Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa
File:                     24d8cf79-ed97-311a-8d75-70c16944c2c1.roa (raw, json)
Hash identifier:          5F+59MJRL8SuXgkNGx2+MR+ZSVbfubDEw4RI2kQXPYE=
Subject key identifier:   0F:83:5B:BA:06:36:98:AF:B3:58:BC:ED:DB:D1:CE:01:2C:79:74:C8
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584E3E5F277EC18D70DEAB095380
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     0
IP address blocks:        206.130.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:27:7e:c1:8d:70:de:ab:09:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=5f9ac1f8-2ca6-4edd-bfd3-cd788a7efdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:35:9c:06:c4:5c:09:02:5b:cd:5c:7e:2e:
                    98:ff:b0:1d:a2:98:5d:2b:1f:4b:ad:2d:fe:39:09:
                    06:70:7f:00:58:9c:f8:e1:54:ed:8c:4c:2e:07:ec:
                    65:c9:56:8c:6e:f1:c0:3f:d2:4f:a2:10:4a:cd:f9:
                    6d:dc:f8:6e:ca:f4:35:8b:5f:4d:99:84:13:b4:03:
                    4f:ef:e3:17:f2:8a:c4:07:57:93:98:c7:63:da:b0:
                    e3:45:83:d0:82:03:8c:8a:b9:18:f2:0f:10:28:59:
                    5c:40:b8:b9:7b:f4:10:33:84:84:6a:7a:4c:b3:09:
                    a1:c1:57:7a:3f:7c:5e:57:cd:3c:d9:cc:d4:16:78:
                    98:3c:a4:2c:e2:2f:7f:c8:8b:16:55:b8:fd:cf:62:
                    fe:3b:2c:bb:e9:de:c1:30:04:83:6f:e6:4c:f4:2c:
                    18:52:e5:92:fd:0e:e1:81:a2:6e:1c:59:98:35:92:
                    7b:4d:da:9a:ed:04:cb:d0:ce:7a:b8:60:58:de:d6:
                    83:18:0b:2d:b7:38:3c:c1:7e:33:c6:bd:1b:23:0a:
                    17:a3:6c:5c:cc:17:15:b6:4b:ae:a9:d9:39:b2:f4:
                    a4:39:1f:6d:1e:2c:f4:6a:f2:ed:8b:93:49:78:cb:
                    20:43:de:7b:bb:bd:b4:9f:29:3e:9f:01:7e:c4:d8:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:5B:BA:06:36:98:AF:B3:58:BC:ED:DB:D1:CE:01:2C:79:74:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/24d8cf79-ed97-311a-8d75-70c16944c2c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:34:87:14:e5:5c:6b:ad:ee:77:44:12:65:be:10:26:69:9b:
         c7:be:98:28:1e:ed:56:cc:ce:e5:a9:9b:f2:92:5e:8e:55:cb:
         90:ca:a3:48:06:a5:b7:28:0e:2a:0a:e4:61:60:fe:db:87:b8:
         3e:62:03:65:9b:3b:e5:2f:70:26:09:f7:a4:18:99:c5:be:e1:
         20:91:b1:5c:4d:6c:83:c0:3a:fd:91:6b:dc:6c:d0:07:65:49:
         52:42:25:5d:df:0b:5e:fc:32:b0:e0:e4:cb:72:89:13:74:33:
         89:94:e1:65:f4:f9:36:a1:a0:e3:ff:00:08:88:03:98:29:35:
         52:d7:d9:71:92:b1:3b:9e:2a:c3:3c:5a:ff:46:01:1a:40:22:
         c8:8a:b6:8a:e5:5a:de:2f:67:19:fd:dd:15:20:85:52:8e:de:
         da:24:ab:88:e3:d7:66:75:b1:b9:7f:f5:c2:ea:e6:7d:38:92:
         1a:b2:ee:ba:99:8c:23:e9:36:93:4f:e0:2d:b9:87:84:c3:dc:
         78:96:84:da:1c:32:1d:79:53:b3:41:1a:1e:90:29:42:ce:e4:
         c8:20:92:cd:19:31:ea:73:a3:55:b7:e1:23:82:b3:0a:74:63:
         71:a9:ad:93:b9:b2:b5:0e:d3:d5:3a:db:47:07:db:0d:99:fe:
         36:9f:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:46:41 2026 by rpki-client