Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b040d176-d9e5-3929-8679-c8c7fde27153.roa
File:                     b040d176-d9e5-3929-8679-c8c7fde27153.roa (raw, json)
Hash identifier:          SdMnZRxkGnDjQ8LyGOZOK2RfDRY0AzWR1m3EPIZvQtc=
Subject key identifier:   FB:E9:8C:73:E2:2A:84:45:7C:4C:76:F8:B1:32:F9:39:4B:73:21:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DCDC5D95A2A9062A803B6C240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b040d176-d9e5-3929-8679-c8c7fde27153.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16224
IP address blocks:        206.136.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:d9:5a:2a:90:62:a8:03:b6:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=2d733617-be5d-4369-b9ea-9e7e769178c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:59:61:7e:0d:85:c5:71:9d:5f:36:8b:d6:7a:
                    da:98:d4:72:7b:21:ba:8e:d2:9f:04:6c:d9:9c:13:
                    ff:bc:f7:27:f4:f4:66:a7:cc:3e:24:bb:50:1a:d1:
                    56:64:e5:d9:40:bc:45:ce:c2:35:01:94:22:2f:d1:
                    cc:88:85:17:34:26:f9:05:88:2c:58:cd:c7:ae:40:
                    30:2b:39:fb:1d:80:9f:f2:6c:21:ad:9d:83:d5:6f:
                    6a:05:33:c0:f8:b9:59:a0:ae:b6:50:35:b1:8d:57:
                    f3:f6:d1:ca:a2:18:e2:4d:8b:8e:fa:af:e0:7e:28:
                    3d:86:3d:e3:ba:7b:ba:a5:96:fd:93:35:3f:75:c3:
                    7d:6d:d1:5b:c2:99:7b:50:d8:a0:11:e0:f7:34:e6:
                    0a:e1:df:fa:6e:18:80:68:ff:e0:76:d1:a2:bb:5a:
                    cc:10:d3:80:d9:23:a7:18:34:c6:93:8b:56:57:91:
                    5e:55:14:85:03:c9:10:e7:6e:0a:f6:ce:4f:d7:a7:
                    fe:b7:0b:7b:fa:ec:8f:69:c1:67:27:0c:b0:dc:6f:
                    52:65:86:1d:dd:f6:18:e1:72:26:e4:55:16:3f:68:
                    d1:60:67:3e:e4:f1:03:1a:96:12:37:b2:c4:01:1f:
                    21:bf:24:e4:fa:f9:29:5f:71:42:fc:07:72:df:7a:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:8C:73:E2:2A:84:45:7C:4C:76:F8:B1:32:F9:39:4B:73:21:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b040d176-d9e5-3929-8679-c8c7fde27153.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.136.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:25:70:94:7e:0e:d7:44:c6:79:9b:3c:64:aa:25:35:f0:04:
         bd:65:b2:e7:07:ce:d0:4c:42:f2:0b:2b:80:c5:0e:35:49:df:
         b5:51:af:af:cc:c9:ed:60:de:16:77:6b:d6:88:44:38:25:b8:
         f7:80:84:b9:02:ae:81:27:2c:e9:f4:ab:ae:74:e6:09:4f:46:
         b4:55:e4:bf:ed:ae:e8:d2:67:db:28:54:0f:d7:11:69:f2:93:
         3d:29:a1:42:92:a8:8e:85:53:62:2f:c3:54:a4:3b:cf:c4:e5:
         97:9d:18:d5:e9:77:a4:4f:76:5a:bc:1c:39:d3:9f:2c:c9:e9:
         d4:3a:43:1f:de:f5:86:ae:5f:6d:b6:f9:41:40:b7:f3:63:6e:
         4d:51:09:8b:92:21:aa:48:06:dd:ea:85:af:5f:bb:6e:77:01:
         c1:92:42:13:e0:cf:f5:f3:0c:5c:07:1b:b2:6b:5f:ed:29:c8:
         c4:17:db:c3:3a:b3:2a:a1:5c:ff:72:bf:21:b9:05:13:b1:8d:
         b5:37:85:4c:54:07:00:33:52:48:5e:27:cc:8e:72:67:69:04:
         18:85:44:51:93:13:08:8d:38:bc:8b:90:83:f8:bb:fd:8b:fb:
         f9:d2:46:f7:1d:ad:80:59:c3:3d:2f:30:95:dc:e9:ad:1d:dc:
         1a:81:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:47:52 2026 by rpki-client