Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa
File:                     d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa (raw, json)
Hash identifier:          WpwX7OndHCTVzKqAtF/0F7n6BnhQXhv8nzE7yV+kSts=
Subject key identifier:   10:27:9B:1A:BB:BA:F1:D9:30:86:79:BA:7B:9E:61:A3:23:BE:EC:6B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E66DA20EF6CD397019F8E7F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     20473
IP address blocks:        216.122.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:20:ef:6c:d3:97:01:9f:8e:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=dbb629cb-bb4d-442d-9469-4dd7ffc46bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:4d:e2:15:46:69:fe:e6:46:57:f2:aa:20:
                    ee:b0:03:8e:af:bb:a2:87:d4:07:66:45:86:a7:c9:
                    13:1c:a7:59:0a:c0:8a:31:03:6f:af:bf:5c:5e:a4:
                    d9:38:e7:0b:7b:dc:9e:33:7f:d0:e3:bf:12:f6:e9:
                    a6:ab:fa:cb:0c:9d:7b:e1:5d:58:61:34:b9:66:93:
                    3d:16:d5:2d:2b:91:fe:80:ff:e8:16:6a:3d:08:f1:
                    e6:fb:0d:6e:c9:a4:66:ef:67:bc:8b:cd:3a:5b:17:
                    73:8a:5d:fe:de:97:0b:ee:e2:44:e3:c4:79:23:41:
                    a0:09:76:66:e1:ce:8d:94:87:07:43:86:d6:5d:6b:
                    79:36:39:27:f6:54:70:b1:41:cd:50:a8:d3:09:51:
                    94:33:bc:ce:61:c0:9f:9d:5d:05:e8:59:cd:ee:5c:
                    32:9c:cd:97:31:1e:fd:3e:db:34:89:4c:32:39:f0:
                    45:50:84:a7:09:dd:6c:62:e8:9b:68:fb:69:e3:8b:
                    87:4e:03:e2:89:ce:4c:86:48:5c:8a:3e:d2:9c:91:
                    c6:79:98:f3:bc:2a:a1:25:8c:a6:28:38:d1:52:f2:
                    b3:11:38:3b:e6:71:89:bb:25:9a:f3:b8:df:c5:36:
                    5e:ac:a6:81:9a:a1:8d:02:78:df:cf:d5:4f:40:df:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:9B:1A:BB:BA:F1:D9:30:86:79:BA:7B:9E:61:A3:23:BE:EC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d06db4bf-3c6d-32ab-84cb-4b6555d1cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:0f:6c:4e:18:5e:b4:2e:4d:81:e8:62:5c:4b:d2:cf:8a:39:
         3c:9d:fb:9c:42:47:40:a4:3e:41:54:d2:e8:03:9a:aa:3c:a3:
         77:62:97:c4:44:86:f5:c4:f2:86:a0:34:2e:f9:9b:d6:65:3b:
         ec:60:64:a9:f6:84:7a:36:42:b2:2c:2c:93:5c:76:a2:94:b7:
         f6:6e:c8:2e:d3:6c:18:21:0d:b9:22:2c:13:6c:52:f3:62:e9:
         81:db:cd:0f:f7:f2:ab:a8:99:09:46:1b:8a:d5:64:c6:7f:07:
         12:c3:1f:55:38:76:e3:17:0e:4d:6d:2b:27:a3:08:05:00:62:
         86:91:42:e1:79:ed:2a:ff:46:0f:72:d7:9f:85:a0:82:f7:7c:
         06:47:ad:a8:3a:0c:97:0e:75:d6:68:50:4d:94:66:09:8b:3d:
         e0:35:ce:8e:4f:c3:50:fd:5c:5f:99:c0:04:85:96:7c:7a:07:
         78:2f:be:20:b1:9f:65:c7:8d:81:c7:46:27:8b:fc:87:ff:24:
         96:ec:e1:d0:82:00:58:83:08:ee:6f:52:5a:2b:e8:09:35:ac:
         9a:a3:83:8e:bd:15:fd:3d:c9:e8:49:1f:3f:9b:84:9b:c5:b4:
         b8:33:3e:a4:b7:28:c7:ff:a9:a6:7d:67:01:e7:a7:8f:75:a9:
         f5:83:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:58:22 2026 by rpki-client