Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
File:                     c90933a7-20d1-3f12-9f48-2849455b9cb8.roa (raw, json)
Hash identifier:          BPBEjyzukYV4y9mHniAsdxK7dyi47wL2zQmae1LJUno=
Subject key identifier:   86:85:12:7D:BB:6F:50:70:DC:22:C2:F7:E0:CC:38:4A:E5:B8:BB:78
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328584D386A511507BF8C7CBAEBA960
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     5645
IP address blocks:        206.248.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:51:15:07:bf:8c:7c:ba:eb:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=fef00899-88cb-489b-8526-f2a8dd81456c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:3b:c6:0b:2a:30:8c:db:72:81:b4:8a:0d:
                    17:2c:6f:6d:94:e5:58:8d:3c:6c:5a:af:da:65:bb:
                    85:fd:96:57:cd:1f:a3:d5:e2:83:5f:15:0a:89:21:
                    ad:c1:f5:f1:b1:bd:0d:8f:11:ce:ba:76:f5:a8:a2:
                    5f:d6:df:de:64:0e:83:ce:30:f2:03:03:66:ab:96:
                    b5:f7:39:d0:0c:41:c6:81:c0:8a:f5:6d:7d:c3:0e:
                    62:16:cb:bf:9e:79:65:ed:c3:5a:02:ad:e2:da:05:
                    d3:92:31:04:ed:a0:91:a5:39:18:72:f6:da:2b:f9:
                    1e:30:23:f9:1f:bc:e2:33:8e:cf:a2:4c:72:af:9e:
                    72:be:45:21:a9:c1:df:b6:0c:a5:da:71:91:8e:ea:
                    84:01:5f:2c:d7:a8:c1:26:e4:be:30:b6:da:74:0e:
                    77:db:8c:c0:9f:89:c7:2e:8a:ff:cd:f9:9d:05:71:
                    f4:65:15:f7:df:14:db:ce:0e:52:16:4c:c9:de:6d:
                    ea:4b:c1:65:d8:9c:92:7c:c3:5a:e3:e6:9f:af:8b:
                    59:a0:68:68:b0:af:e6:4b:18:5f:56:a2:6f:16:dc:
                    50:fc:5e:a3:30:d6:4e:95:7d:b8:c3:ce:50:99:54:
                    05:c5:8d:e0:95:47:5c:7a:f6:c7:15:97:01:11:1c:
                    89:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:12:7D:BB:6F:50:70:DC:22:C2:F7:E0:CC:38:4A:E5:B8:BB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.248.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:43:55:2e:ff:ab:6e:3b:44:20:ff:52:15:97:68:eb:15:
         ee:18:a3:10:68:06:bc:3c:76:52:b4:3d:71:dc:6d:ab:36:68:
         2e:9f:3d:52:8e:09:67:88:83:dc:1f:30:e8:f2:1e:52:15:5e:
         6c:46:a9:42:56:0d:a4:8e:05:05:f2:1e:be:b0:31:26:01:3b:
         6d:93:6f:1c:96:46:d1:5c:e5:b1:54:28:fe:a8:df:16:b8:7d:
         5e:0e:2f:12:c3:ad:3f:95:b5:7f:b9:70:9b:35:07:9d:7f:31:
         0d:e8:0e:09:aa:9e:8d:93:83:39:24:bb:e9:b7:06:d4:f4:59:
         b0:8f:c8:67:c6:ad:ee:3f:7c:84:d2:c6:82:c1:f5:85:8a:18:
         91:52:5c:36:cd:8b:33:ef:78:1c:8c:2f:85:5d:b3:c9:1b:19:
         3f:e1:8f:8e:af:48:1f:7b:1e:e0:39:7a:db:5d:60:24:a1:7f:
         43:4c:d2:60:9a:cd:ee:8b:0b:7a:e5:af:88:07:64:b0:d4:7a:
         1b:e0:79:21:70:04:05:4d:74:1a:0c:4b:fe:6c:95:43:28:dc:
         e5:22:43:b9:78:50:9a:bb:9f:84:e0:1f:13:4e:cc:f8:0a:86:
         c4:54:00:17:77:be:5d:58:81:09:bc:db:2c:76:83:18:b0:5a:
         53:b0:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 15:36:08 2026 by rpki-client