Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/a1c10821-38f2-367d-a4b9-f403c18eed50.roa
File:                     a1c10821-38f2-367d-a4b9-f403c18eed50.roa (raw, json)
Hash identifier:          AFIwkO80MZ/N6LPFNOofkpj0Tg5/tb1sF2tJOJQJq+4=
Subject key identifier:   41:21:D8:75:3B:8F:DA:3B:DF:B4:76:AD:65:62:D7:82:AA:25:B5:35
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584DB7702D8708F653B7A320C380
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/a1c10821-38f2-367d-a4b9-f403c18eed50.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        206.15.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2d:87:08:f6:53:b7:a3:20:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=f2afd5ae-78b9-4486-b822-fa0f4dd6df07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:bc:0d:c8:dc:7f:a6:aa:70:28:52:97:6c:
                    79:5c:68:7f:1d:3d:17:69:5e:52:2e:1e:2e:3e:4c:
                    ba:80:4c:de:9e:87:71:a0:89:d4:c0:2e:aa:97:a8:
                    85:03:eb:43:e4:ed:f1:5c:e4:24:7b:cf:7b:97:ff:
                    d9:fa:a7:04:97:46:db:99:64:df:4f:4c:a5:c6:14:
                    2d:8b:32:12:d4:6e:ef:18:04:90:40:49:e2:2c:71:
                    80:2c:75:af:bb:9a:77:1b:2c:fc:48:3e:06:67:e6:
                    88:2e:77:a5:30:b4:4e:0d:53:09:63:f7:b3:ad:af:
                    7c:bd:71:d7:fc:f1:47:cf:b3:55:d1:9e:bd:ce:ab:
                    9e:0c:f0:fe:13:5a:71:aa:f1:a6:9d:fb:3f:1d:f9:
                    d3:6b:13:2c:70:ba:03:32:b9:58:b4:21:7e:9f:c0:
                    73:c9:15:ff:a4:b0:cc:3c:f6:00:54:0c:37:f3:1b:
                    24:f7:fe:b8:af:8d:9c:e5:12:9f:9c:cf:f0:f8:e0:
                    bc:88:be:75:06:2d:71:44:a3:ce:b5:fb:bf:fc:df:
                    80:56:77:92:33:8f:bc:70:47:de:4c:08:23:33:77:
                    12:db:8b:18:69:1a:b2:c5:91:92:25:9f:9a:cc:42:
                    33:61:d6:9c:bd:e7:43:3d:f3:d2:45:af:d9:06:6e:
                    2c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:D8:75:3B:8F:DA:3B:DF:B4:76:AD:65:62:D7:82:AA:25:B5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/a1c10821-38f2-367d-a4b9-f403c18eed50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:15:cb:07:9a:f0:90:c7:02:7c:c2:d1:35:87:fb:92:f9:45:
         80:e5:8f:98:d3:14:de:cf:20:1a:4c:57:6b:62:f7:3b:7d:e6:
         18:37:4b:2d:e8:b8:82:4a:44:8e:c6:be:cc:29:c1:4f:5f:5a:
         c9:00:2d:96:d5:65:fe:7b:86:51:6b:a7:f6:19:02:e8:8a:64:
         68:a7:fb:9c:aa:4e:4c:90:7c:f1:b0:73:0c:9b:4d:93:f3:60:
         1c:d9:35:5b:b4:c0:c3:05:76:9c:e2:62:12:ef:33:26:da:76:
         81:18:01:b3:7f:82:3f:aa:54:da:a2:0c:ae:8a:73:c1:4b:17:
         99:e0:98:31:0a:f9:20:05:69:03:1d:f9:f8:d8:32:96:dd:3a:
         9b:43:ba:d1:47:e0:53:0b:10:e1:aa:de:0f:d9:e1:69:a8:7a:
         c7:e0:4e:cc:5d:d9:61:49:f1:89:11:6a:6f:01:4e:c2:b2:0f:
         b1:fc:21:ed:ad:49:44:8e:a2:02:c7:1c:2d:22:9a:a4:0c:f9:
         dd:3a:d6:bd:e4:5d:22:31:9a:c3:f4:64:53:0f:60:a4:71:ff:
         4e:30:76:0a:ac:0f:93:7a:66:a3:82:f6:e0:be:8d:e2:ac:a4:
         c3:ca:be:b6:a0:0f:22:2d:63:cf:0d:b5:12:65:66:8d:2e:d1:
         98:15:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:37 2026 by rpki-client