Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa
File:                     422a0f33-2965-34cf-afb3-c607d0e91cbb.roa (raw, json)
Hash identifier:          zWjGksd4YhusUGtFwvmsLoNFaHwDo42swW2gOR+zy2E=
Subject key identifier:   52:B0:39:48:79:B9:1F:F9:6F:9D:2B:3A:DF:F4:D5:1D:F1:02:22:89
Certificate issuer:       /CN=15986e61-33e4-484c-ae89-1cac7765c365
Certificate serial:       010D0C9F4328584E6F3A212E705F0BE914735E80
Authority key identifier: B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     397906
IP address blocks:        158.247.61.0/24 maxlen: 24
                          2606:b840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:21:2e:70:5f:0b:e9:14:73:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15986e61-33e4-484c-ae89-1cac7765c365
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=f7a0ecd3-6a25-49b9-aa51-f2d05309ca3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:50:83:ad:e1:09:61:27:b6:9b:2c:37:fd:62:
                    9d:4c:91:ec:72:ba:65:b3:25:d4:90:d1:54:e0:ce:
                    8e:6a:15:6a:fc:cb:84:92:22:c4:06:c9:a5:13:27:
                    b1:ac:e9:dc:b7:08:ed:22:49:76:d7:21:53:1b:05:
                    80:98:2b:8e:87:14:f8:b9:73:29:58:7f:ff:97:ff:
                    c9:fa:df:7d:11:ea:93:ea:93:e3:16:58:13:b1:dd:
                    09:ce:f3:b5:d1:4b:53:2d:55:5f:e9:46:5e:01:44:
                    fa:a7:44:19:fc:eb:4e:bb:39:38:d6:63:88:33:72:
                    4b:09:b7:ae:ee:53:db:33:19:98:26:46:56:2d:43:
                    b7:12:c9:c9:f9:87:27:8a:bc:74:f3:e1:c8:25:0a:
                    2f:fb:d4:85:e1:15:e0:8e:e7:f9:c2:1c:52:9f:93:
                    7a:05:d1:9e:fd:73:e8:c2:1c:9e:9b:bd:74:86:76:
                    e2:98:aa:7d:35:3a:43:cd:e7:01:85:e6:4f:be:14:
                    25:5a:a1:59:a9:d6:9a:fc:64:4c:a7:b6:26:1e:10:
                    37:f6:0f:b3:e6:ea:99:90:34:38:93:52:16:fb:07:
                    06:bb:75:5e:de:29:f1:41:f3:ba:6f:dd:a8:dd:08:
                    59:dd:15:5f:8d:ba:53:5b:6c:f0:8d:d5:3d:20:55:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:39:48:79:B9:1F:F9:6F:9D:2B:3A:DF:F4:D5:1D:F1:02:22:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/422a0f33-2965-34cf-afb3-c607d0e91cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365/15986e61-33e4-484c-ae89-1cac7765c365.crl

            X509v3 Authority Key Identifier:
                keyid:B4:C1:3E:8B:3C:1F:EF:78:E7:4F:BD:55:77:FA:46:FB:13:87:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15986e61-33e4-484c-ae89-1cac7765c365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.61.0/24
                IPv6:
                  2606:b840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:54:68:47:e5:69:64:24:bc:58:df:ef:45:11:51:11:b4:31:
         7d:5b:ea:27:29:f8:b7:02:c1:04:d7:a0:27:15:67:c0:3e:ef:
         2a:3a:b4:5c:77:33:dc:bf:1c:8b:dd:3b:25:ce:85:94:06:27:
         8f:6c:56:67:ce:7b:06:6c:1b:75:c9:c0:d7:4a:1c:e4:82:a8:
         20:70:19:12:74:32:d2:06:a8:02:b1:20:b6:9a:54:ca:3c:f8:
         12:ea:e8:01:b2:d5:0f:81:56:62:33:8f:2a:ad:1d:08:dc:9b:
         11:d8:bc:82:59:bc:3c:36:3d:f7:1d:97:83:48:41:85:bf:21:
         f1:26:9a:90:7d:00:f9:7c:27:3f:e0:9c:88:4d:24:96:b5:7f:
         1c:15:52:3f:6e:f0:61:62:cb:6f:25:e4:79:90:a1:10:f1:5b:
         6a:c2:56:b6:35:ea:26:d8:8e:97:3b:6e:13:73:7e:e3:af:17:
         7a:ba:1b:9b:78:cd:4b:1c:92:08:37:e7:4d:ce:70:ac:db:1d:
         78:bd:0d:53:e6:87:d0:c9:ff:be:3a:a4:fe:25:a6:9e:d2:49:
         11:27:4d:89:b1:97:d7:2b:dd:47:66:f9:6b:8e:14:6a:5e:d3:
         f9:34:91:98:26:6e:22:dc:9c:9e:b1:83:99:b3:d3:f5:68:98:
         73:82:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:43 2026 by rpki-client