Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/3f53e804-411f-3d26-8742-7edc92741bba.roa
File:                     3f53e804-411f-3d26-8742-7edc92741bba.roa (raw, json)
Hash identifier:          YpUb+hNCNlRe8Qa8XSHhwftojw2vseyrGpwdl9mSf3E=
Subject key identifier:   92:E0:E7:D7:F1:3E:29:C7:02:DD:A3:45:AA:10:CB:99:F1:9A:11:54
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584EA798CC01E150A8F9A16AE1A0
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/3f53e804-411f-3d26-8742-7edc92741bba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        206.219.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:cc:01:e1:50:a8:f9:a1:6a:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c67408e4-d724-4426-9556-c565366e4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:17:f4:9a:51:fc:53:ea:35:a8:dc:48:48:
                    46:93:42:23:bf:31:a3:c3:ca:90:f6:1e:47:78:96:
                    29:bc:82:36:91:95:62:9b:21:6f:ff:29:48:ab:80:
                    27:9f:09:ac:06:02:4e:a8:01:23:aa:28:94:3d:54:
                    b7:8d:8b:89:75:1e:81:66:cd:a5:43:53:57:75:b2:
                    00:53:a4:9c:93:66:51:d8:01:ba:79:0d:78:7d:5d:
                    d8:dd:56:e4:d9:21:51:69:36:80:10:0d:0c:4b:be:
                    5e:4d:95:ff:0d:ef:91:08:2b:ba:c2:b3:01:49:0b:
                    16:fc:34:b2:ec:53:ff:0f:e6:8d:65:02:c4:6a:2c:
                    6e:82:93:3d:19:8a:6a:e1:4f:00:cc:84:74:1c:36:
                    cc:a9:0c:65:da:f7:1f:21:46:3f:68:a0:f8:0b:c6:
                    f1:ab:10:f1:49:e1:2d:c0:66:3e:14:6a:2d:ac:02:
                    f1:5c:7d:27:8b:db:44:64:96:6b:a9:7e:c3:7e:da:
                    3f:29:3d:fa:e6:29:70:8e:77:f8:42:2a:f7:f0:4d:
                    53:6d:69:50:dc:5f:ab:c5:30:4f:50:77:40:89:9e:
                    34:99:45:e9:fe:7c:0b:78:27:ef:a2:58:4b:73:68:
                    be:57:9c:ac:6b:13:7f:76:ab:89:20:e3:61:19:a2:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:E7:D7:F1:3E:29:C7:02:DD:A3:45:AA:10:CB:99:F1:9A:11:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/3f53e804-411f-3d26-8742-7edc92741bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:8c:75:c9:d0:d4:fe:4d:13:cb:b5:e0:2c:a1:7c:e0:47:
         ee:15:78:c9:2e:29:9a:bb:69:7c:af:16:f4:9a:b8:27:70:c0:
         f6:6c:54:db:58:4d:9a:07:bf:72:80:36:0a:0b:a9:8d:67:c5:
         60:84:27:f9:b3:5c:91:b8:9c:40:b5:21:a5:65:fc:48:7a:60:
         c1:90:88:c4:36:1d:76:7b:9c:68:2d:22:5b:ae:d2:a5:09:4e:
         ee:e0:75:26:c9:76:7a:c0:40:78:bb:4f:20:d5:63:60:fb:3e:
         df:dc:88:43:46:1f:9c:1f:ee:f8:fd:ac:8a:c6:33:8c:09:9e:
         a3:57:0b:63:f7:4b:74:62:ec:8e:a8:35:92:10:22:cc:cd:66:
         e5:a4:7e:88:67:a7:e1:d4:ea:b6:dc:68:f7:37:2a:69:ad:ed:
         b1:1d:7c:95:12:24:6a:12:4a:7a:1f:12:67:16:7b:ca:9e:98:
         9f:89:31:38:53:63:52:52:dc:64:bf:87:6d:da:b0:c5:06:9d:
         c7:7e:34:d1:c2:3f:fa:a2:0a:f5:94:17:df:32:e4:e3:8b:e6:
         e0:41:e1:55:80:40:55:2a:fa:be:65:c0:d2:26:9c:b7:d1:11:
         e9:de:bf:c3:8c:88:37:3d:5d:99:ca:2f:f6:cb:31:82:da:bb:
         3c:aa:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:19 2026 by rpki-client