Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/ebd27402-99a6-3685-8986-3306efcb0cd3.roa
File:                     ebd27402-99a6-3685-8986-3306efcb0cd3.roa (raw, json)
Hash identifier:          38PU5cbNxAnZZp38ewsCKNz/Mm4Hguv+oSlTwecxkhU=
Subject key identifier:   0E:82:63:75:6D:1D:00:C0:B0:B2:BE:FA:1E:F1:57:F7:6C:6A:32:DD
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E04360D6F05742B80051608C0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/ebd27402-99a6-3685-8986-3306efcb0cd3.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     6079
IP address blocks:        24.214.187.0/24 maxlen: 24
                          24.214.188.0/23 maxlen: 24
                          24.214.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:0d:6f:05:74:2b:80:05:16:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=d8c71ab2-86f2-4f5b-aaf2-0a7684473e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:3e:a5:bb:a3:2a:2c:a2:5f:c2:b1:e0:94:
                    93:41:85:f6:d9:05:ae:c7:1d:7b:7a:fd:68:57:58:
                    cb:35:c7:c1:02:7e:71:55:29:fa:bb:1c:95:e3:a6:
                    56:8e:72:80:35:4b:0e:7b:ed:e1:fd:cc:d4:b3:b3:
                    f3:f0:08:f1:8f:68:f0:0b:4d:80:cd:9f:77:d5:e6:
                    88:86:1b:5d:83:11:55:8e:80:a8:16:5d:82:36:69:
                    0f:65:3b:aa:07:41:8f:71:cd:41:3b:6e:c6:80:bf:
                    b1:cb:0d:58:36:4b:02:04:44:d2:25:79:a0:6a:3d:
                    52:f8:72:3f:29:76:fe:7d:de:d2:f5:3e:8f:45:e9:
                    69:42:ac:11:7f:23:84:d8:6b:87:a3:c6:4f:26:76:
                    9b:7c:82:6e:98:10:f0:e7:ba:d3:93:e8:2b:4f:82:
                    c3:4c:9b:83:47:8b:83:0e:e5:5f:0e:90:2c:33:e9:
                    43:03:6b:e8:05:01:7c:9f:84:7a:2f:63:3f:a8:68:
                    01:33:c3:55:d5:d5:7a:22:b3:d9:0f:a3:82:b7:74:
                    b2:22:e4:1d:22:66:ac:b1:4b:9e:9b:63:ef:58:d6:
                    9a:44:b4:3f:41:89:19:59:eb:60:71:23:39:81:2e:
                    c2:65:c1:ea:9f:70:51:33:93:da:a3:c2:6b:73:5b:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:82:63:75:6D:1D:00:C0:B0:B2:BE:FA:1E:F1:57:F7:6C:6A:32:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/ebd27402-99a6-3685-8986-3306efcb0cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.187.0-24.214.190.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:94:22:e5:8d:5e:8c:1e:ad:d8:9a:b0:a5:9a:c5:a1:16:bd:
         92:3f:25:47:b2:33:97:d1:6b:f9:c3:c1:df:90:e0:f4:d9:9a:
         2d:8d:16:d1:a1:d8:b9:a4:3f:1f:07:f9:05:84:bf:24:22:53:
         be:e2:bf:3c:c0:a1:34:67:91:a8:a2:49:d4:3d:59:cf:bf:cf:
         07:a6:6f:87:c7:ae:7f:81:90:6e:7d:40:a5:4f:6c:47:45:49:
         65:39:06:2d:1a:02:9c:7b:aa:64:f7:9d:b3:66:6d:94:ed:b2:
         12:93:aa:d3:11:0b:a7:a3:cc:6f:6e:cc:dc:ba:14:b6:cb:8d:
         71:a6:db:e9:4f:5b:f5:ba:62:f9:97:50:80:5d:92:59:68:ba:
         3d:99:1e:30:a8:b9:64:d8:1c:35:74:44:fd:69:aa:34:4c:82:
         38:ff:0f:43:a1:69:01:68:4a:05:38:91:dd:fd:d8:e0:25:63:
         d8:a0:0c:e4:66:ad:32:82:b9:ee:3c:99:0b:6c:d6:66:67:c2:
         12:dd:5d:bc:73:0f:a9:2f:81:b5:d5:e5:a3:7d:4f:01:b9:ae:
         9c:dd:6c:8d:27:7f:c5:24:ba:70:17:a4:ff:2b:dc:96:e3:61:
         ef:51:ab:eb:bd:7c:a7:0e:33:14:6f:28:54:ab:8a:e4:f6:49:
         eb:35:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:11:21 2026 by rpki-client