Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
File:                     17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa (raw, json)
Hash identifier:          nHHPunldu+wAJdyk0lBkG5QSvX1GivWCynLVpikzLbk=
Subject key identifier:   91:61:B7:4C:4C:85:AF:0A:47:8B:08:34:F0:0E:F3:F1:D2:5E:1D:5B
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584E4C5492235AB7B55AC815BC80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        216.115.219.0/24 maxlen: 24
                          216.115.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:92:23:5a:b7:b5:5a:c8:15:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=0f8c61a5-4965-4f05-8b6f-2a1fdb066714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:0e:42:fc:37:77:81:76:f0:4f:99:c5:cd:
                    09:2b:f2:8a:1f:87:fd:bc:84:3b:70:0d:46:67:93:
                    41:4c:8e:ab:c5:a8:2b:b8:03:a9:af:3b:bf:c1:53:
                    dc:3d:df:d4:09:39:ce:57:c8:2e:c2:6f:91:b6:09:
                    f8:9c:50:7b:d4:2c:cc:75:96:10:b3:67:cf:f3:d1:
                    d3:0b:52:aa:c3:2e:45:00:56:87:e5:c2:ff:db:15:
                    46:30:82:81:d1:2d:b5:3d:b1:1b:f5:a5:cb:33:cc:
                    de:68:51:95:5e:a3:09:02:ea:ad:e9:6f:44:e8:18:
                    59:94:1f:28:50:b9:76:76:5b:0d:32:f0:57:16:27:
                    b4:b7:be:7b:ad:e0:55:6c:1f:fa:cd:1c:5c:cb:d4:
                    f6:93:91:24:0f:f9:2d:c5:f8:f8:35:25:59:29:84:
                    63:90:c5:5d:98:19:c6:e2:63:f9:75:91:8a:09:a4:
                    6a:3e:8b:ec:4b:cc:be:1b:da:d7:3d:35:4f:b3:1d:
                    4e:dd:c0:3b:a2:a2:15:34:4d:60:26:ed:fe:b4:6a:
                    36:7c:5e:b2:3a:93:ef:4b:e2:d0:6f:16:22:c6:f0:
                    d8:34:5e:43:6c:a6:2f:f7:68:d5:f2:77:58:20:16:
                    69:a3:36:b2:98:2a:12:7e:8a:09:f9:52:6a:da:02:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:61:B7:4C:4C:85:AF:0A:47:8B:08:34:F0:0E:F3:F1:D2:5E:1D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.219.0-216.115.220.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:bd:21:5a:21:23:40:45:8c:50:c9:7c:c2:ad:52:c6:e1:ae:
         e5:5f:0c:53:e0:98:04:ce:f0:62:f1:1b:ae:62:84:22:a8:3e:
         00:35:59:76:2f:8b:eb:11:e5:ad:d0:53:c3:25:d1:b8:b0:85:
         87:6a:d1:10:45:ae:1a:51:dd:46:72:eb:a9:35:ec:f4:db:a8:
         8b:30:2e:28:53:49:2b:74:d7:c8:08:a7:a1:db:86:b4:70:ad:
         45:d3:6f:38:b8:9a:37:55:cb:c1:1e:34:57:3c:f1:83:6f:31:
         bb:75:c1:5d:85:a6:c7:c3:3a:1f:34:7a:ca:bc:7f:06:49:61:
         2e:c3:91:36:73:06:c5:d3:0f:01:db:a8:65:6d:c0:50:90:97:
         65:cf:6a:6e:3b:3e:30:61:6a:c1:99:89:e4:fe:0e:88:4a:83:
         a6:35:53:16:9e:5d:2b:e0:4a:01:29:f1:f3:f8:5c:51:62:38:
         17:d3:a9:20:64:aa:65:24:f1:78:48:3a:f9:10:f8:e5:54:90:
         06:35:45:9b:e7:1d:80:bc:38:25:8d:62:56:62:44:61:a0:ab:
         89:8a:cd:65:56:98:73:28:ca:41:cb:6a:3b:a7:65:16:20:16:
         ee:03:62:1b:02:59:88:48:87:d4:27:c9:60:d3:05:86:3e:1a:
         0a:9b:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:21:57 2026 by rpki-client