Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa
File:                     6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa (raw, json)
Hash identifier:          dTyn0JqigAImk/PEPYGmqzDwqnHbjBKP7FTVpBzojFY=
Subject key identifier:   C5:B1:1F:9F:24:CF:55:35:E9:D2:5A:E7:C7:6A:BB:67:0C:EB:99:9E
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584DCF2B0BA3032B8F1D17FF6040
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     398324
IP address blocks:        206.168.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:0b:a3:03:2b:8f:1d:17:ff:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=7320b41c-5dd9-4c42-81bd-f7f93ddd7993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:2d:b5:ce:a0:0c:6e:e2:01:3e:c5:70:ea:
                    aa:0b:43:8d:39:5e:81:07:81:b8:5c:05:e3:68:d9:
                    2c:99:08:6e:df:d5:ef:cd:39:f8:4c:1c:06:28:73:
                    7d:25:7e:85:4f:29:e6:c0:26:1d:68:e2:32:f7:9d:
                    13:00:21:e0:fa:c9:58:79:28:12:9f:30:2a:4c:77:
                    cc:94:e8:c6:99:70:c3:a2:20:bd:c4:fa:5c:fc:01:
                    d6:af:a5:66:67:0a:48:98:21:be:cd:8a:a7:22:dc:
                    04:ed:18:84:40:5c:76:18:9d:d1:cf:a2:a3:59:38:
                    2b:bb:a9:ab:54:4c:0e:45:55:95:05:e7:3d:c9:ff:
                    5c:f4:6f:1a:b0:fe:f1:a2:2d:fe:6b:1b:c7:58:f0:
                    b9:60:0a:9e:94:19:89:40:f2:5e:17:e4:26:4d:ec:
                    78:bd:0e:d8:49:61:66:cc:7a:37:03:33:a7:6e:29:
                    6f:66:18:b4:0f:23:cf:41:02:84:4c:91:b8:14:77:
                    34:0a:09:58:04:86:a6:d9:de:04:17:10:41:e5:3f:
                    5b:0e:56:e6:9e:3c:a4:83:88:61:3e:af:4e:a7:4a:
                    5e:a4:bf:3a:15:87:61:fe:60:4b:99:8b:38:1a:03:
                    19:a2:88:29:96:2c:12:42:c9:82:7d:83:78:bd:a9:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:1F:9F:24:CF:55:35:E9:D2:5A:E7:C7:6A:BB:67:0C:EB:99:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:12:1a:98:12:18:89:71:a4:97:d8:bc:65:d4:fe:71:8e:5c:
         0b:fc:6e:ba:6a:08:5b:81:5e:3f:b9:3f:ec:76:cd:5c:a6:27:
         40:c5:c6:b3:74:7a:2b:f8:14:56:1c:32:d4:c7:f8:14:2f:4f:
         d3:6a:3c:b2:a6:95:6b:7b:57:fb:1f:0a:61:12:fb:26:3f:65:
         5f:00:f7:0a:ce:9e:a3:d8:1d:98:75:81:04:f1:05:ed:c9:b5:
         da:af:d1:b6:22:51:66:ab:22:1c:b7:0e:b6:db:40:6f:3c:5f:
         d2:3e:71:d0:50:e4:8e:be:ad:de:a7:32:5d:05:ea:52:56:43:
         7f:2e:c9:92:49:7e:2b:e4:fa:25:c7:0b:f2:99:2f:07:f6:ba:
         67:7d:8b:4a:ca:4b:73:7f:7c:e6:2f:8a:c0:68:ce:9a:10:43:
         dd:7a:b1:ed:dd:5b:e2:8a:0f:fa:2e:42:bc:01:95:76:ac:42:
         e7:4e:1b:1d:51:bd:64:48:13:ba:8c:78:09:63:be:fe:d3:6c:
         c3:bf:37:50:72:15:27:1c:3b:80:5a:10:e0:bb:23:e2:87:25:
         7b:27:3a:89:37:49:5f:21:1f:77:03:16:d0:f2:f0:c0:30:45:
         31:b6:2f:4c:df:c2:d7:97:51:7c:36:f9:a9:f4:a7:14:f6:9c:
         2d:09:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:06 2026 by rpki-client