Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
File:                     e0c36319-b634-372f-9da0-aa28685ea81d.roa (raw, json)
Hash identifier:          rvhfHj4BC2+KiCQSB6fq6bmwi9SDI9L/39DU0uLlpMM=
Subject key identifier:   F6:0A:BA:D5:3C:DE:93:7D:F8:22:E7:A5:52:01:2C:88:51:4C:24:40
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DD0905DC3773F2582D8C54CC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16462
IP address blocks:        206.12.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5d:c3:77:3f:25:82:d8:c5:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=06eac844-49b5-4dc9-a9d4-1b14e9571158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:da:62:54:4c:93:e3:4c:be:08:dd:1c:c4:
                    10:db:ec:4a:17:5e:ab:52:a5:13:59:65:24:de:7a:
                    ed:ac:1d:96:9e:1f:8a:08:63:ce:5a:df:a3:d9:d3:
                    1d:36:34:f1:cf:c0:a2:9f:83:a1:fd:e8:e9:bc:6c:
                    27:40:12:71:10:18:2f:82:37:fc:aa:ea:c0:63:c4:
                    a4:13:ab:2e:6b:29:78:d0:1d:1a:29:59:e4:c5:0c:
                    aa:dc:c6:12:e9:e4:24:46:f7:f6:d3:4e:62:92:97:
                    5a:8a:50:3d:1b:de:9c:23:90:b8:4f:18:70:52:c4:
                    7e:d7:6e:f3:c1:3a:20:55:fe:d0:bd:a4:92:65:9f:
                    f6:29:e3:7c:98:f4:55:88:5d:0f:83:bc:8a:60:0d:
                    3a:1c:67:b7:ba:f0:ca:1d:e1:d7:b4:45:de:88:07:
                    cf:16:ca:6d:3a:4d:83:17:06:1f:cf:b3:ee:e9:d3:
                    02:62:91:c0:04:11:3f:6f:8c:a1:43:fa:27:59:51:
                    64:98:0a:94:75:f7:28:26:eb:dd:95:92:21:86:9c:
                    09:04:e9:e7:de:a9:8f:2f:66:35:89:2b:76:d3:4d:
                    4a:65:28:40:b8:a1:71:45:9f:a1:50:13:eb:25:4d:
                    99:c1:f7:1e:57:ec:d6:f1:8b:ec:8d:e2:37:3f:44:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0A:BA:D5:3C:DE:93:7D:F8:22:E7:A5:52:01:2C:88:51:4C:24:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:cc:3f:eb:1d:d7:e1:49:2a:ed:7c:de:c6:1f:9a:21:e0:83:
         da:96:c8:3a:ce:7a:8e:da:b7:84:e0:4b:17:68:84:92:2c:f9:
         83:18:c8:f8:ed:34:e9:61:48:8a:22:4b:99:a3:48:c1:c2:1c:
         b2:9e:8f:ad:cf:fb:d3:43:b3:94:37:ac:4e:67:a1:e7:bb:dc:
         4f:8e:13:f7:a1:c7:4d:ae:19:7d:fd:6c:b7:ba:99:ac:29:0d:
         d9:ee:4d:46:c7:ef:62:68:3c:77:05:5a:10:62:49:21:c5:2a:
         9c:4f:f9:a9:0e:0f:8e:f9:c8:47:26:f9:3f:6b:b8:76:cb:e9:
         58:d0:3f:4e:70:78:b3:fc:6a:2f:d0:3b:07:0f:e3:39:22:5c:
         3f:fa:7f:9e:79:cc:76:ae:b3:cc:29:fb:ab:56:6e:ed:7a:d1:
         6c:56:ef:60:64:b9:8d:26:a8:76:51:2e:d7:c8:a8:0a:cf:32:
         27:33:a8:87:72:f1:3b:e6:54:f5:5b:61:b7:ee:96:da:45:3f:
         d9:d7:e2:a9:f8:3f:51:70:eb:31:75:c1:cd:3f:c2:76:a2:55:
         d9:9d:a4:04:0a:26:1b:9c:3d:88:2d:59:09:b2:51:1d:fd:7a:
         19:42:70:8b:ec:2c:b3:53:4f:b2:4c:5c:fb:9b:27:dc:4b:44:
         7e:a8:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:02 2026 by rpki-client