Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
File:                     060afa88-c689-36bf-8da3-d16c2159ba5c.roa (raw, json)
Hash identifier:          mlYOQzvb+EgpqMJsgMXimvfGXoQUdTZW1RcJ1zEnN2A=
Subject key identifier:   58:5A:73:B6:8C:21:9F:A9:36:C9:56:E1:ED:4B:C9:E4:56:96:97:9A
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F4328584DBD05900600D356DE05AE8200
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        64.6.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:90:06:00:d3:56:de:05:ae:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=6ce66822-e7c3-454b-9b63-b06a929ad9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7c:0f:19:54:ff:71:1a:30:01:66:38:de:03:
                    09:32:55:29:15:1b:43:ba:e2:e1:c2:ec:b6:b8:c5:
                    ee:c3:32:99:13:d6:66:59:66:ff:c6:0e:a8:2b:1a:
                    e9:69:e6:fc:19:94:b6:d7:cb:4d:9a:06:61:a2:74:
                    76:05:25:6f:cc:95:3f:28:7f:e7:a8:ba:e4:77:de:
                    a7:18:31:5e:e2:2f:e3:39:97:99:6b:3f:78:a0:fc:
                    8d:49:2e:9c:ac:9c:51:c2:71:33:c0:65:d8:8e:43:
                    59:bb:23:f0:0e:33:73:e1:83:13:ea:c7:6f:33:2b:
                    71:cf:87:50:b7:30:60:96:8d:0e:08:46:c0:ed:f1:
                    f2:b4:d5:92:5d:da:5d:e0:6d:8b:f8:7c:a0:a4:18:
                    00:ef:14:22:e4:f8:ab:83:33:30:4c:82:89:d0:c8:
                    67:d4:1a:69:cd:91:aa:d4:cd:37:89:47:47:8d:5c:
                    d4:7a:69:9a:b6:6c:71:e0:6c:5b:4a:d1:71:bd:de:
                    3f:69:57:38:9e:94:d3:4e:58:93:40:62:f1:26:b6:
                    8c:77:a1:08:b6:a1:3f:d0:dd:86:7c:b1:78:85:d6:
                    79:8d:51:bc:7e:55:00:e0:37:50:76:3a:7a:32:41:
                    58:a5:39:4f:c9:ed:2b:71:29:77:15:6d:a6:ca:89:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5A:73:B6:8C:21:9F:A9:36:C9:56:E1:ED:4B:C9:E4:56:96:97:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:07:72:73:26:74:24:a9:13:f6:9e:31:56:86:a4:41:0a:26:
         70:63:98:55:ae:3a:27:e8:94:29:99:f1:6d:97:b3:f9:87:74:
         d5:e0:9c:c3:60:44:c7:96:83:4f:c3:37:5b:05:db:82:94:7e:
         c6:a3:c1:a7:6a:34:49:52:53:63:42:c4:6d:ce:4e:db:7b:42:
         dd:bf:ac:e1:d0:bc:5e:54:4e:2e:fd:bb:05:25:ae:af:04:4d:
         14:be:a9:fe:02:90:37:1e:0a:7c:bb:53:98:58:f1:b2:2a:06:
         69:25:ed:42:e6:7c:f0:be:3e:56:72:94:81:d0:69:26:f6:31:
         b5:4a:f9:44:39:85:d0:92:b8:bc:56:87:61:f0:ab:f2:ca:f8:
         6c:9f:74:c7:8e:68:f4:15:e0:20:5e:43:40:a3:ff:b2:0e:fa:
         d9:bf:d1:92:c9:92:ac:17:3c:46:1c:72:12:12:49:2d:01:e2:
         63:15:a6:3d:23:52:7b:04:f4:6d:55:7d:72:fe:4f:e5:fe:7c:
         b2:f9:3a:ea:a6:02:ef:8f:79:f4:d2:50:1f:6e:e5:04:11:65:
         03:59:ba:d2:a5:a1:84:e8:56:e4:6a:f0:3c:3f:af:75:5e:fb:
         db:27:7b:43:47:9f:56:95:ab:d2:51:9f:08:b6:e8:8b:c3:f2:
         05:ce:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:55 2026 by rpki-client