Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
File:                     2f8b5844-754a-3987-8ab2-f733b85a8928.roa (raw, json)
Hash identifier:          R/r1dh0cD7uGjdQ1PjSo/XfZSCHrZMOMHVeL2uD8TJM=
Subject key identifier:   AF:B6:B7:2C:69:89:F9:A4:FE:7B:B6:33:D4:9A:48:C6:E1:BC:C5:4C
Certificate issuer:       /CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
Certificate serial:       010D0C9F4328584F71ED93F7464F10FE2F120780
Authority key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     6491
IP address blocks:        204.89.198.0/24 maxlen: 24
                          206.197.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:93:f7:46:4f:10:fe:2f:12:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=671f22b4-ec54-4969-9d57-59d1ca86dc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:80:6a:7b:88:8f:3f:1d:83:10:02:c0:55:
                    08:cc:68:74:34:16:08:82:50:b7:c4:5d:3b:49:95:
                    71:86:a6:10:80:07:80:dd:9e:7e:b1:22:e5:31:5a:
                    dd:4b:61:ff:4c:f1:58:5d:0b:99:39:cb:da:c8:79:
                    af:84:e8:63:fd:3f:aa:bd:4f:96:e6:22:f2:88:0b:
                    5c:35:50:fb:52:78:e6:c1:e7:91:e3:63:44:3a:2e:
                    df:36:b6:16:77:47:2a:fa:2a:df:52:45:81:0e:91:
                    30:99:8a:08:51:cd:01:32:9e:06:93:cb:75:86:53:
                    1d:5c:7d:d6:15:b9:94:24:78:d5:eb:a7:fb:c2:89:
                    ed:74:8c:23:b6:5a:c2:e8:fa:4e:f0:09:c7:1b:03:
                    dc:8b:d7:9e:79:b5:12:26:88:5d:73:5b:7d:9e:15:
                    d5:a7:6d:a6:c2:39:80:09:ed:28:37:dd:9d:22:4d:
                    47:db:7a:16:19:54:0c:02:39:e4:68:e3:58:07:24:
                    e2:e7:fc:5b:a7:9c:6c:3f:52:ea:e5:95:26:2d:da:
                    7d:f5:0c:30:39:de:37:d4:88:15:2e:b1:04:ea:8d:
                    8d:13:f5:4e:46:c7:15:d3:13:29:73:a0:e7:ca:36:
                    ee:ba:fa:78:72:01:65:1a:93:75:37:3a:ac:54:fd:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B6:B7:2C:69:89:F9:A4:FE:7B:B6:33:D4:9A:48:C6:E1:BC:C5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.crl

            X509v3 Authority Key Identifier:
                keyid:1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.198.0/24
                  206.197.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:1c:9f:85:94:8e:3b:d7:b9:78:e2:0d:52:f8:48:1f:3c:
         95:b6:c9:6d:fe:42:66:35:96:4e:a6:c2:85:56:90:42:3b:ca:
         04:66:fd:17:79:7f:72:14:3c:06:fd:83:4c:ea:92:41:c1:24:
         26:bc:83:24:f1:eb:b4:ec:97:a7:bb:65:f8:b9:f0:65:40:d6:
         ce:f3:ff:be:6e:29:fe:2c:03:72:4a:cf:56:32:d5:a4:04:27:
         db:2a:8b:fb:83:4d:c6:0c:65:81:7f:18:6c:c3:8c:57:d3:db:
         df:8a:12:d2:45:89:d6:91:0f:b7:a7:fe:93:c1:9e:af:c1:1a:
         56:83:ed:93:3c:71:e9:04:08:be:3e:ac:e6:92:41:be:99:da:
         ad:bc:8f:14:a2:95:7f:ed:ef:c5:8b:28:e0:60:e4:f3:e0:e2:
         eb:53:76:ba:94:0c:44:de:a0:73:06:97:25:07:e6:4f:6f:10:
         14:98:79:82:fc:b3:06:bd:fb:64:d7:16:30:ba:9b:cb:17:f9:
         d4:18:29:50:a3:9d:a2:86:a9:86:dc:96:3c:63:ae:b9:ad:5c:
         17:25:c4:ea:f9:1b:18:34:8b:89:c2:98:5e:04:65:1c:6e:ab:
         20:2f:62:29:7e:fe:12:f9:4e:02:2e:1d:7e:0c:41:e2:d7:50:
         4d:b7:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:15:01 2026 by rpki-client