Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af7652f-9905-3a35-8e49-b06dd018deb1.roa
File:                     8af7652f-9905-3a35-8e49-b06dd018deb1.roa (raw, json)
Hash identifier:          aXePEcGggkAUDKqCMcDaBout2Ccj4cH2iNPzpSm3t7Q=
Subject key identifier:   56:D0:69:83:8D:47:DD:36:60:FE:F9:22:A5:2C:73:FB:7D:24:5D:5D
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6F3A2C57E0D5AAF1723C1F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af7652f-9905-3a35-8e49-b06dd018deb1.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        130.61.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2c:57:e0:d5:aa:f1:72:3c:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=464a4153-5037-4d1e-ab7f-bcda401100e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:a9:a0:ac:48:d1:95:16:2e:7a:16:e5:15:
                    df:9b:05:8d:d0:e7:2e:5f:31:3a:11:e7:fd:49:bf:
                    42:80:8c:41:ae:27:08:f7:12:66:3b:e0:45:51:f3:
                    b3:1c:89:48:f7:eb:8a:f0:e0:31:f4:eb:e8:e1:c9:
                    98:2d:21:96:4f:da:ae:0a:71:2f:e2:10:34:8e:c2:
                    18:87:3d:75:ce:b6:ed:4f:10:df:64:0c:a1:7f:e2:
                    54:a5:18:43:f4:29:64:26:bd:7b:f3:bd:51:f5:e7:
                    dd:3b:d8:9c:b5:01:2e:a0:60:f5:82:68:cb:22:5a:
                    b2:90:d5:49:4b:28:5b:4a:94:78:1e:27:96:42:db:
                    bd:09:50:f3:ff:3a:c2:ba:c8:88:ec:d8:3e:07:80:
                    6e:59:6b:c7:74:23:3d:4b:cd:a3:4b:56:a7:29:07:
                    25:b7:5f:63:82:32:ee:64:3c:94:d2:ce:12:78:45:
                    13:58:57:59:fe:74:85:95:f8:14:a5:3a:f1:5c:f2:
                    7d:48:bc:64:f6:0c:68:3f:f0:db:d9:58:a2:19:2f:
                    a1:af:0a:2b:d1:4d:02:35:ba:36:8e:78:55:40:92:
                    f8:92:1f:68:36:5c:f8:0d:12:5b:57:b3:3f:3f:10:
                    67:e0:4e:a5:82:9a:ee:28:76:f4:cf:35:1a:e9:5c:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D0:69:83:8D:47:DD:36:60:FE:F9:22:A5:2C:73:FB:7D:24:5D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8af7652f-9905-3a35-8e49-b06dd018deb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.61.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:83:3d:d4:a7:70:01:f3:7a:b0:76:00:7f:cf:18:97:cc:
         46:2d:2c:9f:71:49:0e:74:5b:7b:49:77:88:4e:3d:ab:03:58:
         58:2a:47:cf:40:7d:36:1c:20:2c:82:5e:ee:99:f8:54:2f:dd:
         00:b6:b0:af:8c:57:f3:22:bb:ea:77:f6:9c:08:7f:de:4b:8e:
         31:40:35:e9:dd:e1:83:44:24:d0:87:3d:7f:be:85:be:71:6e:
         11:e7:d2:7c:0d:fa:35:c5:f8:0c:a7:5d:dc:4a:24:e3:5a:cc:
         5e:c6:fe:74:da:35:0c:ed:f3:1d:89:07:14:06:34:00:f4:68:
         d4:8b:8a:58:d9:83:da:6e:bd:39:50:d7:63:78:25:c9:3b:12:
         dd:a2:30:24:94:af:5e:95:41:eb:87:c4:f3:fe:34:67:e5:62:
         8b:99:85:08:e1:1d:7d:65:86:6a:3f:bb:2a:42:c4:32:13:4f:
         8d:96:e5:c3:f4:3b:52:97:f5:4f:02:92:5b:06:9e:75:57:ad:
         38:e2:fc:1e:3e:33:10:84:61:9e:52:da:99:ce:4c:a4:6b:bc:
         ae:e4:ce:fb:03:a2:61:c8:97:cd:40:93:f3:42:e9:d2:51:dd:
         d1:a3:46:d9:8c:0b:28:05:4e:8b:8b:37:a1:0c:4d:14:8e:6e:
         31:1c:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:04 2026 by rpki-client