Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa
File:                     5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa (raw, json)
Hash identifier:          96yzikC3LaPquOUyiYusxvl7KI48v5lXb6tu0IYr3PE=
Subject key identifier:   86:D6:4C:CB:1D:80:3B:4F:C5:79:20:E2:69:72:A8:4B:CE:81:24:64
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584D2A74E0606EDFDF09E94DEF00
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        72.0.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e0:60:6e:df:df:09:e9:4d:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=7ebb0fd2-4881-4695-9bb7-a6ea5337005b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:82:30:8a:4f:9d:8b:e7:31:18:af:85:41:
                    9f:41:1b:a3:f3:1d:bd:07:17:fd:cb:78:60:67:88:
                    66:24:aa:ec:95:65:0d:52:36:e7:56:4f:30:f2:d9:
                    47:a9:eb:db:b9:9e:60:e4:a0:d2:9f:ff:8d:0d:56:
                    15:ab:39:fc:a5:37:cb:16:c5:5b:97:68:4a:0b:e9:
                    e4:50:f4:f7:51:85:2c:75:7d:73:a8:9f:c0:0b:ad:
                    de:98:96:c7:16:28:a4:7b:b2:c2:3d:ee:16:fd:d4:
                    e9:5b:f0:97:b6:f7:36:ed:7a:62:9e:3d:48:01:aa:
                    5a:6c:75:25:7e:ed:04:9a:ba:58:21:04:1e:17:aa:
                    5e:b2:2f:60:81:6f:1b:8c:55:59:7c:b7:c3:e4:7a:
                    1e:ed:83:6b:ef:9c:4b:98:18:f4:aa:8a:53:f9:49:
                    e3:ff:32:67:07:f2:75:7c:af:12:cd:a3:26:a0:96:
                    e9:68:a6:95:c0:4b:7c:d9:ab:ce:10:c8:04:ca:e3:
                    ca:cb:c1:12:bd:2e:6d:37:f5:55:55:7e:56:01:7f:
                    b5:b0:73:ca:3d:19:5d:48:8b:5f:36:14:56:e2:23:
                    bc:1e:45:40:b0:e7:d9:56:96:9f:fc:e2:65:47:68:
                    7a:11:f9:40:59:94:ad:b6:1a:cf:a3:b1:21:39:b4:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:4C:CB:1D:80:3B:4F:C5:79:20:E2:69:72:A8:4B:CE:81:24:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/5ef24ba0-53e4-39a4-9e82-2a1ff0078706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.0.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:82:e6:7d:a0:7d:3c:30:c5:a2:44:c3:1f:b3:2d:54:fc:ab:
         8c:87:2f:00:6e:83:4a:84:03:42:cc:7d:80:65:ac:f9:22:1f:
         2c:eb:70:de:4a:14:ab:d0:66:48:29:ee:33:b3:24:e5:a6:44:
         1b:34:85:4e:13:90:1c:9f:a2:9f:c6:ae:1b:e8:4c:67:f9:a5:
         23:8e:de:50:ca:94:4a:5e:26:c2:73:6d:c6:e7:e8:b3:4a:a6:
         eb:0f:07:53:0a:ac:88:82:49:67:ff:e5:bf:31:c5:44:71:5d:
         1c:ef:57:9f:78:c5:bc:51:20:42:43:b0:35:c2:c2:6b:97:37:
         0a:4f:b0:a1:10:7b:88:80:72:65:23:1e:28:e1:3c:7d:05:bf:
         95:fd:c7:73:64:7e:92:78:dc:05:d0:e4:49:91:e5:a9:39:5a:
         57:91:0a:7b:3d:70:b7:b3:f0:8e:23:1f:c0:a9:ca:c1:4b:0c:
         ac:57:c8:2f:13:66:d1:f3:de:fa:14:b1:06:ed:18:e8:bc:bd:
         84:4b:05:46:d9:60:a1:f6:ab:ed:bf:7d:e6:cb:5b:c2:e5:9b:
         04:d5:2f:67:9c:0e:fa:1b:8d:16:38:96:6a:3c:8d:77:38:6f:
         3a:b7:a3:47:36:2b:7a:97:a4:33:e9:38:37:b7:63:be:cd:34:
         00:bc:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:36 2026 by rpki-client