Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa
File:                     6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa (raw, json)
Hash identifier:          47eT/ppBL0jDZuTvFffe1kzRHxU5yjWrr+b9vBnI4/4=
Subject key identifier:   9B:AE:2C:0B:30:20:72:BA:CC:CF:42:BF:CA:5F:2D:51:64:0C:DD:E6
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584F49756637C31B17DEE8B21600
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398324
IP address blocks:        206.168.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:66:37:c3:1b:17:de:e8:b2:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=203d12bf-ac90-4d90-8a77-ef1162c37ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:e4:ff:b4:d4:09:eb:f8:b7:5b:89:e1:ac:
                    ec:5c:2b:1f:ee:e6:b8:9e:02:5d:d5:6a:07:79:a3:
                    92:04:ec:c4:fc:ee:98:2a:6d:bc:ea:5e:c0:4f:04:
                    ac:40:ac:c4:f5:e6:32:c7:77:2b:44:84:9e:8b:3c:
                    93:c8:d5:7a:17:a6:62:8f:f8:5d:b1:e3:eb:9e:e3:
                    e4:83:48:f1:a1:1f:f1:78:99:4d:5d:b8:89:05:96:
                    be:f4:54:31:ed:37:28:d8:82:69:c4:ad:16:9f:0e:
                    cc:93:5e:ae:aa:b4:62:38:8c:b3:06:0f:55:d6:e9:
                    d7:0f:42:59:cf:c4:0f:be:ca:b0:0d:5a:7b:ae:4f:
                    7d:b7:50:2e:f0:ec:b2:c5:f1:40:a6:26:8f:55:4b:
                    62:f2:56:9c:ba:50:e6:03:d3:19:e7:f7:3b:92:d2:
                    55:e0:78:16:86:9c:7c:c0:32:57:93:ac:cd:66:2b:
                    7d:83:c4:4e:2b:81:c4:07:91:fe:65:c5:cd:2b:ea:
                    7c:28:00:db:1e:a5:74:95:21:ad:0c:46:08:e5:7d:
                    b5:fd:00:f9:c2:e2:3b:1a:e8:5b:a2:e2:8f:84:9b:
                    81:55:fa:54:2f:94:52:25:de:c2:61:56:90:84:cf:
                    b4:91:3c:9b:1d:ee:bc:72:dc:f7:a5:bb:bf:4d:a4:
                    71:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:2C:0B:30:20:72:BA:CC:CF:42:BF:CA:5F:2D:51:64:0C:DD:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/6cfd65f5-886f-3b65-9776-b1100b28c4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:fc:cc:26:a7:92:14:26:98:b9:8d:8a:1c:3e:c5:48:c7:3b:
         29:05:14:7a:4e:ff:5d:2d:c1:23:91:59:cb:5b:dd:70:e4:33:
         c0:40:d9:12:aa:cc:38:f1:f1:95:c8:dc:12:db:8d:b1:ad:3d:
         ae:be:46:6c:6b:90:ce:88:23:a0:91:99:64:72:8c:86:f0:3c:
         a9:29:a7:2b:d4:09:fa:bd:48:5f:2e:ab:e9:1f:40:e0:ad:9a:
         a8:89:62:a2:a4:51:36:c5:5a:5e:6f:43:d0:7d:08:7d:ab:62:
         6a:c7:35:c0:b9:fa:a3:b6:23:d4:d8:c8:a1:b0:81:44:d1:e2:
         65:68:ee:15:e6:6d:b0:b9:df:6c:79:d8:99:ad:17:d5:14:1c:
         b7:fc:61:22:25:42:b7:36:ab:18:6c:3a:31:c1:5c:31:9a:ba:
         19:40:c1:55:db:3a:f9:9d:02:5c:87:fe:31:ec:f6:d2:62:c7:
         ec:b7:14:56:87:62:19:28:cd:71:34:f2:d0:62:6e:10:db:6f:
         5a:eb:1d:51:76:cc:3b:d3:0e:35:51:cc:22:64:83:82:50:2e:
         4a:e8:16:c8:64:f1:aa:bd:23:16:36:10:36:08:f4:60:d7:91:
         00:27:e3:ee:a8:9d:2d:b4:2e:35:9b:b0:0f:c2:1a:eb:46:7c:
         57:8a:18:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:34:48 2026 by rpki-client