Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
File:                     07010c4c-e7fc-34be-b307-456a7d77aa20.roa (raw, json)
Hash identifier:          wsy09iHw/3C4aGul514Hq5a4cPAVtzjLDnUtIA2UDQ4=
Subject key identifier:   A8:9B:D7:FE:C7:0E:35:0B:F0:C2:8E:3E:6D:F2:81:56:E4:54:51:01
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584D2BDA00770C08F6D6F2E6F700
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     33208
IP address blocks:        206.109.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:00:77:0c:08:f6:d6:f2:e6:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=01000cfd-269f-4074-b583-0c64e48e686b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:3e:d0:d8:95:1f:bc:bf:9b:86:66:c5:bb:
                    d2:1c:a4:95:00:b7:aa:f3:a6:a6:40:ec:a2:e3:79:
                    07:58:9f:d2:7a:e0:00:73:2f:73:be:05:bd:8f:df:
                    e4:b3:67:e0:8a:6b:11:a4:01:c2:c4:2c:7f:9b:e0:
                    63:15:b9:01:dc:dc:68:9a:56:b8:72:9e:d1:fe:e8:
                    80:14:ec:21:fc:91:f9:0a:56:46:5d:fe:ed:81:f6:
                    19:a9:b6:69:c6:ed:d0:76:f7:3d:c1:c3:7a:c0:75:
                    37:bd:89:5f:c5:8b:92:f7:0b:10:c0:99:5a:99:e2:
                    55:0e:90:2b:78:d9:d6:9a:a6:f2:44:e0:b6:47:7d:
                    f5:fa:16:fe:37:d8:75:23:d9:b1:96:74:9c:40:f0:
                    93:ea:c3:23:4d:7e:3d:01:68:52:de:d4:71:55:d0:
                    81:15:02:3a:0a:6d:e0:9d:b1:e0:1e:77:85:71:9d:
                    12:c6:07:9a:74:b9:b7:8d:21:9e:34:49:65:20:cd:
                    78:82:95:cf:83:4c:71:8c:19:2a:bc:1a:59:f3:21:
                    05:9c:89:32:79:c4:7c:34:26:2a:79:9c:63:05:d2:
                    26:b3:7c:38:c5:0d:c7:89:31:86:b8:18:a8:ca:32:
                    1f:38:ea:2d:70:51:a6:30:5f:26:05:48:15:68:00:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9B:D7:FE:C7:0E:35:0B:F0:C2:8E:3E:6D:F2:81:56:E4:54:51:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/07010c4c-e7fc-34be-b307-456a7d77aa20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:61:70:b5:b8:65:4f:c5:38:44:c2:e9:c5:01:ad:0a:a3:
         d4:f7:63:1b:24:71:4c:a9:a6:f5:c9:70:04:68:2c:b5:08:c2:
         83:ab:96:39:f2:dd:ab:10:8e:61:09:c4:bc:7f:7c:91:8a:d6:
         4e:ae:6e:37:82:d4:9b:94:8d:c9:f0:62:f8:a3:45:39:fe:c4:
         aa:f3:93:65:3a:b5:59:85:3f:f5:15:1d:29:75:e1:98:03:9d:
         2a:b6:7c:91:ec:c1:ad:91:77:16:d8:1e:b3:36:40:05:f9:92:
         fb:02:0c:b0:c8:2a:a4:75:2c:3c:8f:01:1d:34:00:96:8c:6c:
         b3:4b:ea:e1:ba:42:f7:76:bd:cc:54:82:6a:31:57:4a:91:f6:
         4a:1b:35:e4:b4:d2:a1:bc:12:f4:33:c9:de:b4:88:0e:0b:62:
         62:7f:7d:ca:40:a1:c6:d3:db:67:a3:e4:f7:5c:70:53:81:0b:
         87:0a:65:f4:84:93:4c:a0:03:29:0d:7a:fa:8b:48:7e:39:c3:
         d7:52:0a:ee:34:0a:c1:c5:1b:de:04:34:1d:12:24:ab:57:6f:
         ef:37:e6:5b:87:13:28:c7:a8:5e:0a:d1:08:e7:75:5f:ea:1d:
         ee:a0:ea:11:b6:03:e6:2b:ab:48:86:85:24:90:0f:b7:81:6e:
         16:d1:63:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:46 2026 by rpki-client