Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/06c142a2-a6df-344a-ba65-001c37951c83.roa
File:                     06c142a2-a6df-344a-ba65-001c37951c83.roa (raw, json)
Hash identifier:          FPqRItT4CWM/fpB0+0fRP2BkKluUBknU/z2q2BsvUX0=
Subject key identifier:   3A:E9:D2:0C:AA:84:20:02:CD:5C:0A:B8:AC:97:2F:13:3A:40:4B:DA
Certificate issuer:       /CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Certificate serial:       010D0C9F4328584E6F3A3D23D12877F17173EA00
Authority key identifier: ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/06c142a2-a6df-344a-ba65-001c37951c83.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        204.16.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:3d:23:d1:28:77:f1:71:73:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=921648ca-bddd-416a-9a68-bc1e89616ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:12:21:2b:fe:97:1a:99:88:c9:f1:3c:2d:
                    3f:bd:a5:d6:1c:95:85:1e:c7:f8:1a:be:7b:fe:2b:
                    a9:3c:80:2c:82:01:b5:2e:ac:0d:81:84:a4:5b:2a:
                    f1:cf:ca:52:f2:0e:c6:32:e4:e0:b5:3c:d3:b4:b5:
                    a7:39:07:e9:17:6c:f0:7e:cc:8c:11:68:7a:28:ca:
                    57:65:a0:c7:81:9c:2c:d3:0b:4c:08:6e:5f:a2:5c:
                    e5:af:3c:5a:00:a9:a1:d7:dd:31:89:e3:d9:32:e2:
                    56:bb:e3:40:d2:88:07:4a:2e:59:6e:21:e9:59:d0:
                    38:d5:75:52:62:61:a5:48:c4:ca:15:10:18:e3:ee:
                    2d:96:91:a4:c0:d9:23:60:8e:7b:1d:31:7f:e6:c6:
                    6e:57:60:48:b9:87:1f:04:25:b8:22:4d:fd:6b:ef:
                    1b:dc:1c:42:2e:51:f4:23:5a:11:29:82:d3:f2:9b:
                    91:2e:84:55:73:22:f3:4e:b6:3a:8a:df:c6:0d:7e:
                    e0:47:64:ea:cc:b1:6b:fe:09:86:15:62:46:cf:87:
                    42:17:88:1c:b9:64:59:03:59:c9:59:33:15:6a:88:
                    e1:db:ff:66:6a:f2:b6:b8:c8:bb:8b:8d:d3:b1:cf:
                    8c:66:ef:ea:f5:31:fe:46:4c:aa:72:a6:27:10:70:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E9:D2:0C:AA:84:20:02:CD:5C:0A:B8:AC:97:2F:13:3A:40:4B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/06c142a2-a6df-344a-ba65-001c37951c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:28:9c:64:81:ec:cc:03:90:c6:ae:42:c3:db:7e:db:ee:b6:
         5e:38:63:99:07:f8:67:0a:f6:de:e6:be:e5:19:82:d5:99:eb:
         59:04:1c:db:df:51:4b:3f:fb:62:9f:9a:f3:13:79:1c:40:ee:
         71:ef:e8:c8:f0:2d:5a:1d:a7:50:3a:6c:cb:f2:19:c0:34:d8:
         d1:57:f0:ef:cb:97:6d:95:88:f5:8e:3c:3c:2a:1a:2d:88:04:
         44:80:11:47:6e:dc:26:25:e9:27:40:53:5d:e6:f4:22:10:28:
         fa:5b:ba:b8:01:45:cf:51:eb:42:05:4f:f2:4e:99:2e:3b:59:
         c6:81:79:8e:6f:0e:fa:02:3e:2f:88:05:32:e6:c2:ce:2f:3e:
         1e:c3:73:b8:43:31:93:e8:b6:04:65:2c:1f:ef:da:2c:74:b5:
         40:34:83:a0:3e:0f:7f:78:55:51:c2:b3:9d:23:8b:b2:e0:55:
         9e:31:ba:5c:ed:b0:bc:a8:f0:4c:d2:02:f5:2b:46:23:fb:9f:
         ae:3d:33:0f:aa:80:6d:db:13:75:de:05:80:5b:b7:4f:04:61:
         cd:01:44:45:da:ad:08:b2:dc:63:5c:5b:dd:11:59:48:e6:f2:
         30:33:ab:23:f1:4f:19:e8:a1:92:ea:a0:c5:de:a0:1c:12:1f:
         26:5a:62:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOj0j0Sh38XFz6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVhMjQxZjItM2UyMC00MjAyLTk4ZWYtNGQ5MmI0NTU1
OWVhMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
OTIxNjQ4Y2EtYmRkZC00MTZhLTlhNjgtYmMxZTg5NjE2ZmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheoSISv+lxqZiMnxPC0/vaXWHJWFHsf4Gr57
/iupPIAsggG1LqwNgYSkWyrxz8pS8g7GMuTgtTzTtLWnOQfpF2zwfsyMEWh6KMpX
ZaDHgZws0wtMCG5folzlrzxaAKmh190xiePZMuJWu+NA0ogHSi5ZbiHpWdA41XVS
YmGlSMTKFRAY4+4tlpGkwNkjYI57HTF/5sZuV2BIuYcfBCW4Ik39a+8b3BxCLlH0
I1oRKYLT8puRLoRVcyLzTrY6it/GDX7gR2TqzLFr/gmGFWJGz4dCF4gcuWRZA1nJ
WTMVaojh2/9mavK2uMi7i43Tsc+MZu/q9TH+RkyqcqYnEHCgMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDrp0gyqhCACzVwKuKyXLxM6QEvaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84ZWEy
NDFmMi0zZTIwLTQyMDItOThlZi00ZDkyYjQ1NTU5ZWEvMDZjMTQyYTItYTZkZi0z
NDRhLWJhNjUtMDAxYzM3OTUxYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGVhMjQxZjItM2UyMC00MjAyLTk4
ZWYtNGQ5MmI0NTU1OWVhLzhlYTI0MWYyLTNlMjAtNDIwMi05OGVmLTRkOTJiNDU1
NTllYS5jcmwwHwYDVR0jBBgwFoAU7WsU+VNd8rU1SsyMFpUl5jy2BWowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84ZWEyNDFmMi0zZTIwLTQyMDItOThlZi00ZDky
YjQ1NTU5ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzBDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYonGSB7MwDkMauQsPbftvutl44Y5kH+GcK9t7mvuUZgtWZ61kEHNvf
UUs/+2KfmvMTeRxA7nHv6MjwLVodp1A6bMvyGcA02NFX8O/Ll22ViPWOPDwqGi2I
BESAEUdu3CYl6SdAU13m9CIQKPpburgBRc9R60IFT/JOmS47WcaBeY5vDvoCPi+I
BTLmws4vPh7Dc7hDMZPotgRlLB/v2ix0tUA0g6A+D394VVHCs50ji7LgVZ4xulzt
sLyo8EzSAvUrRiP7n649Mw+qgG3bE3XeBYBbt08EYc0BREXarQiy3GNcW90RWUjm
8jAzqyPxTxnooZLqoMXeoBwSHyZaYlI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:18 2026 by rpki-client