Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa
File:                     f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa (raw, json)
Hash identifier:          Ey14OGbGvRQN/PQgtlG8s9CtAibT9qGnDnvl0YTyNM4=
Subject key identifier:   2D:88:60:E2:B1:82:77:9D:66:59:B3:15:83:1C:20:36:66:E3:7D:CF
Certificate issuer:       /CN=93749f69-84ba-4630-9f77-9e566d620da4
Certificate serial:       010D0C9F4328584E46BF293EB1ECC7B123B5DE00
Authority key identifier: F8:5B:85:82:93:F7:BE:32:22:0A:86:6F:23:41:EC:2F:E9:7F:91:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     36539
IP address blocks:        208.79.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/93749f69-84ba-4630-9f77-9e566d620da4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/93749f69-84ba-4630-9f77-9e566d620da4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:29:3e:b1:ec:c7:b1:23:b5:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93749f69-84ba-4630-9f77-9e566d620da4
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=6eec42c8-26d3-4f40-8aaf-848e2dd6cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:fb:ef:06:25:6a:04:11:9f:bf:66:13:f1:
                    d3:6c:56:0d:ec:92:02:e1:2a:b1:f5:e1:c7:4a:28:
                    60:4c:ee:64:bf:b2:5c:4b:43:a1:63:37:91:98:07:
                    7c:7f:0b:97:8c:4a:29:37:a5:d1:f8:65:db:72:31:
                    c7:fd:25:0e:e7:8b:5b:ef:25:6a:d4:ba:02:14:88:
                    21:eb:70:fb:85:42:b1:66:ae:ff:08:fe:1b:2c:38:
                    a7:4d:7a:14:e0:bf:aa:9c:57:16:c0:b1:db:0c:e4:
                    98:57:76:38:37:e4:f8:12:22:36:50:8b:98:63:2c:
                    22:6b:d9:98:0b:d7:b4:92:03:08:97:44:1a:4a:f1:
                    ab:e3:d0:c3:3d:32:2c:c2:4b:4b:81:cd:57:53:a2:
                    7b:c9:c1:1c:d7:56:40:7e:19:5d:2a:0d:c4:89:23:
                    76:8c:e2:00:aa:50:38:83:ce:f0:56:32:44:81:54:
                    10:0b:60:a7:9d:d0:e3:60:8a:b5:9e:6c:3c:31:6e:
                    ab:71:23:12:f7:97:57:61:4d:79:86:03:81:98:ef:
                    8e:1d:0d:be:db:63:28:d3:e9:5a:4d:de:09:96:f3:
                    af:13:29:6c:e6:38:c7:6d:89:b2:cd:1e:70:69:ac:
                    da:de:cb:fe:7c:3d:89:c3:f1:1d:98:8a:84:aa:53:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:60:E2:B1:82:77:9D:66:59:B3:15:83:1C:20:36:66:E3:7D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/f4c720f4-ec21-3bbf-9de7-3c44164ae936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4/93749f69-84ba-4630-9f77-9e566d620da4.crl

            X509v3 Authority Key Identifier:
                keyid:F8:5B:85:82:93:F7:BE:32:22:0A:86:6F:23:41:EC:2F:E9:7F:91:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/93749f69-84ba-4630-9f77-9e566d620da4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:33:c6:bc:6b:ec:53:f7:ea:c2:b3:21:b9:08:43:0b:95:e4:
         b2:d9:ad:dd:10:c5:52:8c:02:e3:ba:f9:f9:b5:cf:0f:ec:9e:
         ac:31:f6:9f:9d:a3:d3:81:e0:7b:59:10:7a:28:fe:42:d4:e1:
         6c:e2:67:df:47:9d:8d:4c:17:42:6c:5f:df:25:6c:a6:2e:fa:
         b5:59:c4:a8:f1:35:f0:c0:e0:3c:0c:30:f4:e6:8a:ab:b9:5e:
         bf:c1:ec:03:bf:32:1a:4b:f1:bc:af:9c:2e:af:34:d6:b8:cd:
         d2:ad:5b:04:b6:e5:3d:49:dc:fd:70:cd:51:bd:ae:ae:ff:7f:
         a6:c6:47:4a:24:49:39:6d:fb:39:82:d2:1a:17:5e:fe:e4:7d:
         0d:e5:eb:72:2f:cb:42:38:6d:d8:01:1a:cd:cb:4e:34:f5:bd:
         e6:b8:cc:4e:01:f1:1c:69:4f:2b:76:66:c3:3c:10:82:91:ea:
         8f:3a:2f:f3:28:0a:e5:f6:63:d2:5c:11:41:8a:4e:28:a4:ab:
         7d:a1:78:1f:36:ca:54:d7:df:c2:37:fa:f0:84:1c:ef:25:01:
         aa:21:37:c9:4a:38:d0:1a:b7:bf:63:63:93:b0:e9:46:c5:a2:
         a0:03:ae:9e:64:0c:84:e6:85:0e:4a:26:7e:1f:4c:82:3b:c6:
         6b:4d:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:27:08 2026 by rpki-client