Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/24bc549e-105e-3823-8b17-818c260913fa.roa
File:                     24bc549e-105e-3823-8b17-818c260913fa.roa (raw, json)
Hash identifier:          2If5LgYLdrOw+OUUiU+fXEfTALhAJ1np8nFGTD0fYkU=
Subject key identifier:   37:6B:71:3D:55:97:44:6E:8B:A0:1C:D3:5B:FE:FB:6B:A2:06:77:00
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584CCE71FBB4D6A39C287AE7A180
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/24bc549e-105e-3823-8b17-818c260913fa.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     26863
IP address blocks:        64.40.9.0/24 maxlen: 32
                          168.100.161.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fb:b4:d6:a3:9c:28:7a:e7:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=eb945d87-3fbe-46ec-8fe6-fcd0269088ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:89:cd:0c:f2:1b:36:12:de:49:79:e8:f8:
                    5e:82:e0:4a:d3:20:c3:d1:49:1c:47:37:97:b5:a8:
                    16:e1:21:12:20:83:ef:07:99:63:0e:f2:8c:36:71:
                    3e:5c:ac:05:2f:d0:b4:5f:b1:5a:69:1a:d0:e9:2c:
                    08:cd:97:55:a9:be:b9:18:8d:c3:3a:d3:f0:a9:1f:
                    98:d1:c4:d9:f3:ee:08:b1:f4:46:18:1b:a1:89:8a:
                    44:9e:86:74:39:5a:b3:36:6e:db:79:7a:45:c4:a0:
                    21:10:3c:db:ef:a8:dd:6e:34:82:b3:34:99:fd:f3:
                    d9:c6:ae:31:0e:b6:44:0f:65:81:d3:a3:98:80:b0:
                    2e:e6:e9:bd:21:f8:ab:16:4f:94:a1:8e:d6:07:92:
                    7e:07:60:4e:7f:cb:fc:22:89:52:50:96:67:0a:07:
                    14:cf:bf:e6:cf:81:83:bc:ac:ea:89:da:87:28:b0:
                    24:a1:b3:db:93:6c:5e:80:58:65:13:50:4d:9b:30:
                    a2:83:e2:83:cc:d7:2e:2d:c1:be:86:4b:b8:9e:7c:
                    7a:a4:93:ad:b3:55:9f:d3:55:14:0e:3e:3e:c8:a7:
                    1d:2d:f4:1f:a1:d1:ee:15:7d:ef:5c:2b:cb:a7:df:
                    c3:cc:bf:36:1a:a2:a6:00:b4:af:54:25:23:8c:a5:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6B:71:3D:55:97:44:6E:8B:A0:1C:D3:5B:FE:FB:6B:A2:06:77:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/24bc549e-105e-3823-8b17-818c260913fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.9.0/24
                  168.100.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:85:97:f3:cc:2e:bf:40:7b:37:b7:91:5d:23:7e:4c:6b:28:
         77:7c:a5:0d:1c:57:2d:45:cc:0e:ec:55:56:cc:0f:73:19:52:
         00:24:d5:38:9e:0f:c3:a5:32:27:14:f7:95:1b:dc:43:b3:ce:
         c1:f9:54:54:f2:54:12:3e:73:92:c1:eb:7c:ec:64:7e:42:b7:
         10:22:e5:81:9f:65:6f:97:f8:7d:eb:14:aa:09:10:45:fb:d7:
         b8:fb:d4:6d:ea:f4:be:8a:4c:a2:f0:a8:a4:e0:20:cc:c1:25:
         29:3b:ec:08:b1:07:20:cd:ce:ff:3e:7e:ab:1e:37:16:e5:b8:
         2b:4d:c8:63:44:7c:c7:e0:29:cf:ee:d6:87:3f:b1:ed:55:11:
         86:a1:49:aa:ec:3b:0f:38:d4:8c:da:f4:0d:fe:dd:08:65:49:
         44:c0:df:f7:2a:7c:8f:6a:ee:01:bf:21:4d:b2:32:9b:fe:6a:
         84:34:1b:40:af:23:21:d2:cc:e9:fc:f4:ba:b9:8f:76:1f:43:
         4e:ef:e1:8c:61:de:9c:3e:65:14:b3:5a:b8:81:b8:12:50:74:
         66:f0:2b:51:52:14:d4:7f:94:18:a8:48:ab:ff:7c:8b:ab:c1:
         20:53:06:29:04:72:19:71:7e:07:27:a9:e4:8e:68:77:00:77:
         6f:b6:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:56:27 2026 by rpki-client