Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3941af11-347b-32a2-a584-f55f2adb9af3.roa
File:                     3941af11-347b-32a2-a584-f55f2adb9af3.roa (raw, json)
Hash identifier:          Ffe0X1ypcd4kkFUkxz71PHUYGMp04r63TVE30xucpRU=
Subject key identifier:   99:81:AC:8F:E9:A0:2B:62:1D:F3:33:4A:10:20:00:59:EA:B9:34:E4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E3E5F215201DBF4DFDB381900
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3941af11-347b-32a2-a584-f55f2adb9af3.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        134.224.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:21:52:01:db:f4:df:db:38:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=9e6cf2e6-307e-43ac-95f7-924a38c3a4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:54:9c:65:e1:e7:c9:26:4f:19:a8:1c:86:
                    d7:24:ab:68:20:29:0a:59:d0:27:9a:d0:77:1e:9d:
                    5a:01:8a:97:87:bc:05:8a:9f:eb:d2:e1:0f:7f:e8:
                    1c:fa:31:8b:8f:61:8b:d0:9f:ba:e1:fc:52:01:91:
                    25:ad:a9:1f:02:c2:e0:1a:84:27:5d:e3:88:ec:a1:
                    e0:56:9b:e4:c1:bb:49:f2:18:a7:c7:ad:72:fd:45:
                    44:bd:ab:96:2f:1e:fd:42:2a:4f:a5:fb:3f:88:00:
                    3c:14:3e:86:78:f5:58:1d:d6:a0:b9:ce:3f:d4:8a:
                    cc:2c:97:3f:6d:c0:9d:3a:bf:e6:55:82:75:48:c0:
                    c2:fd:2b:1d:95:3c:95:ca:b2:00:76:3d:89:e3:3d:
                    e1:9a:26:f1:cd:b8:17:ad:70:72:5a:2b:d4:b2:45:
                    76:c6:e0:1a:bf:87:16:b0:28:60:14:83:ee:46:6c:
                    f7:a0:cf:f7:8f:3c:d9:8c:3d:75:5c:71:b4:5a:be:
                    c3:96:c8:c1:aa:0e:fd:f8:f6:22:0e:ce:9e:b0:94:
                    91:1c:23:dc:36:57:a4:ae:0f:db:d4:ca:89:9f:2c:
                    ca:45:03:ab:02:ea:e8:07:7e:8a:dd:3e:1c:96:ab:
                    06:19:42:b1:c3:49:ed:b5:88:da:00:81:e7:15:1d:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:81:AC:8F:E9:A0:2B:62:1D:F3:33:4A:10:20:00:59:EA:B9:34:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3941af11-347b-32a2-a584-f55f2adb9af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a0:0c:bf:19:cd:62:6f:4a:0b:c6:06:99:9e:5b:72:4f:b9:
         70:58:c1:ef:88:49:17:59:fc:83:9e:48:e3:b8:19:32:80:5b:
         9b:c6:a9:a9:7c:b2:6e:c9:cd:6a:5e:dc:6f:d8:94:4b:17:f7:
         28:06:53:36:de:74:3c:a2:4f:4a:a4:52:b4:48:67:6d:91:f8:
         27:35:bf:c3:88:77:43:18:a5:8f:2f:e4:1f:46:8a:87:0e:d9:
         f5:16:fb:20:90:f8:41:ed:0e:87:44:76:1e:46:f0:5f:74:61:
         6c:2e:62:f4:e4:0e:12:2c:44:38:d4:7b:e5:35:43:86:e3:9e:
         7e:68:9e:b0:82:8f:40:38:6f:fc:a4:75:15:1d:48:2c:3c:ac:
         b4:5b:0d:ec:88:9e:66:6d:64:d8:af:06:c0:9a:ac:d4:ac:03:
         19:12:74:0a:61:a8:57:31:67:d7:e3:9a:6d:d3:43:9a:08:f7:
         63:57:79:df:a9:d4:d4:e5:8f:a3:9f:26:7b:59:fb:2b:06:1a:
         67:8b:59:7a:a8:16:b2:5e:05:49:37:c5:8f:ea:db:f4:e1:2b:
         aa:d3:25:c8:33:fe:0c:f6:fb:13:2a:c3:84:48:e4:d4:d7:a0:
         0c:bc:a8:d3:52:58:a8:9f:3a:8a:02:da:d3:e9:51:ba:7b:f9:
         91:d6:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:23 2026 by rpki-client