Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e34eb69e-4e60-3898-b33e-75d8a02758c3.roa
File:                     e34eb69e-4e60-3898-b33e-75d8a02758c3.roa (raw, json)
Hash identifier:          tX2SRe5ek1MX/Bc1lYF+4dYb9ywIbYk7DWnjohgFzPE=
Subject key identifier:   DC:4F:7B:7D:4F:01:85:28:6C:9E:B6:FF:59:4D:07:8A:5A:4F:8C:20
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584D9CE5627FF28B19781C3A4400
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e34eb69e-4e60-3898-b33e-75d8a02758c3.roa
Signing time:             Fri 24 Apr 2026 12:49:52 +0000
ROA not before:           Fri 24 Apr 2026 12:49:52 +0000
ROA not after:            Thu 23 Jul 2026 12:49:52 +0000
asID:                     43260
IP address blocks:        206.212.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9c:e5:62:7f:f2:8b:19:78:1c:3a:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Apr 24 12:49:52 2026 GMT
            Not After : Jul 23 12:49:52 2026 GMT
        Subject: CN=a9a2a073-466c-4974-bcb0-8113513aa82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:1d:a1:59:85:26:dd:d5:e5:b2:74:46:d7:
                    4e:1e:af:c7:37:1d:da:f2:0c:1e:21:33:b5:65:77:
                    83:b7:4e:f1:5a:55:8e:a1:92:e4:6d:6e:e5:39:65:
                    ea:46:52:4d:0f:e5:38:59:3c:5d:30:02:40:67:c3:
                    ea:4b:49:13:e1:16:cf:86:7c:00:95:99:ee:1f:74:
                    74:07:a8:0b:2f:70:8d:a6:54:4d:fa:b4:03:48:3d:
                    46:09:e8:de:f1:6f:81:b8:5f:47:fe:9e:0a:a5:a6:
                    c4:09:b5:bf:0c:09:49:80:5b:1e:eb:61:54:37:2c:
                    19:32:a9:51:18:24:fb:25:fc:2e:10:c7:46:cb:00:
                    11:a1:0b:e0:8a:2c:8d:a0:d1:38:d8:dd:f1:53:ba:
                    80:d8:84:ee:e3:14:91:2c:11:32:19:d0:c6:82:e5:
                    c1:60:cd:91:da:17:d1:39:9f:59:d6:9f:ab:06:1f:
                    08:61:6c:a6:dc:f1:a9:97:d8:9b:e4:73:88:bd:0c:
                    43:04:f2:f4:29:38:62:12:71:1c:c7:65:1c:e1:92:
                    1e:48:7c:4e:0a:c3:9a:2f:55:ef:ae:5b:ea:86:f9:
                    a0:2f:1f:09:8f:c0:15:55:03:46:fb:ba:a3:b5:fa:
                    45:13:af:52:8c:11:50:9d:52:f6:06:1c:7f:59:71:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4F:7B:7D:4F:01:85:28:6C:9E:B6:FF:59:4D:07:8A:5A:4F:8C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/e34eb69e-4e60-3898-b33e-75d8a02758c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:d1:39:54:6e:4f:a2:52:26:95:49:e9:51:44:fb:a5:04:
         4b:7b:63:f2:05:9a:cb:48:fd:8a:ce:73:b7:c4:96:2e:a2:d9:
         a3:9b:3e:86:b7:ce:ef:78:32:9a:13:18:5b:ce:95:99:ba:31:
         72:13:15:dd:ea:50:1b:79:62:f5:84:4f:ca:07:68:c9:f0:02:
         4a:16:c1:3f:ab:d0:59:78:cb:02:6d:bd:e8:61:03:07:96:7e:
         2e:ae:14:c7:f1:83:1e:49:a5:39:7d:96:a9:55:5f:6b:9e:0b:
         11:32:9c:89:95:cf:be:e6:18:9e:ed:fe:21:21:8d:f9:55:ec:
         af:67:d3:8a:94:96:b1:b0:79:b8:74:bf:76:ad:21:84:93:a7:
         ed:f3:e7:87:21:3a:b2:bf:a4:6b:62:ba:8b:58:00:aa:f7:2d:
         63:2e:00:6e:be:a3:50:9f:98:2a:a3:84:11:2a:55:7c:e3:be:
         a0:b1:54:bf:31:7b:26:01:09:f1:3d:1c:04:95:3d:d9:44:05:
         24:f6:b9:dd:b2:c4:fe:58:15:42:63:a3:ce:8f:d0:ed:fc:d1:
         71:cd:91:60:5e:8b:cc:f5:e8:7e:af:86:24:e6:8f:05:6b:bd:
         f1:1b:51:f7:0b:bf:f0:ee:fb:e6:75:eb:1d:b6:75:88:31:79:
         85:dc:71:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:43 2026 by rpki-client