Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
File:                     b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa (raw, json)
Hash identifier:          +t+7f6Vxf6iKMtqSuiLwO8om7TUwHtjshsC8qw1Gado=
Subject key identifier:   3B:7A:5C:7F:D7:09:83:30:D4:CF:03:DD:1C:BA:34:08:A5:A3:C9:3C
Certificate issuer:       /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial:       010D0C9F4328584E2AD45DEE5031A97133F27C80
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     19905
IP address blocks:        206.83.160.0/20 maxlen: 24
                          2620:13d:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5d:ee:50:31:a9:71:33:f2:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=42e62fb7-8d1e-442f-85bf-5ed85937d64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:21:b2:ed:be:0e:68:29:0e:9b:59:fc:b2:
                    41:45:55:ec:60:6a:02:2e:f6:ee:2a:d5:99:24:21:
                    bb:d1:95:48:3c:39:93:a7:69:81:5a:b4:fe:99:a2:
                    b8:56:1f:cc:d5:89:b2:44:50:12:0c:7a:bf:58:c1:
                    3b:e1:37:3a:4b:b8:5f:c2:6f:1b:93:77:a0:74:50:
                    0d:e0:6f:de:ee:c9:d2:5f:18:39:30:9c:3a:de:24:
                    0b:95:c2:ae:13:b1:34:21:72:e6:a9:ee:9a:4c:06:
                    99:1c:76:8c:ee:28:ab:37:9a:5e:46:6b:6a:79:da:
                    1c:cb:d6:95:b4:7f:5c:75:32:4a:bf:a1:b3:97:82:
                    ce:e4:f0:c1:a7:7d:1c:65:59:f2:06:7c:71:2e:6f:
                    da:61:97:02:8e:e3:d4:3b:83:f7:de:ea:57:87:42:
                    28:c3:82:e5:18:95:ac:3c:72:c3:7e:cb:ed:5c:f3:
                    a8:4a:4b:30:79:d5:2a:9c:52:f6:90:cd:3f:58:38:
                    fe:f4:62:59:0f:d3:3b:ca:f4:ac:02:65:fe:b9:3d:
                    d7:73:18:5e:da:e5:70:e2:11:be:e0:d8:d9:8f:2a:
                    eb:84:d9:ae:e4:96:f6:33:80:9b:6b:de:37:0b:09:
                    14:a4:5f:95:ff:d0:8e:ee:46:8c:4d:fb:ae:56:97:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7A:5C:7F:D7:09:83:30:D4:CF:03:DD:1C:BA:34:08:A5:A3:C9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.160.0/20
                IPv6:
                  2620:13d:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:b2:77:a9:5d:71:31:d0:c0:21:65:2f:1e:8b:84:95:e3:
         cd:13:66:58:e4:4e:89:26:16:01:9f:6e:3f:e3:1c:7f:b9:b5:
         33:50:0b:8c:7b:22:f7:3d:c6:be:1e:b3:90:de:e5:83:70:d7:
         cf:9b:b0:b8:cb:7e:b4:11:c6:44:53:b0:11:e2:fb:58:1a:c3:
         f4:4e:83:7d:6c:5e:c8:72:b1:fc:f7:cc:10:35:61:ca:8a:f7:
         cf:43:01:51:69:a5:71:97:32:56:78:c0:b1:38:71:f9:fd:27:
         57:b8:c6:c6:80:98:9d:31:8a:62:05:b0:2b:37:5c:c0:2a:e2:
         c0:b2:89:5e:4a:5a:82:0d:c9:31:46:94:a6:26:c7:d1:dc:2c:
         7c:80:2f:29:5d:36:bf:59:0c:32:ff:cb:ec:31:cd:63:2d:9d:
         56:37:b5:39:80:47:d2:65:df:2e:b9:49:93:6b:33:40:7e:d8:
         83:9a:df:28:93:bf:ee:41:ac:f3:ab:c4:ff:39:6b:c6:9f:4d:
         fe:46:dc:c5:91:c3:d1:43:5a:d1:ea:c3:74:2d:cf:0a:63:48:
         ef:5a:a0:73:7b:7d:67:9a:b8:19:88:a7:67:f5:c2:4f:ee:bc:
         88:87:e7:de:c3:ba:23:8b:c4:6e:b4:6e:ee:b6:9b:8e:d2:f3:
         ba:c0:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:30:54 2026 by rpki-client