Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa
File:                     cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa (raw, json)
Hash identifier:          2JALYfnXRTNa+dfQE1CeEfv6xsCFGNfdGqXLOLX8/zY=
Subject key identifier:   13:50:65:8D:DB:5B:B9:7E:73:BF:C7:0D:64:31:84:F6:FB:44:42:40
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584E54B4A4EB5AFEA1B92BF5B8A0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     30104
IP address blocks:        24.38.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:a4:eb:5a:fe:a1:b9:2b:f5:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=a60c9fa5-3f46-4d05-a4b8-5708dbb360e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:25:a7:41:e6:b8:4b:1b:31:d8:0a:79:5e:8b:
                    2d:d0:a2:24:9f:aa:28:bd:8f:44:83:74:a4:50:2a:
                    8b:4e:e2:cb:9a:59:f6:e3:cf:1f:95:e0:57:5c:48:
                    7d:57:62:c2:ea:7f:27:e9:78:8e:21:ed:02:b7:d4:
                    b4:12:32:c9:f0:86:82:63:74:2c:27:a4:26:80:34:
                    43:51:9d:b6:16:c1:e6:59:b7:d8:42:fa:31:66:6c:
                    a5:98:4a:b6:0e:94:92:34:89:c5:52:33:86:b2:7d:
                    cf:d5:7e:ab:d4:43:3c:25:eb:d0:9e:7c:c1:5f:10:
                    7a:70:bb:29:64:09:7b:15:85:f5:5e:58:7f:5b:41:
                    33:10:bd:1f:88:b8:51:74:7f:04:8f:4f:bf:b3:38:
                    b4:a8:d9:cf:f5:70:1e:88:c9:d0:b5:f4:ff:86:9b:
                    48:30:67:fd:65:02:3b:05:b9:71:ef:bd:73:a5:bf:
                    e8:a7:55:c7:ec:e3:2a:2b:7a:95:cc:16:c5:1a:5a:
                    34:56:e3:af:e9:9a:e6:4e:f9:7e:6e:4b:08:dd:cb:
                    ea:c3:c7:30:a6:3f:ee:ee:27:e2:d8:2d:cc:2c:bf:
                    69:e4:44:bc:8b:45:21:81:4f:fb:b1:79:8d:50:44:
                    b3:6e:72:17:2a:4e:9a:84:25:86:56:9b:b4:29:f4:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:65:8D:DB:5B:B9:7E:73:BF:C7:0D:64:31:84:F6:FB:44:42:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:68:b0:96:31:37:54:0a:00:67:32:be:40:fa:a6:ab:00:
         6c:90:8b:36:01:7e:de:77:0c:4c:ab:be:3f:de:ad:af:eb:7e:
         a4:75:55:c0:7c:4d:d9:15:3a:9a:44:96:12:2d:b4:7e:1c:cf:
         86:60:77:61:bd:76:be:16:db:bb:2c:df:b6:5e:ef:ba:ba:b6:
         96:38:69:80:d5:ef:53:20:6c:71:6f:82:8f:4a:4d:e5:c2:10:
         fb:99:b5:21:78:cd:f1:5f:df:70:5b:44:8f:93:5f:fd:3d:0e:
         14:32:fa:bb:7d:0b:32:c6:6f:fa:40:b5:54:88:ce:03:ae:64:
         51:73:9c:d5:db:74:34:b1:15:73:c0:05:44:15:a0:59:b3:fd:
         70:ed:e0:0d:c1:7f:8f:1b:a3:9d:08:54:88:da:37:dc:98:4a:
         7c:56:85:16:8f:d9:30:50:1f:6f:c3:6d:39:35:a5:a8:b6:1e:
         cb:d4:70:93:33:a6:69:ee:d1:23:2a:75:28:fc:61:26:90:e1:
         6c:52:fd:0d:9d:8a:a3:33:58:eb:9c:bc:32:42:00:85:d6:46:
         a8:ba:96:08:07:0d:b1:72:1a:d6:e0:4a:ab:40:71:d3:2e:0d:
         c7:6e:dd:47:a0:34:43:c4:42:57:51:0d:0a:f4:26:7c:6f:b7:
         b8:02:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:43 2026 by rpki-client