Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e6215dfc-ac3c-3c38-b42b-6d116285cd37.roa
File:                     e6215dfc-ac3c-3c38-b42b-6d116285cd37.roa (raw, json)
Hash identifier:          H8AyFGwampDF8cGlNqO7FclTzXEIdIA2Y/3lkgRpnuw=
Subject key identifier:   04:90:EA:C5:4E:F7:CE:26:46:70:42:1E:26:78:BD:B8:19:8E:67:CD
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584EA79599DDE922C33A22833800
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e6215dfc-ac3c-3c38-b42b-6d116285cd37.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3738
IP address blocks:        161.194.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:99:dd:e9:22:c3:3a:22:83:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=143a8a6c-bcd8-4b09-9424-13bf24aec4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:ba:e1:b1:63:9c:c3:a0:62:5d:b9:94:cc:
                    9b:5a:36:06:3e:5f:f7:de:1b:d2:fc:5f:17:86:a4:
                    72:8c:c0:5b:6e:f8:2f:83:fd:c5:08:2b:0f:f3:a6:
                    2e:ea:b4:93:79:e4:1b:58:1c:6b:55:cc:d4:91:f7:
                    29:68:df:18:67:37:0f:1a:79:38:5f:59:f7:e3:b3:
                    c2:83:78:00:53:a7:0e:0a:bf:62:30:f6:69:db:17:
                    31:1e:c2:04:e6:b0:30:80:45:df:0a:79:63:91:5a:
                    da:46:8f:1e:2a:fd:d3:89:ff:5a:af:60:9b:89:18:
                    41:73:d0:c5:b5:d1:e2:1c:c2:bc:56:87:98:ca:cc:
                    7a:8b:a7:9b:9d:56:c5:29:ac:86:58:f4:e5:ba:b8:
                    22:97:ce:62:90:46:a0:28:2a:6a:c7:93:cb:fa:d6:
                    d9:a3:e9:cb:87:40:97:6f:7c:a5:75:5c:e8:b7:62:
                    cd:e4:6f:cf:86:ae:c2:07:17:00:ec:3b:1c:c0:25:
                    a2:ed:d0:e1:9e:b4:a9:0f:5f:6f:37:57:f4:dd:a7:
                    a5:d0:ff:d2:63:36:44:05:77:5d:bc:67:2d:d5:8a:
                    fe:57:11:ae:42:ed:e9:44:11:2e:30:8a:47:3d:59:
                    2f:1f:90:8d:74:62:0d:40:fc:bb:96:14:f9:93:2a:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:EA:C5:4E:F7:CE:26:46:70:42:1E:26:78:BD:B8:19:8E:67:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e6215dfc-ac3c-3c38-b42b-6d116285cd37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:ab:25:ae:e8:3f:ef:80:7a:d8:2f:d8:b0:17:05:ed:1f:
         1f:d8:7f:ad:6b:cd:d1:95:a5:43:20:ae:ac:14:8d:c5:40:a2:
         a8:80:88:b6:73:ad:de:d3:64:fe:ba:5e:6e:50:23:57:04:6d:
         21:06:d7:01:c8:a3:ef:0b:7f:c1:8c:f4:99:a0:ec:d3:72:df:
         aa:7b:e1:a2:75:dc:fd:31:a9:3b:b0:df:d6:4c:a1:f0:38:1f:
         fd:7c:bc:48:03:b1:50:0c:16:d0:92:df:ac:55:f9:19:21:c2:
         82:df:aa:f3:3c:dc:cb:6f:6a:e6:45:f6:2f:9c:ba:a7:c8:41:
         c7:63:69:c1:49:2e:e8:2d:6b:45:5e:bc:d9:03:f9:97:78:6c:
         3c:5a:9c:cb:e2:f1:a0:16:94:ab:2f:b5:70:84:1b:88:46:a7:
         1e:a8:8d:2d:90:ff:5d:b0:8a:a8:f5:b5:77:40:43:39:2d:9c:
         74:21:cd:6c:9f:99:99:fa:05:37:53:ba:f7:7a:ab:1b:01:2b:
         97:b3:a3:0b:a1:ee:6c:44:f4:83:9a:ab:fb:07:b9:39:8e:3a:
         13:21:d1:fb:5e:a4:85:c8:d0:d6:48:80:b8:58:d1:1e:bd:e9:
         08:b2:5b:14:59:b1:dd:18:66:a5:5d:77:9b:d1:b6:57:ed:2a:
         48:c7:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 23:59:14 2026 by rpki-client