Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
File:                     cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa (raw, json)
Hash identifier:          lcMYX7ie0poBUFWE3V2xgFcR15UsOzDhsvf0b3Yzi3o=
Subject key identifier:   B2:A6:6B:7D:D9:A6:1C:3B:64:46:88:3A:D1:23:D5:B3:BD:A7:BE:43
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584E428F26FD469700E9A4173800
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     23243
IP address blocks:        209.124.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:26:fd:46:97:00:e9:a4:17:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=b48b0e1a-51c6-4571-9864-1f32c009ebc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:bf:49:0e:47:ae:6f:33:d7:d9:30:0d:3d:
                    b5:75:45:26:4a:58:50:9e:bf:ca:5c:c4:8a:29:96:
                    6e:fe:9e:bd:8a:d5:51:42:9d:83:5f:d3:70:52:7a:
                    61:92:94:dc:df:1a:79:04:66:ca:4f:18:27:a8:f5:
                    02:c8:d2:6e:9a:66:e5:54:57:92:ef:db:3c:d4:3b:
                    8d:8d:c4:0f:c9:25:ab:76:df:7c:83:dd:9c:e1:ee:
                    2c:02:fe:32:d5:3d:7d:fe:95:d9:18:27:01:c6:e9:
                    49:c5:d6:93:92:ba:d8:73:ee:87:1c:69:1a:36:38:
                    04:d1:ed:c0:c2:2d:cc:81:59:ea:b7:fe:54:46:1f:
                    e2:73:ea:f1:b9:d2:37:6b:8d:f6:4c:a2:4d:1c:a6:
                    52:eb:35:72:15:4a:07:8f:c4:b6:03:f5:dc:cb:b0:
                    42:f1:2a:9c:3a:f4:9a:5d:c8:c5:37:4a:bd:a9:f6:
                    e8:07:29:69:d7:34:5d:a1:5d:b5:90:1c:22:c9:20:
                    44:71:9d:d8:89:27:34:01:4a:74:3f:59:d3:66:bf:
                    2f:b4:0c:7a:3b:fe:f9:a8:4c:c2:50:bb:93:52:17:
                    2d:bb:6f:b1:48:83:f5:09:0b:d4:b7:e0:16:2e:61:
                    39:84:ac:39:20:cf:a7:0b:d1:87:ae:65:4c:e3:70:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A6:6B:7D:D9:A6:1C:3B:64:46:88:3A:D1:23:D5:B3:BD:A7:BE:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:e6:db:78:61:5a:52:ff:51:e0:f9:df:dc:5d:b8:d7:32:
         d9:e0:ef:01:41:8c:b5:71:7a:c0:4c:bc:57:7f:03:35:ab:07:
         8e:cf:33:aa:1a:a3:eb:22:e9:64:a2:e1:70:85:f0:f4:3d:de:
         6f:8b:62:01:c9:12:d9:e2:f4:71:91:f9:5e:b4:6f:3e:79:11:
         53:50:87:94:13:c1:28:f2:bc:73:45:71:37:6d:79:d3:96:66:
         d1:29:ed:70:81:ba:7a:ee:32:8c:9a:ab:1f:41:7b:86:93:3e:
         db:1a:76:14:f5:29:e8:0f:f8:92:ab:31:72:55:d4:9e:b6:65:
         68:7e:d4:57:9e:1a:61:d2:cd:fa:24:8b:69:b1:a3:ec:be:f7:
         74:c4:1c:71:d9:ec:79:f9:b0:50:f3:2a:27:01:3a:0f:65:4e:
         79:22:23:f3:5e:06:14:31:87:f0:20:a7:7b:a6:63:86:eb:83:
         77:97:13:0b:f7:cc:8a:06:e5:e9:bb:c9:1c:04:44:bb:f8:59:
         9d:d5:ac:73:71:ab:f5:0f:b2:0b:b5:63:2d:cf:bb:58:ea:e4:
         2c:19:5d:fe:dc:79:2d:31:24:49:c5:f7:ab:e0:5e:a1:e7:3a:
         4c:75:40:88:b3:0e:f5:f4:3c:c0:66:ed:f2:40:d9:75:a6:7f:
         2e:7f:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:28 2026 by rpki-client