Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/20585330-2cb3-3489-ad8b-d0eaff044a68.roa
File:                     20585330-2cb3-3489-ad8b-d0eaff044a68.roa (raw, json)
Hash identifier:          Tm+sgatVvJgGpSiepiuKMqpdXpp5zYX7rxZW52OKh7g=
Subject key identifier:   33:E0:A8:39:FC:D0:CE:1F:62:84:6B:3E:67:C7:07:35:08:68:F0:8F
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D19B4C76243E3BEA8A4065200
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/20585330-2cb3-3489-ad8b-d0eaff044a68.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     376
IP address blocks:        206.167.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:c7:62:43:e3:be:a8:a4:06:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=68848d62-2bb6-400d-94aa-cc0e23ea499c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:95:4b:00:b3:93:88:cd:64:36:0d:b5:17:
                    ad:fe:7d:8f:6b:6d:17:eb:30:25:28:52:c4:eb:30:
                    cb:19:2b:6d:bf:9c:1c:a9:4c:5b:bb:47:ea:44:c5:
                    7c:5c:72:dc:04:56:4f:b2:b1:4b:72:4b:d1:bb:6c:
                    15:be:8f:ec:5b:bc:0b:37:7a:11:23:8e:db:bc:28:
                    29:a8:d6:2c:05:45:20:ed:34:bf:07:ba:2c:64:58:
                    43:aa:2e:b0:0c:07:40:2e:db:dc:7d:f6:42:92:96:
                    9f:43:9c:cb:11:13:c6:fb:d3:67:3d:01:ae:4e:47:
                    7d:83:9c:0a:12:18:2c:22:65:4c:b3:c4:71:4d:59:
                    fc:38:8b:d7:c6:b9:8c:ec:20:fa:1c:2d:8f:64:f5:
                    f6:03:44:66:dc:42:12:d9:d4:49:bb:d5:06:ca:a7:
                    5a:e7:70:ba:3d:de:2b:11:ff:cf:6f:7d:ac:3d:ad:
                    73:a3:47:10:cb:4a:a6:02:2c:a6:7b:7b:44:94:9d:
                    be:d4:d9:99:a1:65:e1:e1:d9:2d:8d:f5:66:32:19:
                    ad:cb:c6:68:53:64:1f:4e:b7:8d:2d:b5:11:9c:b4:
                    1d:d9:b8:f6:5e:fa:83:f8:cf:49:f1:42:a5:df:b4:
                    2e:10:17:4c:82:a6:43:c3:73:7a:ef:19:31:05:7a:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:A8:39:FC:D0:CE:1F:62:84:6B:3E:67:C7:07:35:08:68:F0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/20585330-2cb3-3489-ad8b-d0eaff044a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:ab:21:43:7e:57:35:cb:d2:35:1c:59:5d:eb:e8:58:45:
         97:1f:92:95:08:bc:06:80:d6:e9:08:9b:e0:74:98:3f:39:d8:
         7e:7f:7d:f7:e2:98:ac:b5:d8:05:89:e4:4b:a2:7d:fd:33:9f:
         f6:30:b6:93:85:56:5d:32:f2:fb:70:93:c9:9f:02:d3:ff:a0:
         86:d7:fe:64:c0:cf:be:39:46:e6:11:fa:ac:38:b9:a1:bc:6b:
         e5:8d:4b:70:ff:82:b6:d8:f5:e7:0d:ed:84:95:5f:5e:e0:a0:
         90:c8:b8:7e:e8:26:12:61:32:8d:fb:49:5f:4b:34:8a:68:68:
         ec:a6:19:c1:22:07:89:68:9f:d8:e3:4c:4e:33:0f:a6:ed:e9:
         34:00:ae:43:55:b3:f7:d8:c9:80:99:bc:a3:71:f1:88:89:ac:
         15:3b:b9:ee:0f:c0:40:67:93:66:6b:e9:99:62:e2:f6:c9:1e:
         ac:96:ce:c8:1a:f0:8d:6e:ed:51:78:ba:7b:51:2d:f4:92:79:
         ce:2a:8a:88:4d:d0:69:af:01:d9:52:30:75:c7:4a:ef:97:69:
         a3:38:03:3f:c8:8b:dd:55:4c:3c:1b:ff:bc:49:18:3a:44:07:
         3e:ab:20:22:32:d7:34:af:55:21:13:43:48:70:3c:fd:2f:03:
         e8:63:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:48 2026 by rpki-client