Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa
File:                     83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa (raw, json)
Hash identifier:          LppnMVklHlWoYQ2uHp928dzfcvwffGwW09onA7dtW78=
Subject key identifier:   A4:E3:39:CC:5E:59:71:5A:E2:62:D0:A7:13:B4:9C:D0:C1:5A:FD:8F
Certificate issuer:       /CN=2ac961ff-f406-4f80-b06d-e1284358815a
Certificate serial:       010D0C9F4328584DEC2F42FB7F837C759BD93B00
Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa
Signing time:             Fri 22 May 2026 22:27:34 +0000
ROA not before:           Fri 22 May 2026 22:27:34 +0000
ROA not after:            Sat 15 Aug 2026 22:42:46 +0000
asID:                     11096
IP address blocks:        108.59.21.0/24 maxlen: 32
                          108.59.24.0/24 maxlen: 32
                          108.59.25.0/24 maxlen: 31
                          108.59.26.0/24 maxlen: 31
                          108.59.27.0/24 maxlen: 31
                          108.59.28.0/24 maxlen: 31
                          108.59.29.0/24 maxlen: 31
                          108.59.30.0/24 maxlen: 31
                          108.59.31.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:2f:42:fb:7f:83:7c:75:9b:d9:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a
        Validity
            Not Before: May 22 22:27:34 2026 GMT
            Not After : Aug 15 22:42:46 2026 GMT
        Subject: CN=8a73eb99-a0c0-4e49-b43f-9092bd74e354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:06:48:ad:8f:79:d8:e6:ad:e4:90:80:e1:
                    af:b7:5d:45:c0:0f:51:24:f3:bd:e9:6f:0d:68:fc:
                    f4:8d:56:64:ed:ee:15:9f:7a:4a:a3:81:c8:c7:61:
                    40:c1:3c:9b:db:9e:7d:1e:a3:c9:0f:97:38:9d:55:
                    86:ce:c9:5b:08:31:cc:af:3c:45:7f:bd:c7:0b:64:
                    48:4a:82:84:a4:0f:b2:09:38:35:c7:eb:66:38:08:
                    02:ce:9a:6c:01:92:8d:49:50:81:15:7e:a5:d1:a8:
                    0a:34:b6:6b:15:0c:96:f7:9c:10:a9:2a:a3:9c:4e:
                    09:e5:97:fa:7d:60:7b:4f:d5:bb:69:62:d7:49:ec:
                    09:43:5a:d2:34:cd:e6:cb:99:9d:d2:e5:7c:91:41:
                    e6:31:0e:a7:10:c6:6b:ec:9f:ff:0a:5c:b6:22:74:
                    9e:f6:38:26:82:ad:62:09:e3:55:51:53:00:ae:98:
                    79:be:6e:5f:88:25:a7:ea:56:84:a4:68:98:16:17:
                    67:3b:59:5e:c5:a8:45:f0:fd:87:1e:26:63:d6:23:
                    91:f2:cb:d7:0c:09:ae:7d:0a:ad:42:7f:c3:fc:b3:
                    b0:a8:ab:7c:79:c2:0b:a8:a8:c9:b9:df:2a:f7:75:
                    45:09:bf:57:21:b3:4c:2c:23:4f:13:3d:3f:f7:d6:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E3:39:CC:5E:59:71:5A:E2:62:D0:A7:13:B4:9C:D0:C1:5A:FD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/83ee6b6f-44f2-30a8-8b87-259bc8643cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl

            X509v3 Authority Key Identifier:
                keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.21.0/24
                  108.59.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:d0:1d:cd:11:97:90:fc:1c:4b:76:73:49:bf:8b:49:41:
         0e:c1:70:57:25:e2:60:b9:40:3c:f7:85:a1:37:bb:ef:17:9f:
         0b:af:61:c5:55:d7:64:73:1f:c5:38:02:44:4c:49:03:b0:5a:
         1d:02:fe:ab:50:de:16:42:6f:a5:ff:f3:e2:6b:7b:ef:20:ff:
         27:ee:cf:fc:1e:32:d4:9a:8d:01:98:dd:a4:27:78:ca:9b:40:
         7c:a8:f7:59:68:6e:46:bd:8c:ee:bd:51:cd:b9:56:a1:83:48:
         20:0e:6c:73:cd:ca:7c:93:43:ce:7a:09:17:a0:1c:2f:cd:2b:
         8e:7a:22:d2:6f:ad:ae:74:00:48:e2:c0:f1:aa:e7:1c:12:1a:
         ee:86:77:50:d8:ab:d4:65:f8:ac:64:ac:7b:db:15:6d:bf:5a:
         f1:8d:c7:81:e9:4c:29:d4:08:4d:09:40:cb:44:72:39:12:3e:
         5d:c5:53:2c:ff:3e:5c:25:36:0c:23:b1:a4:e5:d7:4a:03:31:
         13:9a:41:bb:9a:9f:4b:0f:87:73:95:dd:49:0e:ca:32:79:15:
         2a:ef:81:a4:77:16:52:14:85:c7:1f:aa:53:0a:ab:03:38:ca:
         cb:2d:05:ec:04:dc:22:e5:fd:a8:89:35:b4:07:c2:2b:24:02:
         66:10:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:44:24 2026 by rpki-client