Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/81a29931-a7dc-3e51-9d16-7eeb8f16043d.roa
File:                     81a29931-a7dc-3e51-9d16-7eeb8f16043d.roa (raw, json)
Hash identifier:          cBebqMZyhxpg+Ik7Cd+ZklGM9i/ZSzuXz6Zd3bhD58M=
Subject key identifier:   B4:89:A5:5D:72:04:B9:DF:5B:2D:DE:38:87:7F:95:68:9C:4F:58:A6
Certificate issuer:       /CN=6cc45f23-c458-4442-ae7b-a87738f24fe8
Certificate serial:       010D0C9F4328584F6D85D390728CC64A6CF96200
Authority key identifier: E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/81a29931-a7dc-3e51-9d16-7eeb8f16043d.roa
Signing time:             Wed 07 Oct 2026 23:08:12 +0000
ROA not before:           Wed 07 Oct 2026 23:08:12 +0000
ROA not after:            Wed 06 Jan 2027 00:08:12 +0000
asID:                     40511
IP address blocks:        206.214.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:85:d3:90:72:8c:c6:4a:6c:f9:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc45f23-c458-4442-ae7b-a87738f24fe8
        Validity
            Not Before: Oct  7 23:08:12 2026 GMT
            Not After : Jan  6 00:08:12 2027 GMT
        Subject: CN=1fd7cda5-3398-4463-9c24-93cd23f4a6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:5b:72:b9:69:bb:4f:e0:dc:9c:77:0b:ac:
                    48:d3:76:a3:19:71:12:90:fd:1c:50:0f:4d:74:14:
                    07:a4:8e:a6:85:7b:a0:cb:ca:ec:2a:7d:ef:2e:a4:
                    5e:b5:ef:39:38:00:fb:20:58:05:f6:ee:09:c9:a1:
                    fe:71:ea:e6:54:2a:bb:e2:eb:0b:c5:d7:a6:7d:29:
                    02:5e:96:c3:93:01:92:35:98:87:4b:9b:cc:a0:b2:
                    81:ea:fa:b8:0c:59:01:fc:19:40:97:d5:fd:3a:91:
                    2e:45:a8:b8:c7:d2:de:94:54:1c:b0:04:1a:f0:70:
                    f8:a6:a4:39:5e:6f:5b:10:f8:85:51:12:32:fc:82:
                    5f:95:15:b6:51:1a:e6:d8:12:80:39:1a:1a:45:f2:
                    77:ac:3c:93:90:93:f7:1c:81:8c:4c:a6:1b:7b:11:
                    e1:0e:fe:e1:3e:12:b1:10:a3:f1:cf:0d:45:fb:34:
                    89:02:36:55:27:24:21:14:79:4b:ab:36:a7:b2:53:
                    40:7a:f3:08:fb:9f:2a:09:53:dc:7b:35:82:90:52:
                    0a:02:68:e7:ea:4c:ef:5e:4c:ec:bf:55:4e:7e:93:
                    c5:80:8c:a9:f9:ee:1a:3f:1b:fc:6c:b6:ad:a7:f2:
                    8b:a3:6d:c3:48:c7:7c:7b:3b:98:c8:4a:5f:f7:c8:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:A5:5D:72:04:B9:DF:5B:2D:DE:38:87:7F:95:68:9C:4F:58:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/81a29931-a7dc-3e51-9d16-7eeb8f16043d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl

            X509v3 Authority Key Identifier:
                keyid:E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8a:de:6f:54:06:2c:24:e6:90:94:a7:d7:fc:57:22:b6:06:
         8f:66:09:91:f4:73:41:8b:9e:26:90:8b:3f:46:aa:a9:e4:0b:
         a5:9f:16:d3:0d:9b:c6:f3:68:86:6b:04:8b:25:a2:dd:19:f5:
         67:ea:d8:c7:c3:e8:f6:05:d3:a2:b1:f8:86:c2:aa:6c:93:f8:
         77:07:f6:d8:ed:c8:e1:9f:69:cb:3a:5d:3d:a5:d3:ce:b6:64:
         1c:1f:66:dd:a1:1b:4f:75:d2:0b:dc:af:aa:7a:25:99:ae:9b:
         62:36:97:a5:02:4a:e7:0f:7b:21:73:02:98:88:96:0f:e9:6f:
         0a:77:99:6b:8a:60:30:cb:81:03:1a:8b:a6:5c:2b:99:dd:b3:
         1b:d0:71:38:83:e6:1d:5e:9a:a0:93:29:08:d9:cc:3e:a6:b4:
         d3:25:fb:61:5d:1a:00:5e:58:c6:6c:ed:53:a2:1f:bd:21:4b:
         ab:f0:4b:91:60:92:82:e8:83:65:e2:b2:0a:6e:16:67:b7:3f:
         a6:d1:c2:80:94:86:53:b4:0d:92:a7:92:8b:b2:db:cb:65:ac:
         ee:8a:47:c9:59:6b:cd:23:13:d2:5c:91:76:42:4d:2c:5c:f4:
         32:b2:b9:56:42:0e:84:ac:6e:78:fe:cb:d6:52:54:67:db:b7:
         fa:27:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:54 2026 by rpki-client