Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa
File:                     e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa (raw, json)
Hash identifier:          X4pANE8Nrjh2OlCOmfpOhCume/CyUwWYFoDbWyzqbWw=
Subject key identifier:   3B:C1:FF:88:33:01:B5:A8:DD:3C:6A:56:9F:F1:B5:70:95:3D:12:18
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584D40CA46C0467CF7C1E8F45D00
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        72.13.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:46:c0:46:7c:f7:c1:e8:f4:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=4d675bf8-53b0-43ca-8795-71fe536bd530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:b9:cd:dd:07:12:f9:f1:00:c5:bc:dd:5c:
                    44:62:ff:72:df:43:71:43:59:10:22:96:e3:ba:6b:
                    2d:ff:73:44:d7:34:c5:e2:d0:49:c2:d1:f3:82:c0:
                    14:ba:28:60:36:4c:2b:ce:4b:c3:47:7e:9c:a0:89:
                    ec:33:22:55:ed:a5:6d:c4:dc:35:71:09:c9:b2:d4:
                    a8:ef:ac:c9:d5:2e:b5:25:32:54:82:77:8b:10:6e:
                    45:9d:54:56:e0:c9:95:40:41:19:e2:71:b7:54:94:
                    69:b2:2a:20:a5:91:50:da:86:1c:ff:7d:39:f1:8d:
                    dd:da:b7:53:5f:6a:bc:f3:dc:73:24:c0:34:8a:01:
                    00:99:16:a3:99:12:44:c7:51:f7:77:a2:0b:21:76:
                    26:57:31:07:c3:98:09:e0:e7:aa:2a:ef:e9:68:82:
                    4a:5f:cd:a6:2b:f7:87:b9:32:34:63:7d:dd:f0:4f:
                    57:d6:a3:5e:da:9f:b7:c9:e1:ed:37:1d:f2:83:b4:
                    8a:ce:ed:60:b5:80:38:9a:52:f2:84:6f:5c:6c:78:
                    82:b4:e1:33:35:77:7b:70:02:c2:d4:99:0a:14:d6:
                    23:46:c8:17:78:d4:60:05:eb:5e:9b:30:ea:1f:83:
                    0f:67:7b:7a:ed:2f:df:42:0a:a1:10:34:1a:d0:b2:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C1:FF:88:33:01:B5:A8:DD:3C:6A:56:9F:F1:B5:70:95:3D:12:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:b5:2b:e8:fe:0f:c7:12:fb:b5:aa:42:7d:a1:28:21:50:
         f7:7b:22:10:62:7a:e7:fd:45:e6:4a:3f:db:13:1d:60:6b:71:
         90:6b:e5:66:ab:7b:09:97:61:fd:eb:f8:0e:67:f9:59:27:e9:
         29:3f:02:6c:b8:1d:1e:ea:52:60:21:2c:65:f3:18:dd:88:4f:
         17:b1:67:3f:9d:3e:09:50:12:db:cd:eb:ca:c2:72:49:5b:09:
         e5:d5:d5:1c:7c:ef:ec:09:76:36:c3:36:0f:9e:09:1e:0d:98:
         4c:fe:9d:dd:f1:68:88:82:9c:f2:58:7d:62:74:7c:99:0b:62:
         a2:85:84:6e:e9:8a:28:13:f5:cc:c0:db:c5:42:2b:0d:91:73:
         9a:40:6e:7c:e4:b0:8f:a5:4b:1c:7b:ea:ec:c4:4b:f6:f3:4f:
         ae:96:5f:ce:b7:2b:eb:15:83:da:0d:3a:2c:39:d9:f4:e2:b8:
         ce:14:39:e2:9e:64:52:f1:e4:30:db:64:b7:c6:92:ca:08:20:
         e1:a2:54:52:d9:11:18:6c:4c:43:ec:a3:72:29:9d:b1:e0:0b:
         6a:cc:41:ad:4e:9d:ba:35:d7:ae:c4:9b:2b:93:46:78:22:c2:
         4c:50:57:74:94:34:c7:13:9f:b5:65:10:53:39:c5:d1:ab:3f:
         23:9f:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:29 2026 by rpki-client