Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/129880ab-edd2-3138-98e0-f716c349a297.roa
File:                     129880ab-edd2-3138-98e0-f716c349a297.roa (raw, json)
Hash identifier:          //okls9FIA7qU4Y5MpjY8llRx4QVLxzQFTQl56AY7jw=
Subject key identifier:   F5:DF:6C:79:CA:BE:80:D9:C5:77:D3:14:21:9C:B3:9B:40:19:61:02
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E858F8AB79EF27414118C4CA0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/129880ab-edd2-3138-98e0-f716c349a297.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     9009
IP address blocks:        216.24.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:8a:b7:9e:f2:74:14:11:8c:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=daa8661a-b9ed-40e4-bcf5-da8c58639735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:54:ff:7c:ff:dd:4c:f3:56:90:5e:a1:5c:
                    0e:64:c5:f5:46:8d:c5:43:b2:01:2e:fc:90:5f:05:
                    a0:3a:7b:34:a4:7c:bc:0b:45:d2:3a:1f:68:3a:46:
                    f3:8f:dc:77:12:11:d8:9d:ce:92:1a:80:56:49:5b:
                    35:0a:18:5f:b5:0a:7a:c2:2d:b0:44:94:2b:f2:22:
                    0b:5f:44:11:45:6a:9a:bb:33:0f:05:2f:ec:f8:f6:
                    01:32:f1:79:9b:fc:4e:1c:82:4a:82:d9:f6:b3:e7:
                    76:ed:7b:c3:b1:77:df:19:19:5c:73:86:2a:23:50:
                    09:c1:ae:2b:69:ee:50:ec:5f:9d:d8:3c:7b:9e:3f:
                    d9:b5:f1:70:f0:2c:67:90:cc:43:70:3b:b1:9f:73:
                    04:59:3d:7c:4d:5b:67:79:d0:9d:5c:f4:54:a4:1e:
                    63:86:8a:02:9a:62:17:b9:29:79:4b:8c:8f:6e:70:
                    bc:a6:8b:ca:04:d3:35:b9:a5:db:d0:dc:1b:47:82:
                    ff:c9:1f:c9:3e:29:ee:c6:a3:6f:79:7f:7c:a5:f0:
                    6b:a2:3d:e7:c1:f2:d1:2b:34:1b:c0:6f:e0:9c:27:
                    95:61:86:9f:38:d2:50:0a:4a:68:de:80:3e:c0:d1:
                    12:e1:fd:78:6a:76:a0:ec:71:6a:58:a2:26:e6:39:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DF:6C:79:CA:BE:80:D9:C5:77:D3:14:21:9C:B3:9B:40:19:61:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/129880ab-edd2-3138-98e0-f716c349a297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:63:19:5d:f2:71:ef:b1:3a:91:1d:c7:4a:45:23:88:79:
         b6:dc:d8:e4:ba:11:10:31:89:76:e1:0a:f3:a8:79:91:48:52:
         1d:c4:ea:83:e7:0c:34:69:fd:e1:a6:4b:46:b2:b0:bc:59:d1:
         e0:ca:7b:6f:bd:d2:46:96:ec:54:6f:35:65:74:26:b0:c7:68:
         28:8b:6e:74:7e:12:16:63:11:68:c2:ce:11:5b:54:ad:ba:95:
         24:8a:f2:b4:1d:f8:1c:c4:07:25:b2:eb:35:f8:7d:ac:1a:79:
         96:7f:60:99:24:9a:83:88:0f:4a:1d:e7:46:25:5b:e4:ae:99:
         a4:1e:bf:ae:64:3a:a1:02:05:3b:dc:af:e2:c5:b9:b7:99:a4:
         cb:b8:10:62:19:88:e4:ea:b2:3a:66:9b:2f:93:64:48:d5:93:
         fb:0a:35:55:ef:fc:ba:e2:d2:41:3d:b7:09:d4:e9:ab:3c:5a:
         35:7a:2e:5f:fc:e8:b1:2a:09:11:65:09:65:6b:10:0e:e8:4e:
         cf:a0:92:6e:5e:06:c7:25:66:a8:6a:ea:34:b6:59:7e:c2:b6:
         91:4c:c4:b3:72:37:2c:d0:62:e7:e5:c2:7a:aa:0a:61:e2:42:
         15:30:99:40:5f:f5:82:1b:01:ef:3b:bb:72:b9:3c:95:e8:01:
         88:9a:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:11:00 2026 by rpki-client