Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e51c2a87-6c67-3e12-b1b4-f0eacfddb116.roa
File:                     e51c2a87-6c67-3e12-b1b4-f0eacfddb116.roa (raw, json)
Hash identifier:          ysRIdu5pR4VEDbnvpbQr1VDwBwuEaTy3xZ0A8qB25pk=
Subject key identifier:   A4:1A:5C:14:5C:0A:27:B9:A5:0A:DC:83:35:BF:DE:C1:E1:3D:0F:33
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E683F57E7651A483852672280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e51c2a87-6c67-3e12-b1b4-f0eacfddb116.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        24.169.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:57:e7:65:1a:48:38:52:67:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=61754281-f822-4764-8a9b-d7844ad51b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:c2:c8:69:50:58:de:49:e6:0b:c1:ec:77:
                    55:55:a0:ad:00:3a:f6:c5:8e:bf:5d:8c:59:06:29:
                    31:31:02:cf:22:f2:af:5e:61:bc:75:5f:30:61:29:
                    da:f1:fd:0b:d3:06:3a:7a:ee:fc:3d:9e:b1:cc:eb:
                    43:37:b8:67:17:da:7a:e2:24:26:09:99:e3:4d:0a:
                    eb:ff:77:59:dc:b4:0a:55:ea:51:df:03:22:d4:2a:
                    7f:02:5b:b6:5c:18:b0:3d:cd:5d:fd:e6:db:2c:62:
                    69:45:14:d7:70:56:d2:b2:2c:3a:c1:5f:aa:db:8c:
                    7d:cb:a6:2b:1f:55:8d:26:b4:3f:81:b0:34:c3:6b:
                    a8:a5:17:d4:b0:bc:7b:16:e1:12:42:d7:b8:1b:1e:
                    48:80:45:6f:fc:44:29:9e:b6:ca:b3:18:a2:e2:8c:
                    f3:bc:c2:b8:35:eb:00:7b:00:c0:82:55:e6:9f:aa:
                    48:f5:a4:cf:16:81:29:6b:06:82:b3:67:39:51:2a:
                    0e:e5:39:26:9d:ae:3e:54:c2:52:e2:f6:b2:2b:e3:
                    ef:a4:74:42:63:90:d8:e4:7c:7d:34:28:b6:cd:c9:
                    27:e5:8c:9d:7e:b3:e7:47:fe:2f:69:91:1f:0b:a5:
                    e0:9c:40:2c:ec:23:45:a0:7e:99:af:99:fc:ce:f5:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1A:5C:14:5C:0A:27:B9:A5:0A:DC:83:35:BF:DE:C1:E1:3D:0F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e51c2a87-6c67-3e12-b1b4-f0eacfddb116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.169.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:6c:eb:1a:d8:9b:81:66:ee:e2:d4:f4:17:31:01:73:e4:
         d1:b2:c6:8c:24:7e:53:66:99:6c:a5:b2:5a:23:f5:46:2e:a9:
         fe:47:7b:57:32:ad:91:8f:9b:73:45:b8:a7:9b:d1:e6:0e:18:
         29:a1:d7:3a:8a:7a:b7:e4:31:21:99:91:97:30:64:89:16:f1:
         60:e3:b5:9b:18:b9:f8:df:99:4d:2c:f1:29:c0:60:0a:0f:80:
         d4:b2:52:46:68:90:3f:ce:1e:a6:46:b5:c4:23:d0:2d:bc:97:
         af:1a:89:c4:ec:61:3b:e4:b0:a5:83:c5:17:82:98:91:03:5d:
         87:da:b6:06:cf:a1:4b:73:f3:8d:97:d8:6a:10:b0:71:6e:2f:
         e1:51:7e:6d:84:92:66:3d:d7:51:fb:72:e1:55:db:3f:43:12:
         8c:20:d4:db:f4:fc:1a:75:49:16:52:d0:7c:1e:11:5d:f3:23:
         fa:1c:77:e7:f3:d8:c5:e1:7d:41:cb:8d:96:32:ac:6a:71:5d:
         f0:28:f2:4b:73:8c:10:36:af:fd:11:fc:93:e7:c3:59:75:f0:
         e7:7f:89:ed:f4:c5:af:1c:e4:37:a5:bd:b3:6e:4c:88:8d:ed:
         07:c6:fb:bb:87:08:37:cc:25:f9:dd:c2:58:07:59:52:5b:07:
         7d:32:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:10:26 2026 by rpki-client