Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f5e4a827-d4ae-35a8-b330-7a981d9ea7a5.roa
File:                     f5e4a827-d4ae-35a8-b330-7a981d9ea7a5.roa (raw, json)
Hash identifier:          4la/08auuE61+P0PZGIooJl7gyTz0xFhrJat/IeEAiM=
Subject key identifier:   29:AA:AE:CE:8A:76:59:1E:0A:D9:3E:2C:30:66:B6:93:BF:0C:FB:B5
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D3E000D4EF6BB2C07D619A0C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f5e4a827-d4ae-35a8-b330-7a981d9ea7a5.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     376
IP address blocks:        206.167.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:0d:4e:f6:bb:2c:07:d6:19:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=93cbcf01-86c3-4f83-8ef1-79b09b76257a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:9b:7b:39:58:92:35:dd:0f:68:bb:7d:ff:
                    2f:d4:49:2f:0d:68:13:08:ee:41:d4:48:24:67:75:
                    72:89:bd:ab:cf:c8:67:17:e1:ec:31:7b:45:ed:2f:
                    02:48:0e:dd:87:b9:b6:d1:d5:f1:e7:89:d8:1c:5c:
                    e9:b7:fd:51:d6:ae:71:b1:db:d6:61:41:da:1e:1f:
                    18:76:df:db:d3:7e:05:74:56:b7:53:52:fc:1f:e8:
                    c4:1f:e0:d2:07:4a:08:c8:2b:d4:6c:af:49:11:9e:
                    96:bb:3d:28:76:74:f7:cc:5c:c4:27:24:a4:13:dd:
                    ec:c3:d1:54:31:88:77:ca:09:41:4c:48:4a:8b:ca:
                    67:d0:28:d2:cd:9c:f8:b3:b2:e1:d0:8c:70:65:79:
                    12:65:7f:13:f4:23:9b:cb:f8:30:bf:4f:55:08:82:
                    f6:1f:c7:0b:5b:ae:26:c1:c4:8e:4c:ff:59:15:b5:
                    af:0e:b4:00:ab:5c:e6:d8:10:43:d8:38:fc:93:1c:
                    32:33:2b:75:0c:e2:1b:91:22:a7:70:05:bb:99:38:
                    66:32:0e:bb:89:6a:ac:37:64:86:41:09:a0:51:46:
                    90:85:a0:45:00:17:30:04:87:26:bc:63:e7:e5:d4:
                    fd:9a:65:3f:93:06:23:0c:07:9a:d2:c5:40:c5:02:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AA:AE:CE:8A:76:59:1E:0A:D9:3E:2C:30:66:B6:93:BF:0C:FB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f5e4a827-d4ae-35a8-b330-7a981d9ea7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:63:8f:f7:8e:f9:df:73:4b:d1:aa:5c:ad:71:7a:21:36:
         25:84:43:87:4c:27:df:5f:3b:7e:24:28:99:62:1c:06:24:78:
         2b:10:66:9d:65:b6:de:b6:a5:7b:bf:0a:37:15:e5:95:e6:23:
         27:71:1b:d9:3f:34:52:8f:d6:78:b4:27:49:13:06:b4:12:1e:
         3a:22:87:7a:4f:c6:55:19:14:30:f2:9a:6f:86:38:43:db:6d:
         66:b5:01:b6:4d:f0:32:c0:dd:ff:75:ec:51:c7:bd:e1:b9:05:
         e0:a1:8b:90:14:33:c4:5b:44:a4:ca:ef:bd:ee:d4:4a:ec:55:
         48:10:3f:77:a6:ea:37:76:3b:ac:13:b1:aa:80:45:26:63:47:
         10:58:89:9e:8c:fd:04:e3:d6:a5:be:4f:6d:1d:e0:da:76:74:
         a3:97:3a:8a:21:57:3d:b0:6d:7b:7f:38:dc:5f:f0:f4:d4:07:
         3c:b7:e5:48:b0:1b:06:df:fb:c4:bf:f7:5e:0c:20:ad:65:94:
         b2:97:55:a2:70:fb:ee:7a:3f:59:3a:14:1b:24:15:92:d6:5f:
         a5:5f:b3:bd:8b:45:f5:8b:60:3c:38:c9:fd:19:2b:cf:b0:01:
         3d:fb:5e:e7:50:15:b0:09:16:57:bf:a5:80:66:47:68:80:63:
         35:5f:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:52 2026 by rpki-client