Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ddeb84d4-11be-35e0-8049-25849c07f733.roa
File:                     ddeb84d4-11be-35e0-8049-25849c07f733.roa (raw, json)
Hash identifier:          DCFCsgnE7EthA5PcgvkefttkLNH/znwofEvI7OlYzEk=
Subject key identifier:   6E:17:4A:E0:51:51:32:4F:32:3E:BC:27:B7:99:19:FC:FF:63:94:06
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E3C74220D6B390CC067842980
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ddeb84d4-11be-35e0-8049-25849c07f733.roa
Signing time:             Sat 20 Jun 2026 16:31:00 +0000
ROA not before:           Sat 20 Jun 2026 16:31:00 +0000
ROA not after:            Fri 18 Sep 2026 16:31:00 +0000
asID:                     6079
IP address blocks:        107.158.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:74:22:0d:6b:39:0c:c0:67:84:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 20 16:31:00 2026 GMT
            Not After : Sep 18 16:31:00 2026 GMT
        Subject: CN=1cd1cf78-550a-4c33-944b-1535f710095f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:83:b3:60:90:a1:63:72:93:56:bc:7a:b8:
                    9e:39:99:a6:43:98:c0:4a:4a:e2:f6:77:2c:83:ae:
                    3d:99:00:e3:f8:69:0e:27:ba:0c:71:a3:c0:ff:40:
                    99:75:fd:d5:af:f3:18:c4:30:6e:f5:36:ae:09:5c:
                    eb:fe:92:1e:1d:45:07:56:7b:e0:35:91:c8:83:db:
                    fc:e4:4e:98:f7:3d:5f:1a:13:0f:48:7b:cf:eb:3b:
                    16:40:d5:01:7e:5f:80:95:73:fa:83:7a:1a:45:9b:
                    fd:bd:51:8c:97:97:9b:1a:51:0f:e7:ac:70:66:17:
                    d8:d1:dc:ef:30:6a:b1:fa:6c:b6:12:7b:59:4e:c5:
                    38:45:0a:3e:d8:cf:8a:03:4d:5c:dd:ed:07:ed:af:
                    d8:c2:84:fa:e7:54:23:fa:8e:26:1a:a3:b6:94:71:
                    02:a7:2a:00:f2:0b:25:65:ad:12:06:26:09:5b:97:
                    eb:5f:62:a4:8c:46:b2:50:1c:bb:d4:6a:55:47:fb:
                    47:48:90:d9:54:25:44:8f:62:24:18:be:1f:00:2a:
                    df:86:d9:b9:f9:df:88:97:7a:9e:d5:9d:d4:ef:ac:
                    5a:ac:15:22:ad:fe:92:78:0f:cf:59:14:2e:88:c7:
                    75:33:95:9d:19:fe:33:4a:7b:23:15:24:cf:0a:d1:
                    45:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:4A:E0:51:51:32:4F:32:3E:BC:27:B7:99:19:FC:FF:63:94:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ddeb84d4-11be-35e0-8049-25849c07f733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:8d:59:3f:a4:3e:5b:cf:f1:7f:04:5f:b6:2b:d6:3e:b2:
         91:aa:86:80:55:9a:da:b4:32:4f:12:7a:fa:56:58:6c:39:fb:
         b9:f3:95:23:d2:a4:de:28:82:a9:ce:96:5a:87:09:11:37:1c:
         36:c3:7e:95:ed:97:f0:4a:74:53:24:f6:57:a0:60:f1:1c:fe:
         de:80:de:ce:79:3b:bb:c0:d2:75:c4:b0:bc:aa:f9:ae:ad:ee:
         3a:7f:12:79:15:52:fe:93:d1:09:cb:9e:a6:6b:17:81:6a:b3:
         dc:04:85:d7:9c:67:f2:d7:58:65:30:11:f5:8e:8d:be:5f:59:
         83:8d:d4:64:84:dc:a6:b8:e1:fd:e3:0b:00:f1:9b:d9:c4:92:
         c0:6a:84:68:04:14:0c:81:3d:a6:b4:7e:ff:d4:01:e9:e4:03:
         20:bc:38:5f:c7:3b:a2:b9:74:d8:14:de:21:7e:a3:ce:ac:63:
         56:18:d2:9f:80:c4:12:f5:c7:56:9e:ae:0a:72:a9:8d:23:af:
         0c:2e:84:2f:6f:2c:19:d0:5b:2a:6d:97:42:65:7d:d4:fa:21:
         bf:a4:d0:8a:be:06:d1:e3:1b:2b:57:ec:81:95:b8:35:86:51:
         77:e7:99:6b:64:e2:f8:58:f0:7a:69:c2:5f:e4:e0:fe:a8:1a:
         38:cc:a9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:24:21 2026 by rpki-client