Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
File:                     6ec4b6bf-d53f-3877-b36e-f669576d8063.roa (raw, json)
Hash identifier:          /T7SFt/iYKtGkrrhX6Ra4ITfNhEjBaX2aSacOfnWev0=
Subject key identifier:   92:24:AA:02:7A:FD:8D:76:13:8A:DE:89:73:61:39:A4:7B:82:C9:B9
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584DB77031DC33FA34F7EBE07F80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     6128
IP address blocks:        216.97.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:31:dc:33:fa:34:f7:eb:e0:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=44687803-14cf-4de4-bcf1-b73e780b3489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:93:fa:86:dc:87:c3:bb:de:f7:7e:80:12:
                    3c:a5:8c:7d:d0:b3:52:0f:ed:cc:5f:af:0a:1d:fe:
                    37:a3:29:a7:10:44:6c:55:0a:f2:fb:18:c6:cc:58:
                    6f:d2:0a:90:b8:9c:db:35:d7:dc:39:81:75:43:fb:
                    db:c0:8d:9f:4f:13:b2:9b:98:3e:75:b5:92:32:0d:
                    38:48:60:1f:bb:f6:eb:2e:7a:92:4a:4e:e0:fd:3a:
                    41:db:46:72:f6:97:76:be:d0:e5:45:4e:0b:0f:e1:
                    59:6f:10:44:e3:07:ce:f5:a4:ce:93:7d:2a:e2:e6:
                    6f:8c:fe:b1:93:69:fb:e4:7e:64:f1:59:ff:3d:9e:
                    e2:68:b2:d6:5d:35:28:c4:34:d2:22:59:f6:bb:0f:
                    34:1d:c0:35:49:29:d9:00:37:53:f5:ab:6e:7c:8e:
                    e0:89:b0:9b:cd:4d:0d:f5:ef:fa:40:dc:53:6e:3b:
                    84:89:0c:44:50:ec:7f:65:82:8e:7e:ed:2e:0a:e4:
                    71:58:9b:97:05:45:25:3d:6c:a2:a8:b6:77:f1:b4:
                    5e:e8:ed:ae:69:93:53:f1:ec:02:79:ea:c1:c0:ee:
                    85:cc:26:b9:a1:20:c0:18:ec:53:96:52:6e:78:20:
                    91:ad:b0:0e:54:2c:32:48:8b:74:32:89:56:e2:c1:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:24:AA:02:7A:FD:8D:76:13:8A:DE:89:73:61:39:A4:7B:82:C9:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:58:30:84:33:30:67:38:3d:b0:0e:77:47:a8:de:7c:a0:98:
         9f:5b:f8:7a:7c:af:8c:54:d7:93:27:32:39:5d:72:5f:f4:1d:
         5e:19:50:14:d7:d8:db:5a:56:e4:bc:4f:74:bf:96:31:32:37:
         04:96:d7:9c:aa:6e:43:ed:93:d5:be:09:79:68:c4:8b:73:df:
         91:79:9f:09:69:e2:37:18:59:49:ef:76:46:f0:1a:00:86:6f:
         2a:f2:6c:c8:43:04:81:96:7b:27:c8:ad:ec:fc:b5:8e:f7:9a:
         85:b6:d3:9e:78:26:60:a6:d8:a6:19:1a:e2:c6:43:97:0d:1f:
         c0:56:2c:28:11:44:f8:cc:1c:b9:06:67:05:e8:42:df:3d:3b:
         a3:d0:88:d1:2e:3d:8a:e3:5b:a7:2d:11:f8:68:46:a1:bf:3d:
         dd:c2:b8:13:ad:60:7e:08:a5:2c:3a:0c:0a:86:f3:52:c9:20:
         b5:0c:2d:94:62:15:b0:94:3f:f0:67:5b:88:d0:aa:ed:dd:07:
         53:ec:18:fd:24:ec:89:f1:99:1b:f6:5e:fd:27:4e:d0:92:f1:
         ed:ea:2f:9f:fd:9c:90:62:ad:bf:33:19:46:85:74:4e:72:18:
         95:3f:1b:0b:69:d8:8c:02:a4:a7:fb:e9:7f:3d:f7:21:18:c6:
         ad:e3:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:00 2026 by rpki-client