Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa
File:                     b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa (raw, json)
Hash identifier:          AoWY+v1tFcdT8eRaNNg6n0GKL2Mh1/BPnCgvCSTLJBc=
Subject key identifier:   DD:ED:72:38:6C:98:6F:15:E1:98:AE:B9:50:FC:FD:92:49:07:D3:33
Certificate issuer:       /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
Certificate serial:       010D0C9F4328584E561A107E3C11B3824483F680
Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        149.24.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:10:7e:3c:11:b3:82:44:83:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=210047cf-e4cf-4781-85d8-4d7bf1aeec89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:3e:48:03:50:c4:96:ba:2a:64:b8:5d:18:
                    d0:5f:bf:7e:a1:62:49:69:0d:47:a3:43:9b:f0:47:
                    93:3e:17:9c:55:97:8c:4c:32:66:04:bd:45:d0:28:
                    ab:4b:16:3a:b0:0b:ce:78:64:74:64:66:cf:df:fe:
                    73:b1:e2:a4:4e:59:0d:a5:fb:bc:c8:52:68:d3:4b:
                    87:36:9e:73:45:4b:54:5c:c7:e9:e1:18:13:36:a4:
                    23:b6:d6:93:f8:53:7b:a1:b2:ac:8f:d8:01:f7:50:
                    0e:04:c5:37:b9:b2:15:e3:ea:a9:84:30:b0:b5:00:
                    c9:33:e7:4f:44:a1:12:34:48:df:58:ca:d6:d1:c4:
                    94:c9:e2:9e:54:9a:c7:7b:cc:d2:82:ed:62:bf:cd:
                    ad:1a:1a:67:88:2f:6a:61:eb:6e:91:a0:f3:31:80:
                    fc:aa:5b:af:b3:c2:dc:7b:81:cd:e6:98:f4:7e:d7:
                    45:d5:5f:e8:a3:f3:68:1d:46:87:e7:1c:32:05:0a:
                    23:7d:ad:0c:39:d0:ed:92:8f:3a:9a:7f:51:0c:d2:
                    f7:17:96:51:f7:96:af:4f:b6:5c:84:54:8f:88:80:
                    33:ba:5b:6a:72:c3:3f:f4:38:6a:6d:5a:15:93:9c:
                    6b:72:90:e5:07:67:2a:32:cc:1a:11:ad:60:27:a8:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:72:38:6C:98:6F:15:E1:98:AE:B9:50:FC:FD:92:49:07:D3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/b30d0cf3-5bc3-33cb-b512-60884486ed5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl

            X509v3 Authority Key Identifier:
                keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.24.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:a3:6d:f1:f7:45:e4:c7:31:b4:41:58:92:80:26:71:c5:
         49:a6:c7:49:f1:99:0f:41:a8:3f:e9:88:f8:6b:a5:5e:56:f6:
         87:a8:56:3f:de:6b:f7:4d:2d:ae:27:bd:e1:a1:ff:6e:fd:62:
         d7:9c:d7:f0:3e:c7:fb:00:32:d4:e5:e6:50:ca:eb:21:0d:0a:
         53:c0:68:33:23:cc:c2:ee:b8:6a:e6:d1:a8:39:fa:99:4b:67:
         8f:22:ac:57:27:be:d1:6b:be:d9:de:03:da:27:76:4c:6c:0e:
         80:e2:9e:f4:fc:bb:52:51:d5:16:70:9d:f0:00:a3:38:be:f6:
         96:d9:2a:32:40:84:dc:7a:93:cf:c9:c4:51:49:9d:01:a9:e0:
         32:35:12:35:46:86:4a:3c:30:5e:88:c1:f4:5c:4d:12:e0:ba:
         a7:76:03:32:65:84:69:4d:15:aa:60:23:99:93:ad:d5:8e:89:
         66:71:0d:c0:0c:e5:ed:38:73:f7:6d:72:7a:d6:c2:24:c3:a1:
         3a:48:c7:67:57:59:c4:b3:44:2c:a9:78:31:31:05:f2:17:fc:
         93:cb:19:29:69:7e:8b:54:b1:aa:40:fc:70:f9:a0:e6:a8:87:
         1d:24:ad:1d:85:c4:d5:62:a0:7e:ed:14:20:18:ab:a7:62:53:
         cb:68:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 01:20:10 2026 by rpki-client