Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/ea37fa1d-ed71-3039-a3b3-2d326934a7f3.roa
File:                     ea37fa1d-ed71-3039-a3b3-2d326934a7f3.roa (raw, json)
Hash identifier:          StnhGyqtujZVOgbbWmlC4zrzaUpkr83f7uY+shBdYK0=
Subject key identifier:   9B:8B:14:1C:48:44:84:7D:BC:06:58:C1:87:51:29:94:68:31:F2:67
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584E317377693449C41755AA9900
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/ea37fa1d-ed71-3039-a3b3-2d326934a7f3.roa
Signing time:             Tue 16 Jun 2026 17:55:46 +0000
ROA not before:           Tue 16 Jun 2026 17:55:46 +0000
ROA not after:            Mon 14 Sep 2026 17:55:46 +0000
asID:                     21713
IP address blocks:        209.166.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:73:77:69:34:49:c4:17:55:aa:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Jun 16 17:55:46 2026 GMT
            Not After : Sep 14 17:55:46 2026 GMT
        Subject: CN=f0384bdb-69c9-4a6e-b2c2-3ba6185d19ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5a:75:20:28:6c:81:e2:42:3c:54:2b:30:44:
                    60:fe:f9:f9:5e:93:ee:ea:3f:ca:54:a6:25:3c:4c:
                    79:ea:70:c9:60:b9:e6:ce:e5:32:fd:81:c5:ff:11:
                    52:ba:0c:b7:de:61:d5:0f:2d:4b:83:bd:b5:27:c4:
                    47:10:fc:32:2b:c4:62:12:9a:72:88:9a:a5:c9:5c:
                    9f:8e:2a:97:58:3e:2c:44:e0:03:57:dd:6f:61:27:
                    47:6c:37:15:a8:e3:7b:d3:db:d7:69:6e:c5:e0:a3:
                    9a:8b:6d:2c:a7:03:ed:cb:5b:9e:ce:17:c1:b8:ac:
                    01:05:51:da:f0:13:a0:35:8f:d4:5c:1a:f0:dc:fc:
                    9d:b7:4d:63:14:60:7c:79:63:e1:69:41:07:91:1e:
                    1c:1e:c0:0e:8c:fa:cf:9b:f0:ff:9b:68:cf:17:89:
                    78:7c:6e:35:28:b7:09:f9:ee:2f:ab:03:ac:3e:55:
                    dc:46:5f:3d:5e:fd:86:19:f4:8a:6c:21:a2:28:1b:
                    bc:f4:67:29:89:a4:8a:b8:3d:2c:8d:cd:27:6e:24:
                    68:10:af:e2:f2:d8:b9:33:37:b6:68:3e:ad:9e:53:
                    ba:85:42:63:06:8b:de:0e:ad:ea:e6:94:e7:8e:7c:
                    1f:5b:56:bf:3e:a9:a9:95:3a:a7:1d:77:b1:b0:62:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8B:14:1C:48:44:84:7D:BC:06:58:C1:87:51:29:94:68:31:F2:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/ea37fa1d-ed71-3039-a3b3-2d326934a7f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.166.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6e:de:33:ef:ab:03:66:a3:db:a4:63:3e:30:21:4a:bc:30:
         01:8e:83:8d:49:25:68:0f:f1:e0:2c:b9:69:cd:5f:56:fa:98:
         ad:c8:aa:0e:9b:28:20:ae:2a:92:9c:26:1e:02:d5:8f:9d:c2:
         e3:d3:83:ec:96:a0:b9:47:20:66:29:ac:4d:53:b7:09:30:e8:
         70:af:fb:2c:30:17:4f:a1:c0:a2:0c:e1:74:9b:10:5a:0f:31:
         63:88:ab:6e:00:d7:c2:53:94:81:0f:ed:74:55:8a:f6:a3:c0:
         ab:66:e2:f3:98:c8:c9:1d:d6:7c:ce:80:05:17:5c:0a:1b:2b:
         d8:aa:e4:67:57:08:d0:ea:f1:c7:73:a8:4c:9f:27:43:90:a9:
         11:1f:18:7e:75:a7:7a:1f:6e:43:00:00:5f:60:44:cc:e5:a2:
         09:47:8c:2c:9f:02:0e:97:49:12:8a:44:e7:ad:79:59:77:88:
         33:30:11:72:f9:f2:6d:67:9a:63:f2:6c:96:5c:e8:74:ac:4c:
         e5:09:4c:20:77:a1:e4:2a:42:0e:f6:15:70:fa:ac:09:70:d1:
         70:66:cd:34:d3:6a:b3:a4:df:e5:86:38:3a:84:25:7b:d8:ef:
         b5:6d:be:4d:a5:f1:f8:15:3b:28:13:1c:c1:54:98:97:d0:7e:
         a7:ad:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 22:23:31 2026 by rpki-client