:10:06 2026 by rpki-client