Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa
File:                     a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa (raw, json)
Hash identifier:          kHxN4ej5W5AL21nUQdiINiCHwD5L7eH7QwNBcHH8vFY=
Subject key identifier:   0F:1B:3B:E2:E6:06:F2:7E:67:F8:5A:AA:ED:85:37:78:A5:E9:29:BC
Certificate issuer:       /CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1
Certificate serial:       010D0C9F4328584DADAAEE474BFD5FC089F51F80
Authority key identifier: BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     401958
IP address blocks:        208.93.136.0/22 maxlen: 22
                          2604:2060::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:ee:47:4b:fd:5f:c0:89:f5:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=6558bace-0ca1-4236-92bc-43470283f72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:e3:5e:32:1f:df:42:b6:b4:14:5e:be:a7:
                    10:15:d9:54:16:4c:c6:92:ec:83:55:ec:98:ec:03:
                    82:d4:f4:2a:d6:af:7d:59:3b:4c:4f:5e:ce:6f:f6:
                    a6:25:c1:7a:2c:38:bb:c0:49:48:f3:7f:49:ef:cf:
                    fe:1a:bb:6f:9e:b7:ae:e3:75:44:c5:65:39:5c:58:
                    7d:7a:2b:2a:30:17:34:77:00:f3:0e:6b:c8:c9:e3:
                    e9:e6:55:f4:c4:87:b2:bb:bc:ec:fd:c9:55:eb:3a:
                    ed:ae:c4:24:c0:85:b1:70:85:71:6c:32:2c:9f:3d:
                    7a:9a:b9:64:7f:43:78:be:3d:30:30:b3:62:e1:0f:
                    62:f5:42:4a:fc:27:f0:58:8e:1f:5f:08:ca:9a:56:
                    84:2f:23:c6:84:37:4a:87:80:b7:4a:11:fe:fc:4d:
                    f1:83:f9:18:e3:95:77:01:ea:5a:ec:13:93:7e:66:
                    59:ac:42:50:cf:ff:41:69:7b:91:8d:ce:c3:35:52:
                    2a:aa:f3:d0:ab:f7:d5:fd:ae:31:67:5f:f6:82:d5:
                    97:f8:36:77:a3:b2:70:0b:86:f6:36:91:e3:ed:8b:
                    89:01:b8:0f:0b:cd:ed:2b:9d:c6:41:67:a2:0f:10:
                    ec:de:7f:9b:21:76:3a:3d:23:14:5e:33:1f:49:2e:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1B:3B:E2:E6:06:F2:7E:67:F8:5A:AA:ED:85:37:78:A5:E9:29:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/a198dd73-32fa-3bc5-97bc-f1bd69725cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.crl

            X509v3 Authority Key Identifier:
                keyid:BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.136.0/22
                IPv6:
                  2604:2060::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:84:c0:58:6a:c2:93:97:0b:ec:b8:f9:91:f8:3e:55:0f:
         f4:19:6a:14:ed:2e:0f:f6:4f:3c:30:5d:35:7e:10:8a:67:8d:
         83:4b:32:2a:09:75:23:6a:19:23:e1:02:2d:1b:f9:27:f7:2f:
         cb:c6:d0:8a:0b:d1:28:f8:2f:6b:43:1c:79:ca:1a:3a:33:ec:
         53:e2:60:27:1b:ee:fd:8b:70:7c:a6:ed:d7:3e:76:a0:83:f3:
         1e:9a:69:bf:82:2f:a7:40:8a:43:a8:3d:26:46:5c:9f:36:97:
         57:6d:44:88:e1:c8:f9:0b:44:7b:39:1e:f7:8b:c4:88:5d:b4:
         b9:58:cf:67:47:1d:23:30:36:3f:f1:ab:97:e2:59:b1:c1:2c:
         55:2c:e1:d0:3f:87:6f:af:d0:08:9d:c6:25:f4:d0:40:12:58:
         6d:d5:46:e7:f5:9e:11:b5:6a:90:c8:41:a4:99:9a:ab:9c:b2:
         3b:be:31:15:27:b2:ad:63:ad:ac:66:8b:a1:0b:cb:5b:e3:30:
         bd:3a:b4:e1:67:b2:09:96:de:1d:92:d9:77:5f:78:a0:1b:5e:
         ff:a0:ca:d7:8c:73:58:e1:e6:56:0d:16:78:63:13:87:d3:8d:
         29:99:7a:83:d5:0c:3c:5a:66:4a:4f:01:cd:ff:d7:a4:c3:4b:
         f2:02:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:18:57 2026 by rpki-client