Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa
File:                     3ac695ae-0338-38d6-af38-2884b857a1a2.roa (raw, json)
Hash identifier:          Vj2kKu7sgwhb9SYGRNOjx31IVEGrl12VUA7h8f9/OMk=
Subject key identifier:   F6:D3:68:2A:EE:40:41:FC:CB:B3:EA:62:B1:B9:5A:92:88:C1:43:46
Certificate issuer:       /CN=7398f99d-b512-4640-b38b-2c84db430afb
Certificate serial:       010D0C9F4328584D1707BDD38C7D7658E1F6A598
Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        206.204.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:bd:d3:8c:7d:76:58:e1:f6:a5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=12600ec2-9382-47e3-9333-9ce1a48abf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:d3:70:29:71:f7:58:69:65:da:d9:49:86:
                    0c:a7:fc:7f:25:0a:cf:b3:a7:b2:eb:09:47:60:cf:
                    cc:17:71:d9:11:b6:13:17:26:8a:71:b1:8d:ef:07:
                    32:d8:e4:48:21:bd:b2:5b:b6:3e:5e:05:ea:84:e7:
                    17:7d:e8:b2:7b:e6:73:03:36:79:5b:34:91:9c:17:
                    d6:42:b3:a0:11:4d:d0:c1:68:d8:a7:5c:4a:8d:d9:
                    69:c8:cf:23:8e:a7:9f:fb:42:65:96:12:bd:fc:55:
                    ec:a9:d1:a1:ac:c1:a9:0c:da:56:8d:37:da:0d:db:
                    f0:90:fc:20:f0:64:90:a0:5a:e1:fc:48:a0:4d:b3:
                    a5:7a:c1:ca:c0:85:5f:9f:4e:76:0e:42:44:5f:01:
                    45:31:39:ea:33:8f:e5:3a:61:91:25:e2:72:32:d8:
                    8f:e4:fd:36:40:b4:12:31:a4:38:61:68:d9:c4:41:
                    e7:1d:a4:a1:04:f6:bf:e4:e3:4c:33:c4:c0:fa:2d:
                    2f:95:06:74:91:f7:e8:cb:b4:d2:88:8f:10:0d:aa:
                    07:b2:b2:06:78:14:ad:e6:5a:ef:15:88:62:c2:00:
                    c2:82:16:0d:55:d7:48:57:ff:e8:e6:c8:22:12:e6:
                    64:7a:26:e6:ea:5f:57:5a:58:a6:1f:af:de:b4:3e:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D3:68:2A:EE:40:41:FC:CB:B3:EA:62:B1:B9:5A:92:88:C1:43:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl

            X509v3 Authority Key Identifier:
                keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:77:5b:b8:7f:c5:54:5a:74:dc:b9:9b:63:89:fa:a2:05:
         8d:9b:27:2b:07:ee:c9:55:30:c3:94:cf:5f:73:04:3a:35:8a:
         30:8a:3f:54:f1:15:23:d0:9e:4e:41:71:ca:1b:25:c3:0f:bc:
         ff:4f:7b:dc:d7:73:22:1c:da:eb:44:f0:26:1e:3f:f8:94:9e:
         f0:05:24:c9:07:91:74:19:e1:3d:e2:9a:34:17:e8:0d:95:8e:
         1a:1f:77:d2:a6:ce:54:5d:9b:b0:3e:7f:b5:ed:81:90:71:82:
         43:dc:70:fb:33:e1:68:00:8e:23:c4:c0:3e:6f:05:18:f7:1b:
         6c:c4:7b:2a:02:c7:2e:00:81:70:14:06:1d:1b:a4:d1:16:7b:
         f6:f9:69:e4:d4:20:bc:f0:8b:77:53:94:7a:6f:cc:d5:02:6b:
         ef:fc:81:54:d6:36:ad:14:2d:30:72:66:02:47:31:5e:05:e0:
         91:11:7e:13:07:46:f0:b6:67:52:33:d9:d8:ff:56:d7:03:07:
         10:43:85:af:ad:d8:0b:77:aa:e3:9a:7c:51:bc:b7:50:ca:67:
         79:0c:fa:46:b3:bc:57:66:04:d3:84:51:25:79:61:84:65:ad:
         2b:fb:e5:57:26:0c:d9:7e:33:d6:91:d1:83:3f:c0:d9:73:c6:
         d8:ca:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:25 2026 by rpki-client