Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/df825cf4-1ec2-3903-a1fc-c67bb7c700cd.roa
File:                     df825cf4-1ec2-3903-a1fc-c67bb7c700cd.roa (raw, json)
Hash identifier:          KaqqujqWCNvt9jnH9cdyurJsTLd/au+OSJwHHMj5Z+0=
Subject key identifier:   4A:6E:99:8B:56:08:56:B4:D8:18:B1:8A:38:85:63:47:25:DE:B0:F2
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584DDFEB1DC3326C3141620BEB00
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/df825cf4-1ec2-3903-a1fc-c67bb7c700cd.roa
Signing time:             Mon 18 May 2026 13:00:31 +0000
ROA not before:           Mon 18 May 2026 13:00:31 +0000
ROA not after:            Sun 16 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        207.202.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:eb:1d:c3:32:6c:31:41:62:0b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May 18 13:00:31 2026 GMT
            Not After : Aug 16 13:00:31 2026 GMT
        Subject: CN=13b838e8-78f5-4381-9335-3d430a3466c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:57:ac:1e:74:63:45:bb:bf:fa:e5:c4:38:
                    61:09:29:72:27:18:4e:ff:fd:5c:5e:cc:c4:61:7c:
                    6e:33:9e:d4:30:de:15:63:d2:f1:89:ca:33:46:63:
                    93:7a:56:da:67:2a:23:23:8f:06:b9:d0:d9:2a:9f:
                    70:da:f1:ee:cf:48:88:13:80:ff:86:45:35:e4:92:
                    66:55:a3:46:8d:3e:3c:34:09:cf:0c:e0:ec:b0:6b:
                    35:74:4c:fc:4e:32:f0:a2:8e:93:cc:6b:78:65:89:
                    cd:23:01:03:0a:8d:03:f1:26:46:53:b5:ac:42:83:
                    f4:9f:97:ec:9f:4f:f5:27:e2:f6:70:c0:7c:0e:54:
                    be:17:48:7d:5f:72:b7:f8:3c:19:a7:e9:f9:35:b8:
                    c7:1b:a0:b8:53:90:b7:34:31:17:3a:a8:0c:2d:d2:
                    2a:66:b2:ee:ef:65:b6:63:b9:1a:df:d4:b4:8b:d1:
                    b6:f1:f3:7a:a2:40:b3:e2:e1:33:9d:8b:40:2b:c1:
                    9f:0f:bb:3a:03:47:ee:93:37:de:2b:a9:fd:e2:70:
                    66:9f:83:03:98:fb:1a:5d:6a:32:c5:28:9b:20:e9:
                    d6:8f:f1:fe:34:d1:50:36:49:18:73:50:19:df:d6:
                    2a:77:36:31:b0:1e:2e:16:74:ec:ea:ef:22:2f:0d:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6E:99:8B:56:08:56:B4:D8:18:B1:8A:38:85:63:47:25:DE:B0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/df825cf4-1ec2-3903-a1fc-c67bb7c700cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:78:48:8a:3f:d0:a1:88:c0:ea:00:3f:c0:67:31:83:75:59:
         9f:bf:ba:80:6b:90:0b:b8:96:cf:74:ec:85:98:8c:28:e0:53:
         05:14:7b:e0:0c:5f:0c:88:57:6e:c2:9b:15:ef:3a:ea:d5:cb:
         6f:73:30:e8:d0:3d:ad:cf:45:3d:2e:d8:42:f4:04:35:e4:4e:
         ea:07:1a:38:a7:1c:af:84:71:97:23:8c:75:b8:de:f4:d3:e6:
         b3:63:ae:99:49:3f:6d:dd:ab:6a:ba:76:ff:f1:9b:2a:10:23:
         92:92:40:15:f3:65:7c:72:38:41:7c:7f:8a:56:03:e4:6b:13:
         9f:29:81:3c:fe:fb:ba:02:bd:d2:10:bb:52:e4:25:35:a6:9b:
         a9:37:a8:23:08:f2:ec:8b:e2:c6:21:d9:92:fe:ea:87:b8:1f:
         a0:1b:c1:e5:41:16:f0:22:b1:b1:dd:6b:66:7a:ac:37:aa:55:
         5e:f9:e3:b6:60:81:b5:71:8b:11:ba:e6:8e:4c:10:81:ea:4c:
         69:fa:58:f0:6b:13:59:14:21:35:a3:bc:b9:3b:c1:5f:c4:fc:
         61:c6:7d:ea:2c:d2:8c:4f:c6:b9:a7:a5:39:3c:c6:ff:df:9e:
         66:38:96:50:a5:88:50:28:59:1b:0c:e2:a4:6b:ea:f9:d8:72:
         3b:c7:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:09:27 2026 by rpki-client