Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/3d4ddf6d-f62c-3025-a755-089e7c0950fd.roa
File:                     3d4ddf6d-f62c-3025-a755-089e7c0950fd.roa (raw, json)
Hash identifier:          wCpsLXPyhqmjS9zYjndAqUMxagiKwqxQR+DqnOKyFwo=
Subject key identifier:   86:8E:D2:43:05:DE:03:BC:CF:56:2C:22:C9:DE:2C:52:0E:98:FE:33
Certificate issuer:       /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
Certificate serial:       010D0C9F4328584DFBD50AE874F652BE0B76A5C0
Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/3d4ddf6d-f62c-3025-a755-089e7c0950fd.roa
Signing time:             Thu 28 May 2026 12:58:44 +0000
ROA not before:           Thu 28 May 2026 12:58:44 +0000
ROA not after:            Wed 26 Aug 2026 12:58:44 +0000
asID:                     21669
IP address blocks:        209.212.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:0a:e8:74:f6:52:be:0b:76:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9
        Validity
            Not Before: May 28 12:58:44 2026 GMT
            Not After : Aug 26 12:58:44 2026 GMT
        Subject: CN=0e1fb6a3-52d9-4191-b8ed-b30a974226a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:21:57:a0:b3:13:d1:3f:06:7d:2c:9b:4c:
                    33:cd:bb:f3:75:b7:bf:a1:c6:bd:ef:4c:ff:6a:b5:
                    a0:7d:c7:32:73:81:36:c2:c1:ef:16:87:9c:5e:16:
                    5a:41:02:24:aa:f9:68:df:84:ac:70:f2:19:6d:cb:
                    73:41:9a:30:3a:9d:4e:13:e9:a9:70:d4:b4:4c:a9:
                    be:4b:53:a2:56:12:0f:4c:ec:e5:38:25:df:ad:af:
                    ef:99:26:cf:7e:e7:6e:04:dc:eb:fd:cc:b4:f3:83:
                    cd:41:73:dc:40:d9:5e:b9:b4:6b:56:07:45:51:ff:
                    bb:25:b6:4f:b9:78:66:33:df:fd:bf:e0:34:0b:0f:
                    bf:24:52:ef:78:1e:de:05:8b:15:56:59:a0:f7:25:
                    1e:82:f4:da:d9:de:4b:3f:f0:72:6b:1d:33:5d:5c:
                    c0:c7:95:95:5b:4a:2d:5b:f8:82:cb:39:ea:d7:a6:
                    71:74:35:fb:1b:70:41:03:7c:cf:56:c9:ed:32:0f:
                    a1:eb:16:af:db:c1:b0:5f:21:6f:55:5f:b7:a2:48:
                    67:0a:a2:99:92:a6:13:49:14:4c:0a:08:6b:f0:a1:
                    2d:d4:1e:22:4a:c6:ad:5a:78:c7:ac:6e:65:ab:85:
                    d0:d7:fc:83:b4:e9:5d:c9:61:ff:1c:7e:cb:c6:2c:
                    81:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:D2:43:05:DE:03:BC:CF:56:2C:22:C9:DE:2C:52:0E:98:FE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/3d4ddf6d-f62c-3025-a755-089e7c0950fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl

            X509v3 Authority Key Identifier:
                keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:fd:3c:4e:86:51:2a:4a:4e:d6:58:3e:5e:52:73:f4:ea:
         05:b9:c8:e6:85:3b:dc:a4:d1:53:ba:cc:d7:20:8a:7c:50:1a:
         7c:64:7e:3b:4f:5c:ad:e7:65:72:49:a5:e1:29:54:56:dd:c6:
         7f:d2:e5:c2:43:8c:30:8c:1c:c2:d7:9e:34:1c:77:ec:68:10:
         d7:e9:6a:59:6c:39:b7:e3:95:78:20:39:89:27:7a:19:a6:cb:
         12:39:be:78:05:01:88:e5:56:ce:69:16:95:96:ff:c7:91:9d:
         c8:16:d1:0c:ae:4f:09:9b:ea:9e:23:44:4b:8d:3f:f4:f9:75:
         ea:8e:4d:9a:4e:69:8e:7b:28:4e:2c:e6:42:c8:1d:19:62:2d:
         08:fc:99:6d:21:83:9c:ef:0b:77:a9:c9:a4:86:76:d6:fd:34:
         03:34:08:d9:ac:bc:e9:ad:db:03:fa:3f:4a:90:1f:da:e0:72:
         01:c2:6b:6a:ec:93:e4:57:9a:81:6c:92:61:9a:b5:fb:e8:7b:
         42:4b:3d:28:f6:be:99:f0:e3:d4:46:d7:a5:54:ca:0c:5e:ac:
         85:ac:2a:10:31:84:d0:d1:f6:d6:24:87:eb:41:c5:d2:80:53:
         38:02:a7:80:b9:f3:1f:05:bc:33:c4:8f:24:39:ef:ad:f4:d4:
         83:59:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:00:08 2026 by rpki-client