Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa
File:                     6efccda5-9898-3892-bc80-aa26d7e3db9f.roa (raw, json)
Hash identifier:          9BEX+GZg9Eil6WxI2hH8Q2GPsn6+tHexAg7t8684D9c=
Subject key identifier:   D7:EC:83:93:74:4F:3D:E7:23:BB:6A:5A:32:FF:B1:03:70:CE:2A:03
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E8F54F402485E565ADA8E2700
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        167.234.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f4:02:48:5e:56:5a:da:8e:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=2fe6be17-c7c7-43df-b7a2-3662bc0646a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:58:50:7b:45:f7:db:cb:d3:80:61:1e:59:
                    7b:c4:ff:b7:8e:3b:97:6f:f5:a4:a5:d1:74:3a:55:
                    a2:64:00:49:26:98:52:fc:a2:15:fe:21:38:f5:fe:
                    d9:a2:91:28:85:16:50:ef:8b:73:e5:e4:b5:7f:0a:
                    09:dc:25:a5:cf:91:7e:c9:50:ee:42:c8:b9:0a:92:
                    b0:71:da:54:20:b3:fe:ac:28:d3:58:45:eb:c9:a8:
                    65:e0:c5:88:79:7f:e0:ae:ef:de:9f:18:05:a6:55:
                    ff:cc:26:48:a5:3c:f4:35:2b:63:9e:8b:03:75:6d:
                    55:f1:bd:7c:9d:54:c7:c7:4e:23:9b:d3:6e:c3:5d:
                    6e:0d:a7:12:68:62:9e:61:11:64:4a:6f:7b:68:c5:
                    e2:3f:5f:9b:0a:70:e7:91:0a:78:e8:fd:0a:74:98:
                    02:13:11:4f:c1:4d:48:16:b1:1d:ce:39:45:5d:c8:
                    80:bb:c8:6b:fc:99:02:dc:20:0d:a7:cf:57:a4:4f:
                    9d:15:79:84:5b:42:f2:ae:97:25:f7:5d:44:1d:16:
                    af:29:af:e4:95:0c:5a:35:26:af:e6:eb:63:9c:49:
                    c5:b5:85:bf:c2:9b:e7:60:65:ec:07:b0:8e:07:3a:
                    31:f5:7c:2a:59:80:5e:ab:40:cb:e2:06:fc:2a:4f:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EC:83:93:74:4F:3D:E7:23:BB:6A:5A:32:FF:B1:03:70:CE:2A:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6efccda5-9898-3892-bc80-aa26d7e3db9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:84:2c:63:f3:82:f8:34:39:e8:33:79:2d:26:b1:ae:f8:
         46:ed:4b:06:51:8e:bc:fc:bb:21:3a:44:81:03:f6:28:88:10:
         55:e9:37:20:6e:e2:a0:a5:e9:0c:79:97:4d:95:62:2f:4b:4f:
         ad:c5:50:e7:7b:2b:a5:a9:a1:5e:d4:bf:cf:ab:9a:98:b5:07:
         e1:25:53:6d:81:cd:22:80:a7:1c:da:1a:73:4c:42:49:9b:56:
         90:6c:5b:83:6c:f8:b4:44:8f:11:e5:2b:a4:fc:f8:99:67:7e:
         36:0d:e1:d0:a0:f8:92:84:12:c6:32:34:d9:d0:17:24:97:eb:
         c5:15:dd:cf:f4:9f:21:74:0d:6a:7d:74:8f:67:ce:5e:74:eb:
         a2:1a:bf:54:f8:15:10:e2:ad:b6:d0:0d:2f:a9:88:34:b0:5c:
         9c:c2:60:c9:55:da:91:c9:61:db:30:1a:d1:59:99:d5:d1:57:
         d5:3d:b2:67:a9:5e:b9:93:2c:0d:61:f1:9a:ac:9e:6e:70:34:
         20:ee:25:68:8f:7a:20:93:c5:bf:84:ff:b6:1f:d9:e5:b0:a3:
         4c:f3:5c:a3:ea:ed:63:35:ba:1a:f8:92:d7:16:25:1c:03:b4:
         82:36:43:d2:96:33:52:82:9c:24:ab:94:12:b2:81:af:00:10:
         b3:c4:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:02 2026 by rpki-client