Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
File:                     a662b604-8a40-31fd-848a-cd7f0cad04af.roa (raw, json)
Hash identifier:          6aUMmXbG3wl63vJW6jazPlP/bzGqXH9hwvzc6LFdB+I=
Subject key identifier:   58:27:27:F0:74:86:A2:8D:CB:4B:FC:D5:99:41:76:FD:13:B3:4C:B6
Certificate issuer:       /CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
Certificate serial:       010D0C9F4328584D571FA1645AD6D23E469A1980
Authority key identifier: 5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     396982
IP address blocks:        204.62.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a1:64:5a:d6:d2:3e:46:9a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5248b6be-3e69-4e67-8c1c-9f85fde15922
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=a7fa04d0-c9ea-4897-9855-01fd95c5e613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:1a:20:e5:06:74:af:3e:0f:d7:73:63:af:
                    3a:7c:ad:93:a4:36:18:49:88:e6:38:58:3e:fe:51:
                    f9:0a:5f:1f:da:3f:25:ec:29:19:be:b4:ce:d6:f6:
                    5c:25:b8:58:7b:ad:b3:27:30:87:fe:9d:a8:d6:d4:
                    76:45:0d:db:21:d5:36:67:14:6a:4e:5b:2b:ce:eb:
                    ec:49:54:89:52:b4:94:ac:d4:4c:ff:1a:e2:f9:14:
                    85:0d:36:84:bd:9f:a0:18:ff:57:27:2e:f0:1f:7e:
                    3a:fd:d8:06:a1:8e:5b:31:60:60:05:36:ba:35:f8:
                    ec:a5:fd:3d:fa:c5:a1:b9:f6:0a:70:a1:45:e2:39:
                    ff:8d:4e:97:fd:94:da:2e:e5:4d:07:ab:40:0e:74:
                    bb:bd:1f:70:5e:21:6e:db:20:c7:a8:49:61:0e:c7:
                    9d:80:0b:73:66:c5:27:d0:14:96:37:eb:5b:a5:9f:
                    99:cf:a0:49:3e:34:0d:f1:68:6b:3c:a5:46:d2:e4:
                    3e:f0:99:bd:76:64:c0:b3:55:dc:c4:ea:26:c5:ab:
                    48:f4:aa:49:cf:34:a7:5a:a0:20:3a:61:69:05:a0:
                    0a:27:38:e1:80:38:44:a1:53:7d:3f:14:d6:b0:34:
                    bb:2b:f7:2b:94:47:9b:5a:77:f0:9e:82:0a:47:d8:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:27:F0:74:86:A2:8D:CB:4B:FC:D5:99:41:76:FD:13:B3:4C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/a662b604-8a40-31fd-848a-cd7f0cad04af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922/5248b6be-3e69-4e67-8c1c-9f85fde15922.crl

            X509v3 Authority Key Identifier:
                keyid:5B:92:2A:D2:78:10:1C:9D:3D:E7:DF:B2:09:20:35:F6:D0:75:24:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5248b6be-3e69-4e67-8c1c-9f85fde15922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:af:df:2c:f8:16:1a:af:47:87:b1:46:ea:57:da:cf:7b:
         6d:8e:ff:ff:5e:66:03:a7:0a:07:7a:b6:d5:9f:23:ad:c8:be:
         3e:6f:d7:e4:78:42:0e:4c:76:7c:22:89:f9:b3:c1:b2:aa:72:
         3b:93:35:96:d1:3f:08:37:e9:cc:8a:12:ce:00:f3:b8:5e:44:
         f3:77:05:58:29:bd:10:30:16:1a:b0:e8:da:73:dc:b6:79:05:
         28:1f:51:b5:14:fd:aa:5b:bf:72:d8:91:e2:b9:61:17:3d:96:
         94:1f:a8:f4:0f:b8:14:e1:a1:2f:5e:72:60:ba:01:29:3c:33:
         77:33:90:a4:3b:71:a0:b8:8c:8d:ef:6c:40:82:ef:97:e7:14:
         ea:b8:7b:ba:7f:e0:0b:c7:20:e8:74:b1:25:eb:d7:69:93:be:
         11:cf:23:7b:63:d1:ed:8c:8b:1c:e2:c8:16:c2:d0:9f:35:7c:
         87:7c:f2:4e:ae:f9:e0:6c:0e:35:be:0b:4d:91:b2:de:f5:b7:
         10:7c:87:89:1e:b6:9c:6b:12:84:1d:b8:aa:87:a7:b3:2a:d1:
         2b:b4:5e:51:56:b7:b2:54:ee:8d:89:80:ab:a6:b3:34:75:4f:
         e1:8f:86:db:ca:c5:e5:93:ed:55:e7:8a:7f:d1:b0:8b:1f:db:
         d9:30:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:28:19 2026 by rpki-client