Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493c6431-c526-3a76-8236-0579968e0ed7.roa
File:                     493c6431-c526-3a76-8236-0579968e0ed7.roa (raw, json)
Hash identifier:          LqXpF1LYA/j+rhrn6kUKfuMKrrDml4jACNof8uRQhC8=
Subject key identifier:   5E:B1:CA:26:C4:4B:29:99:05:B7:0B:F2:56:30:85:77:44:A0:65:1A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6145125BE57F14B08C16A960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493c6431-c526-3a76-8236-0579968e0ed7.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        184.24.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:12:5b:e5:7f:14:b0:8c:16:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=e9e1b6f7-44da-4baf-8a11-ad9ed7ef4802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:35:5e:4e:5e:8d:bc:58:01:7f:4b:f6:8a:
                    f3:53:9d:5b:d0:c5:18:9f:d9:8a:20:7e:e6:87:9b:
                    c9:55:84:a7:99:a1:90:63:9b:f5:d7:e7:14:61:38:
                    a1:f6:e3:85:da:de:8d:76:82:01:b6:fd:82:86:97:
                    c3:03:ec:6b:b6:8d:40:46:4b:18:96:b3:52:19:cd:
                    b1:2f:3e:64:ff:e7:f9:c3:39:3b:d4:3e:31:29:56:
                    af:b4:5d:db:45:53:f0:26:3d:b5:2b:ba:ee:88:e5:
                    be:74:c3:38:44:ef:ae:27:3b:c2:2f:fb:3f:29:8b:
                    6d:c9:99:c6:a1:ab:0c:03:bf:76:4c:fd:a5:12:df:
                    7a:7f:ab:a4:1c:c9:27:eb:39:a6:52:59:5d:71:2e:
                    24:f7:94:07:6b:b8:46:71:ef:92:4b:b1:ce:9b:a1:
                    a9:fb:0f:a4:2b:5a:f7:ff:69:69:6f:52:35:ab:69:
                    96:8a:92:f3:94:f2:f1:65:24:a7:b1:22:99:4a:94:
                    0a:bc:87:7f:94:4b:93:a4:ce:8f:b0:00:3e:e8:ae:
                    3b:32:6c:a3:af:84:ea:e2:1f:db:2a:13:fc:09:41:
                    dd:fe:c1:0b:27:bc:0d:1d:ab:e4:95:07:53:7a:65:
                    fe:bb:8e:40:c5:17:12:e3:92:09:f6:53:86:81:05:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B1:CA:26:C4:4B:29:99:05:B7:0B:F2:56:30:85:77:44:A0:65:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493c6431-c526-3a76-8236-0579968e0ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.24.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:c2:aa:33:a6:23:0a:32:8c:f5:c6:65:ac:b3:be:20:58:
         db:23:c2:ed:c8:62:a9:26:bc:46:ba:71:8b:e0:95:f0:79:89:
         45:09:db:e9:c5:8e:e8:1c:25:82:14:10:de:ce:91:cb:b3:6a:
         b0:1d:93:c4:00:f0:3a:5c:ce:09:15:f9:e4:67:d3:bc:76:3d:
         74:75:79:51:7d:fd:90:d4:b4:d2:22:82:00:3d:8f:5e:bf:66:
         11:67:a6:ae:84:30:90:0c:d4:50:98:61:5c:c6:26:c4:71:46:
         0f:e3:43:0d:95:c0:8c:ae:ee:85:81:9b:ff:c5:f5:80:44:d4:
         28:b9:3d:f2:18:c5:5c:5c:71:f5:64:17:16:e8:69:f8:a5:9c:
         63:9f:b4:86:9f:70:37:e8:cc:f9:9c:9c:5c:15:d3:9f:36:7c:
         15:e8:47:1b:97:c6:17:b9:e7:89:c2:32:ef:06:bf:d4:1f:54:
         75:4d:cd:e1:b6:86:cd:ac:70:38:ff:ea:0a:77:b6:cf:0e:9f:
         3f:bb:0a:73:d0:56:6d:79:81:7e:c9:0f:93:71:73:18:32:c5:
         ef:a3:0c:c1:36:fc:0e:7f:01:d3:6a:0c:9b:06:cc:38:87:59:
         80:37:31:a6:12:5b:4e:50:c4:f3:42:2a:5d:ba:ec:2b:a6:e2:
         db:41:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:47:58 2026 by rpki-client