Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/0ef94fdc-c9a0-3e86-a67a-9b0c202b45b8.roa
File:                     0ef94fdc-c9a0-3e86-a67a-9b0c202b45b8.roa (raw, json)
Hash identifier:          k7IUVava/Ywz8VZemMBwghjcE09amhD6luQQ0e2ztpA=
Subject key identifier:   2B:40:76:D9:9F:72:AE:05:60:0A:18:C8:9B:7C:FB:43:E2:BF:A5:DD
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584E4DB9DAFA1FA3BEBC054A9380
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/0ef94fdc-c9a0-3e86-a67a-9b0c202b45b8.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     13737
IP address blocks:        206.212.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:da:fa:1f:a3:be:bc:05:4a:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=5521a929-04d2-43e3-832d-5f6fc4f81692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:27:e8:c3:96:86:74:29:10:c2:8a:1c:34:39:
                    38:ac:c0:35:39:52:d1:80:5f:be:a6:fd:ba:a8:e7:
                    b7:d6:26:5f:d0:7b:93:03:56:df:73:7e:e6:7e:32:
                    7a:ae:4d:f8:11:a3:c3:60:c3:f1:52:95:5a:bd:9b:
                    d7:59:72:9f:d2:16:6a:9c:23:14:99:c2:49:08:3e:
                    63:d9:1f:92:fc:b9:0b:b9:5a:05:fa:d2:cb:84:b5:
                    fb:c9:3a:b3:09:58:3d:2e:25:c1:49:c9:d0:ab:3b:
                    11:00:ca:63:c8:02:22:a0:18:6b:5a:d9:f3:c2:a0:
                    0b:48:8d:93:f4:69:e9:99:69:47:c9:30:21:dd:f9:
                    c2:a0:4e:a0:96:01:1b:6e:f3:31:66:e7:9a:0a:d8:
                    95:8b:b4:19:19:19:68:e3:b8:81:48:ca:5f:dd:47:
                    f6:a0:58:03:2c:08:c6:e0:8f:3b:64:47:24:30:88:
                    9b:26:9a:d8:a9:af:2a:f6:79:47:13:c2:e2:89:ea:
                    a8:dd:68:34:0f:20:30:bd:d5:fd:2a:d4:b3:7c:07:
                    a0:64:a1:b0:b8:99:01:32:37:77:65:55:bc:b5:93:
                    ef:c2:2f:5d:15:d7:ee:b1:35:00:ae:61:4e:65:66:
                    77:3c:e7:33:5f:aa:21:e9:22:b0:d0:1c:72:a9:38:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:40:76:D9:9F:72:AE:05:60:0A:18:C8:9B:7C:FB:43:E2:BF:A5:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/0ef94fdc-c9a0-3e86-a67a-9b0c202b45b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:2e:70:6b:37:ec:4b:88:ad:bd:0b:87:87:0f:82:a1:31:f4:
         43:b7:79:b2:2b:c8:9d:e7:15:40:37:19:55:72:da:d7:c7:d1:
         83:c0:27:2a:2c:fa:ca:22:50:67:7e:04:95:58:4e:33:d1:2b:
         95:1d:9d:42:3f:e7:b6:1d:53:7b:d4:81:02:e4:df:b6:2f:ae:
         62:24:d1:51:fc:7b:f0:20:60:b4:d8:3d:1b:b2:fe:b1:ce:af:
         1f:e1:31:aa:1e:6a:05:31:c8:73:a4:3e:43:f9:d9:d0:d9:53:
         90:93:ba:f9:d0:81:ea:82:9e:f2:fc:21:9a:bc:1a:4c:26:34:
         79:f0:73:ab:d0:e6:be:61:68:62:8e:27:ce:95:f3:f0:0e:83:
         10:3a:7f:1b:30:bf:fa:07:a0:bd:75:9b:2f:d2:49:9f:30:58:
         50:64:55:20:f0:2d:37:43:09:03:5b:94:5d:9b:83:77:77:cf:
         34:56:e0:a7:b1:e2:82:80:3f:56:fc:06:79:ff:e7:f6:9b:f5:
         11:75:a8:8f:37:1c:2a:5b:46:6f:56:0f:74:aa:5e:3f:44:ed:
         d7:9b:6c:02:82:d0:e2:93:04:92:54:1e:3b:ae:fc:43:2b:e5:
         16:df:f8:34:00:09:d8:4b:06:eb:ff:ce:34:c5:80:6a:f6:84:
         cd:25:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:59:16 2026 by rpki-client