Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa
File:                     7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa (raw, json)
Hash identifier:          Boyn8f2/vw78brlKlGrQunMiKtTw7qz0tKnnBr58v30=
Subject key identifier:   BD:68:38:58:9B:2E:78:08:F8:7E:7D:A5:92:50:1C:06:B6:37:21:E9
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584D117266DC58E1384626593620
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     3738
IP address blocks:        192.250.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:66:dc:58:e1:38:46:26:59:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=79087d4f-c0ae-4197-8aa9-1390aa34062a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:da:64:89:6a:23:58:3c:7e:bf:49:6d:61:
                    70:5d:c0:47:35:ef:63:f9:45:3a:37:4a:45:84:b0:
                    71:7c:72:c5:e1:e9:e1:90:72:49:41:a2:a4:49:c6:
                    5c:91:40:58:b2:8c:79:0b:31:f3:e6:ef:12:d9:ad:
                    85:ce:35:fa:f3:a1:54:b8:ed:2c:a2:9b:61:03:ab:
                    fb:a5:2e:23:05:3b:7a:15:35:b7:ee:30:a2:0f:29:
                    46:b3:82:e6:bc:b2:c5:1f:a0:16:0d:53:80:65:db:
                    53:77:c1:67:11:39:d6:5b:71:42:a4:d1:8e:20:e5:
                    c4:0b:b0:34:7b:8b:d5:bb:46:09:7b:fe:66:8d:eb:
                    4f:20:bd:66:90:d4:13:df:83:c5:83:dd:f4:71:bf:
                    78:de:05:ce:a1:09:52:aa:27:12:98:84:29:d0:6b:
                    b1:22:9c:e6:4e:f9:7a:35:e6:0c:7f:06:a0:01:48:
                    de:aa:ba:8e:ee:fb:b1:c2:09:71:93:1b:1f:c4:6b:
                    50:f8:4e:6e:5c:3d:a6:69:2e:6c:e8:02:1f:be:8b:
                    20:7e:3d:7a:f3:1a:7b:1b:b3:8d:64:d7:dd:04:50:
                    06:42:86:93:bf:70:9d:ef:0f:af:3b:57:68:80:32:
                    10:8b:b0:bb:e2:97:10:d8:38:54:20:ac:b0:ec:31:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:38:58:9B:2E:78:08:F8:7E:7D:A5:92:50:1C:06:B6:37:21:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:ea:c9:74:0c:5d:49:08:26:f9:25:f8:d5:5e:2d:8e:6f:
         fa:f7:3e:f1:09:47:46:ab:8d:ef:df:15:8f:a4:17:a7:f8:d0:
         87:1d:5a:b1:73:08:3e:e1:ae:e8:c6:99:1d:ca:7a:2f:45:3d:
         f6:21:91:cf:c9:28:fe:06:6e:64:f2:48:26:01:d4:7e:f3:57:
         4d:52:9d:d9:1e:6b:da:fe:0d:ed:bb:cb:a9:83:b0:ca:ec:b9:
         80:05:b1:1b:8d:b4:c4:59:c8:d4:f4:a9:fb:1c:65:5d:bb:37:
         5e:88:c8:0d:57:4b:35:6d:7f:ee:eb:1c:c4:57:af:3f:d7:c3:
         7e:b9:84:f9:02:56:c5:22:68:38:0d:03:d2:b0:a6:58:10:38:
         b2:f2:63:6e:d6:fe:80:c7:78:db:d8:0b:53:1e:bb:43:9a:58:
         6e:e9:0a:07:50:40:0a:bf:a6:03:50:5b:f3:21:39:5b:dd:15:
         84:a4:5f:07:c6:39:37:cd:6e:0d:81:13:5e:53:6d:9e:63:f3:
         62:ea:2c:34:96:ed:a4:51:ab:6f:dd:bb:f5:9a:48:7c:86:e9:
         9e:2f:b1:11:bc:2b:20:50:2f:b4:97:ab:e6:c0:ec:f1:19:f6:
         08:e8:f8:1a:ff:42:47:55:e3:7e:2f:70:50:ce:41:32:18:24:
         f1:ff:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:56:38 2026 by rpki-client