Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa
File:                     2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa (raw, json)
Hash identifier:          H6xqEa6tmvht4l6fu5rGKMMQ63vry/xTuzqTDaBLXVc=
Subject key identifier:   59:2D:83:0B:EB:26:48:7A:C3:28:E9:A4:E4:C8:0F:3F:F6:0D:D7:D3
Certificate issuer:       /CN=d426c818-fe62-465f-8184-d4f8176e2692
Certificate serial:       010D0C9F4328584EE38C9410236380C813FF3CC0
Authority key identifier: F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     6507
IP address blocks:        151.106.248.0/24 maxlen: 24
                          151.106.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:94:10:23:63:80:c8:13:ff:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=a1bb19d9-e330-4c37-aadf-414392909867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:96:0f:55:ab:b1:d8:20:96:2f:c0:17:d3:
                    47:ad:6a:ab:e8:da:b0:0d:f6:ac:c5:28:dc:fe:d0:
                    06:81:20:1f:ef:54:1d:f2:30:0b:a3:1d:5e:3b:84:
                    22:00:54:ba:b4:3e:81:ab:86:0e:31:a1:db:4e:0d:
                    03:7d:f4:0e:f8:d1:29:8a:1c:91:cd:a9:b0:31:b6:
                    34:78:7a:b9:c5:fc:c3:6c:54:54:24:30:58:bf:35:
                    3f:c4:af:4e:33:92:3b:b4:0a:c2:46:24:a3:be:13:
                    b9:b3:07:8a:a7:b5:cb:a3:70:ba:21:9b:0a:4f:e7:
                    25:f8:eb:cf:6a:ab:81:83:b7:67:b6:65:96:12:34:
                    46:b0:9f:8c:ea:84:1e:07:7b:b2:30:bb:f1:b2:aa:
                    54:81:68:a1:a8:3d:c7:09:05:95:ea:27:17:f1:02:
                    e7:45:6f:89:91:be:c4:47:ea:35:87:5b:32:c6:90:
                    87:f2:bc:5c:50:0b:57:cd:3d:1c:e8:b8:b6:16:0a:
                    44:10:31:3f:b9:d2:af:c2:dc:a4:3a:b4:80:40:cb:
                    5b:d7:7c:65:41:73:a3:ea:ce:51:a0:7b:4e:f2:e8:
                    39:a3:96:c6:4e:5d:57:4e:55:66:88:b5:c9:17:13:
                    d5:ae:b5:fa:5e:9d:47:b3:a4:b8:43:80:e4:b0:81:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2D:83:0B:EB:26:48:7A:C3:28:E9:A4:E4:C8:0F:3F:F6:0D:D7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/2bc305b6-8220-33ef-96b1-ee5a3e64b88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.crl

            X509v3 Authority Key Identifier:
                keyid:F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.106.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:69:50:ab:96:1c:9e:11:d6:38:37:f6:c3:a2:9e:db:01:15:
         79:fd:11:56:0e:25:6a:0d:1d:67:e1:86:23:1f:c9:6f:fa:bc:
         98:96:21:20:f6:1c:3e:90:e5:df:23:10:32:84:24:23:f7:5d:
         67:26:5d:5b:d1:5e:80:2c:ef:04:e7:a2:0b:cd:e2:3e:85:cd:
         b3:c5:b9:55:72:09:f6:82:6a:96:f7:fe:fa:37:3b:22:65:64:
         3f:fd:1a:ca:cf:7c:b3:89:c1:87:4e:9a:24:bb:14:57:a4:97:
         8e:e1:b7:94:38:3a:d4:f1:2a:18:a6:0d:dd:ee:ba:d2:e8:13:
         55:f0:45:25:18:d4:52:62:44:27:f7:2c:c8:e8:e7:a1:2a:ce:
         e5:36:ec:4e:7f:f0:cb:e3:58:96:ac:c4:6c:52:24:10:19:fd:
         9f:e5:0d:8c:8e:8a:0f:d1:f6:f4:85:f0:96:14:19:3d:32:4d:
         4d:51:93:08:cf:e9:86:72:b6:15:29:3c:a3:de:f4:67:92:04:
         2f:3e:c7:26:55:89:90:50:b1:e2:09:e2:d6:0e:a6:2e:59:af:
         83:21:22:3a:d5:3a:c5:58:9a:45:05:52:20:06:47:c6:98:22:
         50:02:e5:76:4f:eb:d3:ab:21:93:2d:d4:43:47:14:ee:c0:ec:
         0d:63:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:38:37 2026 by rpki-client