Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/3e3ad9e7-6f3b-3a2b-aa8d-55e293e9503c.roa
File:                     3e3ad9e7-6f3b-3a2b-aa8d-55e293e9503c.roa (raw, json)
Hash identifier:          WyO59m2ev85YVbhvA7YGWRX80Ckg50UT6W5rtIlOgPo=
Subject key identifier:   89:F7:E5:39:BD:A4:A6:C7:12:50:A3:3B:83:C4:0B:E5:5B:78:82:AE
Certificate issuer:       /CN=6cc45f23-c458-4442-ae7b-a87738f24fe8
Certificate serial:       010D0C9F4328584F6D85D3F5CC7C05C70A3594C0
Authority key identifier: E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/3e3ad9e7-6f3b-3a2b-aa8d-55e293e9503c.roa
Signing time:             Wed 07 Oct 2026 23:08:12 +0000
ROA not before:           Wed 07 Oct 2026 23:08:12 +0000
ROA not after:            Wed 06 Jan 2027 00:08:12 +0000
asID:                     40511
IP address blocks:        206.214.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:85:d3:f5:cc:7c:05:c7:0a:35:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc45f23-c458-4442-ae7b-a87738f24fe8
        Validity
            Not Before: Oct  7 23:08:12 2026 GMT
            Not After : Jan  6 00:08:12 2027 GMT
        Subject: CN=2459be31-4bda-4a69-aecd-71e204d9a79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:6a:65:cf:f0:10:e7:44:64:e9:7a:b5:60:
                    77:07:8a:d9:bc:74:ac:78:ae:90:1f:3f:42:23:c7:
                    1b:83:cd:72:cd:02:da:05:30:0b:1b:ce:13:79:2d:
                    fe:37:16:af:d8:4f:45:55:ab:9b:df:69:5f:c0:89:
                    b7:92:d5:d3:97:4a:43:a4:a7:8b:36:8e:46:c9:90:
                    f6:34:ca:20:2d:75:10:86:28:b9:16:21:45:2d:3b:
                    46:81:f6:e7:e3:dc:90:82:d9:0b:6b:8a:a1:f1:70:
                    d1:13:af:4a:03:49:2e:a2:53:da:89:10:18:d8:95:
                    0c:d0:1e:b7:3c:f5:62:41:f0:78:1f:2c:0b:cb:85:
                    5e:a1:17:8e:7b:6c:7f:e8:1b:b6:77:35:c9:ba:58:
                    24:03:df:34:42:20:30:18:f5:23:3a:cc:b7:9a:bd:
                    f6:9f:67:41:2b:b0:19:7f:e4:04:5d:31:4a:1f:b2:
                    f5:bf:2a:73:80:23:de:c8:d9:85:46:b3:2a:33:84:
                    3b:20:70:25:c5:b3:ae:48:2c:8a:3d:1f:45:0e:4e:
                    17:e1:e3:68:d2:26:6c:fd:a4:fe:bc:19:9a:aa:e3:
                    0d:12:27:00:08:86:f7:62:d0:e1:74:98:df:d6:4a:
                    ad:59:c0:e2:d2:b3:0c:57:f7:c5:be:99:11:a7:48:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:E5:39:BD:A4:A6:C7:12:50:A3:3B:83:C4:0B:E5:5B:78:82:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/3e3ad9e7-6f3b-3a2b-aa8d-55e293e9503c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl

            X509v3 Authority Key Identifier:
                keyid:E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:27:b7:03:31:88:92:14:50:d2:4c:36:39:be:4d:cd:6e:11:
         68:0a:1a:04:4d:b8:37:c0:93:f9:01:3c:b9:c2:c2:5b:61:b0:
         6d:af:d8:bb:64:89:e5:19:9e:c9:dc:28:53:e4:2f:c5:3a:cf:
         e8:d6:6b:22:4d:52:ca:37:ed:1b:7e:ae:63:d6:23:da:d6:3f:
         b7:77:68:0b:0c:d5:be:6b:0d:3d:52:b8:6c:8f:98:82:7f:e2:
         03:d8:db:bc:9c:5c:dc:6b:f1:e6:a2:cf:6f:3a:8c:85:54:ad:
         6b:77:c4:67:f0:2d:d4:82:2a:4d:8f:ae:e1:e9:c9:2c:bb:7d:
         08:69:6c:92:6d:e5:3e:1e:91:64:21:d7:36:0a:75:82:ce:fd:
         7a:dd:df:66:29:d8:65:62:fe:07:45:32:9c:17:ad:9f:4b:fd:
         d9:1b:58:48:87:a0:6c:4a:78:b3:eb:5e:78:9c:de:0b:fc:f5:
         ea:3b:f1:17:5f:29:ed:ba:d8:3f:b6:b2:4d:5a:39:44:49:0f:
         37:c8:1c:bd:67:23:67:16:7f:d1:4e:4b:34:ee:8b:d8:a9:ed:
         e8:94:fd:2d:08:28:6b:41:1d:03:4c:50:a3:28:68:f0:83:39:
         e4:a1:c2:80:2c:36:07:91:3e:cb:35:cc:a9:3c:a8:15:c9:48:
         21:76:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:42 2026 by rpki-client