Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa
File:                     65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa (raw, json)
Hash identifier:          epuIqpQ1vGM24zwzg0gPuW7S8y5XS1a4+wPrZ7zeFes=
Subject key identifier:   6B:59:BF:FE:35:C4:28:2E:E9:68:20:08:4A:B5:8C:C5:DD:46:7F:4B
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584D465F9CC5B981EBD9DFBACB00
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa
Signing time:             Tue 24 Mar 2026 13:00:41 +0000
ROA not before:           Tue 24 Mar 2026 13:00:41 +0000
ROA not after:            Mon 22 Jun 2026 13:00:41 +0000
asID:                     63023
IP address blocks:        216.106.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:5f:9c:c5:b9:81:eb:d9:df:ba:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Mar 24 13:00:41 2026 GMT
            Not After : Jun 22 13:00:41 2026 GMT
        Subject: CN=2a9ea18c-7a16-4e6d-aac1-c3303b5a61ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:61:15:d2:0a:76:98:4a:fe:b2:ad:ea:8a:a7:
                    c2:12:46:c3:eb:35:76:05:0d:1a:8b:99:36:22:5e:
                    77:42:18:81:d9:39:2e:79:20:96:dc:d0:21:e1:0d:
                    86:d7:60:2d:b3:13:fd:4b:8a:95:40:58:20:b4:03:
                    9b:dd:63:b1:a4:e5:7b:8a:23:59:5b:62:b6:0d:fc:
                    c6:09:d3:f7:88:7d:28:ef:a6:ee:a1:a6:f9:0c:35:
                    d7:b1:64:4b:19:bd:f1:13:f9:38:e2:97:c3:9d:99:
                    6d:7d:68:d9:a7:a7:c5:60:0f:b9:c8:7f:ec:f3:d6:
                    c9:d0:37:a4:b5:70:be:6d:64:0e:bc:76:de:6a:99:
                    69:12:ed:3c:38:5f:c0:17:77:f0:6b:08:fe:ee:3f:
                    2d:30:90:fb:fa:de:1a:2d:72:6e:65:a5:f9:28:1e:
                    28:03:fa:65:1c:34:2c:c8:b8:85:ca:05:4d:eb:c3:
                    14:2f:7b:af:ea:a3:d3:ba:1a:00:91:5d:88:65:dc:
                    9b:ae:7d:37:71:8b:23:a2:ea:6f:4b:2f:82:fd:9d:
                    22:58:84:1c:97:69:c4:93:b6:a1:0b:4f:93:1c:be:
                    d2:03:24:2c:1c:e7:3e:ea:02:e7:1f:19:51:73:d8:
                    5b:d1:01:a4:ce:82:31:5b:41:d4:59:8c:34:4e:b1:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:BF:FE:35:C4:28:2E:E9:68:20:08:4A:B5:8C:C5:DD:46:7F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3d:ca:04:75:45:57:6f:09:4a:4c:c0:7f:6e:8c:98:50:4e:
         e0:bd:4b:0b:05:a5:0b:72:a6:df:56:29:5f:ae:21:ca:c6:b2:
         d3:f0:f9:2a:07:ae:74:ac:2e:35:5e:54:12:ef:c9:aa:cc:ef:
         e4:b6:e7:57:a2:2d:5e:b9:2b:f0:ab:e5:e0:57:75:a1:af:51:
         39:df:47:71:47:74:f6:74:7f:f6:31:f2:02:49:64:34:ba:9d:
         88:98:7f:73:42:0e:db:1b:7a:07:14:15:9d:d5:84:1c:ae:02:
         95:d6:b1:65:5e:a0:74:de:ab:cb:e5:20:e3:d1:a4:44:07:9e:
         d9:1f:7b:eb:b5:3a:20:db:a1:0c:2b:39:c2:6f:8a:37:76:6e:
         ff:89:58:f7:f9:f3:19:1a:cf:40:ac:92:97:08:c9:06:b4:f2:
         43:90:bd:09:c1:0d:b9:f6:a4:8b:4a:3d:66:03:c5:00:de:ea:
         34:aa:97:14:68:80:eb:9b:6a:62:d6:57:28:98:24:0b:95:d3:
         74:97:bd:c1:4e:ad:4f:e7:97:cb:1e:5c:3d:96:b8:fa:e9:fa:
         1a:ab:d1:16:84:58:63:97:00:7c:03:d1:c4:23:96:98:81:4a:
         42:16:c2:ae:b3:06:39:30:aa:66:71:c9:8f:b0:d2:f8:9e:1f:
         92:43:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:23 2026 by rpki-client