Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/f6dafeeb-69d2-3a3f-a3fc-cfd763b7e487.roa
File:                     f6dafeeb-69d2-3a3f-a3fc-cfd763b7e487.roa (raw, json)
Hash identifier:          UqDGjA2kfDMioINv4fzUE3Nu78Beok3plSTohDrQOKc=
Subject key identifier:   11:07:8D:5A:25:7D:4C:CA:1A:1B:CF:44:DD:4F:BB:A2:CA:47:19:6A
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584E54B4EA0A126646C270E5F670
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/f6dafeeb-69d2-3a3f-a3fc-cfd763b7e487.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     14041
IP address blocks:        216.38.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:ea:0a:12:66:46:c2:70:e5:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=8a9f2004-9ff8-41be-a26b-c77e7ad144bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:56:35:4e:3f:f5:70:87:95:c1:c4:76:67:
                    95:5f:bb:da:86:1f:24:ed:ea:06:ac:67:bc:eb:f2:
                    31:ee:19:dd:5d:ed:7c:63:63:88:86:9a:cb:01:f8:
                    46:74:89:f3:90:31:4a:9d:d8:84:74:53:51:fb:9d:
                    33:a7:ab:97:1e:97:c7:b3:2a:3c:eb:a2:72:09:18:
                    62:35:25:e5:58:ff:6d:44:8e:88:4c:2f:ed:1f:92:
                    46:7a:94:a3:bc:7d:fe:33:d9:4f:33:8c:f2:3d:8d:
                    2c:d8:c1:97:e7:f6:e2:d8:05:0c:35:13:94:cd:35:
                    ea:25:08:4d:7d:30:4c:f1:48:38:3e:65:a5:f0:ba:
                    45:d3:9c:9f:81:dc:0b:d3:ee:cb:43:9a:26:93:3f:
                    92:cc:43:cd:87:ab:06:71:b1:0f:f2:17:9b:47:b3:
                    ac:e5:37:8c:d9:f1:0f:1c:4a:6f:0a:72:85:77:4b:
                    9c:e7:35:8f:f1:ec:6f:24:28:78:45:82:ad:3c:cf:
                    88:c7:2a:12:d9:8b:8d:69:19:e2:2a:c3:c8:b4:09:
                    c9:a3:24:97:13:bb:31:0f:fc:77:00:f3:03:33:3b:
                    96:87:4f:20:fd:f6:9c:6d:03:9b:6c:8d:02:98:ef:
                    a6:d5:f9:c5:8f:c9:b4:c0:e3:ce:8f:3c:b8:eb:0b:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:07:8D:5A:25:7D:4C:CA:1A:1B:CF:44:DD:4F:BB:A2:CA:47:19:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/f6dafeeb-69d2-3a3f-a3fc-cfd763b7e487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d8:e3:9b:7a:2a:d4:d3:cc:19:69:84:21:af:4d:1b:c2:5c:
         af:7c:16:24:f4:a8:db:7e:15:b1:9a:5d:4d:d3:5b:3d:dd:5f:
         b1:f1:4d:f0:87:50:68:46:72:93:15:e2:de:a8:4c:54:29:58:
         bf:e2:cf:c0:05:b8:17:b9:f9:de:5e:ed:3c:ac:73:65:35:c8:
         eb:b1:86:0c:4a:05:07:89:0a:c5:69:85:8e:b5:0d:1d:89:64:
         4e:87:4e:ca:69:88:8a:ac:ba:c9:da:a1:d5:2d:69:13:e9:11:
         51:04:5f:b9:05:0f:0c:69:93:38:13:ba:a0:a8:58:06:ff:6b:
         41:d5:2f:06:81:dd:d2:f3:66:ec:39:77:35:4f:bd:ee:04:ea:
         78:d5:34:cb:2b:7d:c3:b9:8e:78:e5:12:95:66:40:fc:8f:dc:
         35:05:23:89:7f:05:73:d7:28:3c:4c:11:73:fa:36:db:e4:84:
         4a:15:da:be:4f:e3:78:3d:1d:33:65:23:b6:d1:e2:17:0b:3c:
         fd:6d:23:ec:ac:8b:be:34:40:a4:d7:c8:9b:35:08:5f:4b:b5:
         35:6b:c9:52:23:e6:b7:01:a9:f5:33:42:10:5c:3d:ff:c2:ab:
         5f:84:a4:d3:eb:ca:ae:b3:ab:a2:79:ed:fc:0e:41:b2:2f:98:
         50:ce:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:27 2026 by rpki-client