Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6af628bf-2d4f-3fbc-8ccc-e5066fc32651.roa
File:                     6af628bf-2d4f-3fbc-8ccc-e5066fc32651.roa (raw, json)
Hash identifier:          GsGsNHgjdj0uazvLncGt/g6bnqnb6cso1nLxy3XA/5E=
Subject key identifier:   58:7E:6B:6C:6D:B8:58:70:3A:BC:41:6F:D5:D1:21:4A:D9:AB:7E:E6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E8B24F7A353DA5FCFCD9CD498
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6af628bf-2d4f-3fbc-8ccc-e5066fc32651.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     214054
IP address blocks:        69.171.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f7:a3:53:da:5f:cf:cd:9c:d4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=2aec8a33-1971-4d9e-81d5-558ee0a58fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:2a:49:c3:64:ad:54:02:51:46:a2:60:07:
                    95:32:6d:2c:ae:33:7e:00:6c:ed:36:5d:d3:9c:5a:
                    57:d1:80:3d:49:da:30:43:66:df:5a:b9:41:f5:43:
                    2e:b9:63:d4:2f:18:e6:6a:f7:f5:01:5f:17:bc:42:
                    67:5d:5a:ec:86:91:14:27:0b:22:0b:44:9d:eb:4e:
                    ac:aa:c8:f8:02:f5:74:9b:a8:63:a7:3a:ac:46:6f:
                    be:1d:79:22:03:a4:0d:1c:01:47:b2:9b:b7:e6:1e:
                    8e:ad:c5:94:6e:21:f6:87:57:c6:f4:3b:b3:fc:3f:
                    28:6a:a3:2c:2f:96:28:53:c5:bf:39:17:67:69:c9:
                    0a:81:6c:ea:90:db:99:65:e2:5b:6b:a8:09:38:4e:
                    db:dd:fc:5d:9a:2b:bb:fc:a5:39:dd:85:f0:33:5c:
                    39:4f:b1:3d:b4:4d:33:90:60:92:b6:f5:b1:3b:d7:
                    3e:6b:f3:01:76:92:93:b7:d7:4c:05:38:7b:8f:cd:
                    27:9c:43:0c:c4:7c:a9:d5:8f:1e:6b:4d:77:65:b8:
                    a8:41:1a:76:f2:75:0a:d1:9f:33:89:90:41:cd:56:
                    2a:b0:5a:00:05:26:0b:a8:66:74:07:5d:52:3d:4c:
                    b3:f8:db:ff:b6:f3:a7:e5:86:74:9d:c5:7b:5e:60:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:6B:6C:6D:B8:58:70:3A:BC:41:6F:D5:D1:21:4A:D9:AB:7E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6af628bf-2d4f-3fbc-8ccc-e5066fc32651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:c2:a5:7b:9e:09:38:c9:21:52:5f:a8:f9:70:0a:a8:d8:
         19:dd:cc:61:9e:1b:2a:a3:ad:f9:78:64:89:99:7f:3a:51:0f:
         ac:e4:a3:01:45:2b:aa:1d:50:e7:dd:69:f2:4c:11:be:db:3b:
         3f:96:17:e8:45:37:18:d9:80:d8:50:c6:e4:1f:e1:ef:f9:42:
         65:d0:af:93:4d:8f:46:09:13:fe:c8:17:d9:f3:0f:86:e5:52:
         f0:a2:de:49:41:73:a6:23:bb:e5:42:89:2c:2d:42:e0:f4:ca:
         40:46:a6:5f:8a:ad:05:7e:c3:83:88:a0:f2:21:bd:76:39:23:
         52:dc:8a:49:d6:ee:5c:e6:23:3f:8e:7d:67:a4:77:16:f0:1e:
         23:7e:e2:e2:44:3d:ee:71:a2:01:d6:15:e0:78:88:c0:60:6e:
         df:5e:37:ac:e5:9e:22:30:d0:05:dc:0c:2c:b7:c4:ec:bd:19:
         b8:be:10:2b:84:a2:b0:43:ed:ed:94:09:88:a3:ce:e8:fa:72:
         c7:ed:eb:48:eb:6e:1b:f3:42:42:76:a9:a0:4d:21:19:bd:52:
         56:5e:d2:c3:c5:73:5d:01:56:f3:11:c7:bb:c3:2f:06:bf:c6:
         51:32:ef:e2:df:ef:9a:92:98:14:17:6b:2d:a5:72:8a:5f:fb:
         b0:07:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:33 2026 by rpki-client