Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa
File:                     eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa (raw, json)
Hash identifier:          9qIZcqdCwLyeiee/ZWStDBczp+d06I1nJzS4RC7w0dM=
Subject key identifier:   3B:24:4E:81:BC:35:2D:6F:AF:08:6E:C6:B9:80:8D:F7:33:12:F4:80
Certificate issuer:       /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
Certificate serial:       010D0C9F4328584E296F0AACF72A2696F7175E00
Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     0
IP address blocks:        206.197.187.0/24 maxlen: 24
                          2001:504:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0a:ac:f7:2a:26:96:f7:17:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=b8bb59dd-bd17-4db3-8f66-75d0b9fa6125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:fa:8f:75:cb:13:b1:b7:f7:b4:b9:88:fb:
                    1f:3f:e1:58:6d:22:43:63:4e:12:58:3a:54:b4:77:
                    8c:75:9c:fa:24:3f:9d:b6:05:2d:db:9f:7c:d5:b1:
                    41:29:e6:d6:af:83:37:98:a8:2b:9d:98:ad:09:dd:
                    99:b8:53:43:80:ab:22:61:31:b5:63:f4:9d:d5:a3:
                    d7:f3:90:b9:ba:a8:46:5d:af:9c:a0:a2:40:ad:bd:
                    8d:e3:27:b3:48:2d:d7:5c:a7:fe:0e:e5:e7:02:b2:
                    09:25:db:9e:2a:ab:fd:29:3f:fe:17:f5:43:f4:c7:
                    20:35:81:fa:64:5c:39:d1:21:bb:cc:d6:59:79:1a:
                    dc:4f:5e:96:10:5a:24:2e:78:38:c7:52:1e:e4:46:
                    c4:af:45:65:aa:0a:1b:ee:e6:73:ef:6d:79:ac:6f:
                    8c:94:49:5a:a1:01:18:39:21:f1:c3:9e:24:7f:11:
                    75:e6:7f:ce:d6:3c:0b:dc:ff:70:7e:61:b4:9b:df:
                    6b:15:40:7d:e7:c3:88:67:06:b1:83:da:c8:57:93:
                    6e:91:b3:44:97:f2:76:4f:80:32:0c:e5:58:c8:bb:
                    09:9d:8d:b5:71:7a:af:2d:61:fc:88:e3:a3:32:15:
                    ac:08:ef:0f:94:55:ef:91:0a:5a:23:ab:e3:7e:0a:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:4E:81:BC:35:2D:6F:AF:08:6E:C6:B9:80:8D:F7:33:12:F4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/eb97b16f-dd90-33dd-9b7e-fcf88341b671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl

            X509v3 Authority Key Identifier:
                keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.187.0/24
                IPv6:
                  2001:504:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:28:aa:57:c2:70:c6:60:2a:fe:91:ff:02:28:0f:d7:c4:be:
         af:d5:fb:f6:1c:e5:35:fb:a7:4c:cc:c8:f9:b3:97:e8:61:1a:
         63:f3:45:0f:ba:dc:69:66:06:88:50:eb:08:25:e8:00:95:66:
         8c:ae:1e:b9:c6:fb:f9:6e:f4:64:d0:42:75:2f:8e:6a:19:6a:
         f9:28:59:ef:88:b9:84:35:36:0e:46:4f:8b:1b:13:ec:6f:e7:
         83:1f:c9:d0:68:6b:97:71:30:20:ba:01:0a:04:00:b5:81:62:
         99:bd:ce:7b:03:a6:2a:ab:d2:6d:80:2f:1d:d4:a0:4d:67:0f:
         d3:16:78:5c:ff:95:69:d6:eb:94:a6:8e:b7:e2:7e:c0:b1:1d:
         af:aa:67:92:ca:72:72:49:10:30:91:a0:89:d3:73:73:a3:5b:
         f4:64:9b:e3:e9:b0:ed:cd:da:cb:52:bf:21:bc:fc:38:cd:46:
         92:72:22:e9:9f:d3:ce:8e:98:6c:6d:59:d2:49:c0:fd:f4:37:
         65:55:50:79:33:e9:07:16:3b:46:66:ba:52:27:58:75:91:4a:
         82:af:db:88:e4:87:39:a0:bd:5b:f6:5c:29:6a:e2:68:77:dc:
         87:12:da:55:d2:1b:2e:c4:48:52:a5:7f:bc:93:0a:e1:2e:82:
         ae:fa:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:46:56 2026 by rpki-client