Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/314e46f6-a31c-31d1-8df5-73c260b076b2.roa
File:                     314e46f6-a31c-31d1-8df5-73c260b076b2.roa (raw, json)
Hash identifier:          38zfazlvBwo5RtiNyTVLaMDO8Tvebxy6sl/cEz7pgKk=
Subject key identifier:   F4:A1:33:CF:38:39:A1:EF:10:9E:AC:5F:92:B4:CA:A8:EF:39:21:C0
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584D9E50301EB0B667BB82C9DD00
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/314e46f6-a31c-31d1-8df5-73c260b076b2.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     546
IP address blocks:        206.219.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:30:1e:b0:b6:67:bb:82:c9:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=db2fcd28-7a2e-4894-a580-0de3f64aba33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:2f:d4:15:d0:72:33:73:e1:2e:71:4a:86:
                    ab:73:ad:32:62:d2:1e:46:90:a6:e5:1a:81:79:3f:
                    f2:67:6a:7d:fe:57:32:6c:e2:7d:ee:a5:bb:f8:02:
                    0e:da:ca:04:d7:c1:53:cb:a3:8b:64:d6:c1:de:d7:
                    89:dd:e8:d6:93:75:1a:bf:5e:8a:b5:29:a2:39:55:
                    f1:36:05:4e:0e:fe:e3:35:2f:69:2e:93:8e:a3:ca:
                    a4:e4:f5:0f:b5:70:ea:d5:37:cb:ca:c0:88:a1:c6:
                    89:3a:ea:fa:35:9f:8d:32:48:31:5b:e3:56:3f:ab:
                    6a:05:01:a9:0f:83:34:ee:80:af:e8:ef:0c:9d:2b:
                    8d:4b:00:8f:bb:28:f5:85:97:ce:a9:14:6a:88:c5:
                    c0:cf:1e:56:8f:16:17:cd:ef:c5:df:89:41:80:77:
                    08:58:d3:85:90:ae:ef:ae:76:f9:a5:1e:60:15:5c:
                    bf:f2:0f:9f:49:e6:ac:28:92:e5:a8:57:15:6b:64:
                    bd:ea:08:88:67:67:6e:d5:fb:02:3d:e1:1d:7e:de:
                    ec:9a:0e:df:b7:73:df:7c:da:09:94:35:39:fb:30:
                    d2:bd:7c:79:cf:1a:77:06:ac:04:90:43:87:8a:2f:
                    e0:50:33:c0:cf:97:28:c9:16:b4:92:4f:7e:9e:a7:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:33:CF:38:39:A1:EF:10:9E:AC:5F:92:B4:CA:A8:EF:39:21:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/314e46f6-a31c-31d1-8df5-73c260b076b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:25:ef:b5:c0:88:b0:56:cd:ef:7a:ff:ee:69:9c:3b:a0:f3:
         5a:17:34:81:57:c2:f7:e4:71:a5:1e:5a:0d:c3:95:bb:60:b4:
         8c:99:bb:41:93:6b:a2:59:9d:26:ff:7e:0a:25:14:69:12:dc:
         37:9c:92:b7:0d:98:bd:02:9d:b6:05:d0:b5:e7:70:e8:d0:32:
         ae:88:a3:8a:14:1f:fe:a6:05:ec:33:25:df:b3:b7:0a:af:f9:
         c0:ad:ab:e0:9a:0d:12:65:66:0a:26:7f:0c:9d:a6:b4:be:ed:
         2b:d8:4a:3f:93:14:3c:e7:78:ce:12:87:c7:dc:f5:39:c4:36:
         5e:10:64:9c:c5:62:54:c7:12:f9:11:86:65:bf:58:4d:e7:db:
         77:16:a4:75:41:e4:23:5b:d8:eb:1a:77:7a:b4:39:3c:88:45:
         dd:44:01:84:85:e7:f2:ad:1b:3c:08:f3:40:d1:e8:b0:6e:28:
         67:a6:8c:42:5b:86:fd:5e:c3:82:18:c8:98:9c:c9:98:eb:ce:
         7d:ec:ac:11:8e:b9:ad:44:af:2c:d3:a9:44:9e:c5:0c:63:df:
         a1:5a:6d:f9:c1:d0:23:ec:12:21:cf:6b:65:dc:c5:67:25:17:
         58:6b:20:2d:69:72:83:b1:4f:a1:35:59:0d:02:99:3b:7c:87:
         97:d0:a0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:18:31 2026 by rpki-client