Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/000024d4-74b1-34e3-9f40-3877f5fcc928.roa
File:                     000024d4-74b1-34e3-9f40-3877f5fcc928.roa (raw, json)
Hash identifier:          T9ty9BEZi/giZiHOlwgDoLlYQYLVmpSy3J/5eUvw1Qc=
Subject key identifier:   F8:1F:31:8B:34:01:BC:2A:61:EE:AA:B2:1E:7F:94:8D:21:67:2E:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4F1F60561D425F6AB366C5DC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/000024d4-74b1-34e3-9f40-3877f5fcc928.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        184.50.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:60:56:1d:42:5f:6a:b3:66:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=29977e5c-6f84-42f5-b9f8-35a6a6f87323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:b3:c1:09:1d:ae:db:e5:81:d2:4f:6c:42:
                    3d:f5:0c:01:7f:27:8e:c3:18:b2:c1:03:d3:de:90:
                    d8:35:15:cc:72:ae:da:b3:de:bd:3d:b4:79:45:bf:
                    1a:5e:42:05:90:5a:8d:de:f8:a6:48:fe:93:d9:07:
                    89:ad:88:06:82:61:6e:10:ce:f7:59:fb:fe:11:18:
                    e5:58:5e:f1:e5:87:93:89:24:ac:d8:75:6a:d3:ff:
                    a3:9f:10:2f:6d:fa:ac:81:61:3f:6f:4a:c9:02:bd:
                    56:1d:73:65:08:0e:9e:4d:f3:85:f3:73:c3:f1:c7:
                    0d:2e:c8:4f:de:8d:e7:e7:b5:92:e1:db:8d:f5:94:
                    e1:02:aa:19:54:11:f7:a8:9a:76:94:8b:4a:9c:8d:
                    6f:1f:2e:04:b3:f1:08:2d:f8:86:d5:8f:5c:9b:2d:
                    21:f8:9e:d8:76:e7:2d:b8:95:8b:b6:79:d3:6b:d3:
                    02:a9:67:81:64:19:65:c0:c4:2c:f2:81:5c:1e:65:
                    f2:7c:a5:00:b7:fe:e6:1b:74:2b:27:7c:93:f0:a9:
                    de:c5:18:17:84:b6:16:39:f6:6d:cd:31:07:6a:67:
                    14:2e:50:27:6e:fe:9e:2c:aa:0d:28:3c:cb:b5:65:
                    66:19:73:97:79:d9:ce:e6:ba:8c:a3:ea:db:56:1c:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1F:31:8B:34:01:BC:2A:61:EE:AA:B2:1E:7F:94:8D:21:67:2E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/000024d4-74b1-34e3-9f40-3877f5fcc928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:3a:6b:5d:48:38:c0:95:02:9f:05:00:1d:26:e1:99:f4:
         d6:81:77:59:ef:d5:5a:df:81:b9:91:62:1f:9f:64:f7:88:a4:
         c3:b3:04:0b:a8:0f:74:47:e1:1c:f2:cd:a2:46:59:f6:54:94:
         7f:b6:b5:96:8e:39:e6:56:ad:9e:38:0e:1a:be:ff:94:8d:b0:
         9c:d1:e8:0c:7f:12:95:f5:0a:15:77:0a:6a:08:33:3f:ff:dc:
         53:50:30:fb:cc:59:e8:e5:ec:87:6b:9d:6d:66:16:a5:65:e1:
         fe:20:c1:12:e2:b0:54:01:b8:84:68:c7:58:ba:f3:e9:be:11:
         4e:70:c1:e5:ec:89:84:81:bd:b1:0a:6b:14:27:1d:0d:10:31:
         65:bd:ef:d8:94:80:a6:0e:40:bc:9b:1b:2e:6a:c2:b9:de:25:
         91:9e:b9:70:28:c4:09:cf:cd:9e:e8:58:a5:5d:38:2e:85:47:
         43:37:f2:43:85:3a:69:c0:16:b6:67:4f:d2:b9:4a:b0:aa:ec:
         1e:26:6e:7b:5e:2e:89:e8:c8:14:a0:8b:ef:5a:89:58:b7:f4:
         2d:ce:ed:9d:49:4f:63:72:66:47:ab:41:f1:82:90:75:fe:73:
         75:79:5e:e0:6d:22:02:60:cb:81:8f:cc:63:d6:e0:5b:82:e7:
         5e:ea:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:15 2026 by rpki-client