Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa
File:                     2c11259a-f9d0-312c-a546-57c810ca6a5b.roa (raw, json)
Hash identifier:          hgF9bjaHcIMyoUQgKFISGWN0f1QO/kTciWNf6AKrFk8=
Subject key identifier:   5E:26:42:81:CE:B3:C7:9B:F2:FD:08:12:EE:A0:24:0B:FE:90:9D:0F
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584DEF45E0535E86EF7961E80D80
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     27425
IP address blocks:        209.137.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:e0:53:5e:86:ef:79:61:e8:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=2915cff6-2707-440a-91e2-147b95aabd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:48:f4:57:eb:d8:5f:73:75:82:6a:6e:54:
                    e2:d0:85:2f:86:6e:31:32:8a:bf:e9:73:31:12:ba:
                    e2:3e:d3:a7:c6:fc:6e:4f:82:e7:1d:f9:66:8b:d7:
                    5c:a7:e9:f0:55:ec:0e:ac:a7:c9:b0:21:dc:cc:c9:
                    f6:4d:99:19:1a:f0:aa:d0:d9:7a:01:a6:8a:43:be:
                    f0:cd:57:e0:e4:5d:bd:de:8a:52:41:17:d7:87:e2:
                    50:5b:de:c8:a0:4b:dc:97:d9:96:19:1b:60:61:98:
                    22:2a:09:dd:a2:1f:eb:96:28:f2:8a:26:93:ee:b1:
                    7f:49:15:f4:82:15:6e:a7:d2:fe:dd:b3:01:d8:ba:
                    c1:f9:2e:42:3a:01:f7:1e:c7:c7:a7:8c:9c:35:8a:
                    16:a3:5f:f5:5a:ee:f1:fd:96:8c:a3:33:e5:32:9d:
                    0c:73:01:14:9b:c1:59:6f:c0:91:d2:0c:6e:b4:77:
                    fe:96:2f:a2:70:a4:65:8c:d2:6f:03:3b:66:c6:1e:
                    f0:f7:06:33:0e:78:57:6d:08:7c:df:71:54:5c:87:
                    c2:c4:e2:58:39:cd:62:87:0c:3b:04:02:b9:5e:82:
                    05:05:db:43:f7:3b:c5:86:de:74:fd:6b:d7:91:41:
                    3c:75:19:10:47:27:01:fd:61:18:c3:23:49:7c:cf:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:42:81:CE:B3:C7:9B:F2:FD:08:12:EE:A0:24:0B:FE:90:9D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.137.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:66:6d:d5:80:72:d2:39:be:0d:12:07:f0:4f:0c:fb:c9:9f:
         a6:e0:be:3e:74:cd:01:00:25:a2:3f:e2:66:ed:ec:be:84:06:
         48:45:de:91:29:54:2f:ca:f7:d2:b5:e0:53:e8:17:58:d3:f9:
         e5:63:2d:5f:d7:e1:ef:9b:a3:04:3c:ca:c8:49:8f:b0:c5:15:
         0c:f0:20:e5:cc:d8:49:2c:24:23:5c:1a:cb:8b:1b:2f:0c:fe:
         13:ef:e2:80:ba:eb:87:40:3e:dd:28:96:36:47:d8:44:e9:af:
         d9:ea:2c:ec:b5:08:60:5c:58:42:83:3a:7f:bd:93:66:50:42:
         a9:00:1f:44:76:9e:57:79:fc:96:b9:dc:00:a6:b0:2f:6a:68:
         39:20:db:b9:7c:10:7d:e9:ea:33:2a:fa:ca:e2:a5:a2:6c:30:
         c6:12:38:fc:6d:8e:76:28:46:4d:0b:72:0f:98:3f:5d:66:e4:
         59:29:7c:ab:cc:38:b7:1b:9b:23:e7:9a:79:65:b6:c8:31:18:
         d2:f1:a5:9e:76:3b:e2:18:bf:49:9c:3d:2e:dc:01:8f:b3:12:
         08:d4:5c:15:cd:63:ad:3c:f1:fe:8c:c4:84:e7:b7:42:33:1b:
         82:4e:34:60:a0:ac:95:b3:d3:b5:7f:9d:c7:77:45:2f:e1:89:
         87:f9:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:06:30 2026 by rpki-client