Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/663fc84b-e171-3e08-be49-f667b2afe080.roa
File:                     663fc84b-e171-3e08-be49-f667b2afe080.roa (raw, json)
Hash identifier:          g3kSf7lNZtwPEv+zLIL2HFbVkcjMtN3QghJqS+rP+RA=
Subject key identifier:   5E:E3:3A:D9:AD:A4:5C:72:FA:40:4E:6F:DF:66:E4:BA:93:0A:57:B8
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584DAC457608801A47C864914880
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/663fc84b-e171-3e08-be49-f667b2afe080.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     33211
IP address blocks:        206.41.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:76:08:80:1a:47:c8:64:91:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=bd89ac03-2d02-47b3-a414-85031b15fd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:6e:1c:96:b3:aa:5a:45:ac:ef:83:16:5b:
                    03:d8:41:83:c8:df:16:26:2b:88:9b:21:0e:c7:2b:
                    8e:fe:99:93:01:cc:9c:3b:e2:41:d9:69:9e:03:8a:
                    d2:b4:f8:e6:6d:d0:37:5a:73:c1:d5:55:ef:ad:24:
                    1c:0a:2c:69:8c:52:ff:b9:b2:80:7d:09:6f:73:f2:
                    3f:f7:ce:e8:ae:b0:2d:69:fa:a1:12:7f:57:12:0d:
                    4b:7a:ca:27:37:b8:16:5e:88:b6:42:a7:5a:28:12:
                    b5:7b:29:a1:0d:03:4d:e0:08:db:db:d1:a4:a9:f8:
                    e8:cf:96:a0:15:7f:f4:ff:3a:eb:36:9e:57:e5:20:
                    ba:be:5b:17:8e:58:8e:1e:7f:47:93:42:2a:91:0f:
                    a5:57:9c:d6:38:8a:d2:93:e7:63:0c:3a:ce:57:94:
                    27:85:99:25:b8:f2:26:24:c0:4f:1d:b1:85:94:00:
                    8a:9d:2c:a5:6f:b1:e0:e2:37:f3:b8:dd:cd:ec:7a:
                    52:d0:fc:eb:82:9b:fc:23:23:9f:09:99:3b:6e:bd:
                    75:0d:f3:3a:37:0c:87:0b:65:71:aa:58:a1:91:6a:
                    f5:f1:38:00:2e:cd:92:4a:0b:dc:a3:ac:eb:46:ff:
                    32:ef:9c:76:1c:a7:23:e1:90:38:a5:4b:dd:4c:8e:
                    a6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:3A:D9:AD:A4:5C:72:FA:40:4E:6F:DF:66:E4:BA:93:0A:57:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/663fc84b-e171-3e08-be49-f667b2afe080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:7d:48:75:c9:d3:bc:5e:c2:00:0e:56:de:3d:5c:9a:c8:
         0d:4a:6e:a0:d9:16:60:a5:00:ca:bc:e3:c7:c6:d9:fb:80:69:
         d8:af:d0:4d:e0:b1:7b:f0:52:b9:5e:59:5c:60:1a:f8:92:07:
         78:a7:92:42:e8:33:cf:99:c6:85:61:c6:85:64:f9:e4:d7:f3:
         5e:9f:e6:38:83:cc:a1:c7:4c:b8:74:82:5a:13:89:14:90:d6:
         0d:d5:4c:f3:a2:67:28:10:b9:72:92:65:b2:f0:34:8b:8f:78:
         d8:df:05:bc:8a:11:d4:45:cd:63:d2:37:a1:68:8a:67:0a:7b:
         51:0d:cd:1e:d7:ab:82:6b:b6:3c:c6:92:e3:d9:bf:01:86:1c:
         b0:66:3e:92:8a:92:7f:0a:ab:b7:0c:07:1c:f1:13:45:07:17:
         d2:60:1c:a7:56:4d:7f:14:32:10:46:d2:d8:48:c8:15:02:d1:
         19:c0:0c:a7:1a:64:15:d3:23:65:6b:21:a5:8c:44:a4:ed:be:
         e4:03:f3:12:13:a5:fe:45:37:0a:31:83:43:a1:90:98:e1:a8:
         87:e5:ec:8f:23:c7:d4:d8:b6:97:2b:3b:b5:6f:ab:0c:fe:7a:
         cc:b8:2d:64:a6:54:6c:13:b7:d1:c3:85:4a:da:b5:85:ac:88:
         eb:24:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:06 2026 by rpki-client