Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
File:                     08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa (raw, json)
Hash identifier:          0V5G6y+3XEsUZ8e+VbQyWQUFmKqV4PhmbHx4jEE3U2g=
Subject key identifier:   33:9A:59:64:DA:CB:C1:39:C4:B8:BD:1B:24:93:BE:7D:C8:74:F2:50
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DBA3B0612908FFA7E0C0676C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     11232
IP address blocks:        24.225.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:06:12:90:8f:fa:7e:0c:06:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=a5758de4-7f26-4386-9d11-6dc5ae6465c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:d8:d2:63:4c:28:61:80:01:bc:12:51:84:
                    ad:6a:6d:28:aa:ab:ab:be:1e:b9:86:fa:ab:78:8a:
                    de:3b:22:67:2e:bf:ac:57:8d:31:e2:3e:e3:cb:9a:
                    c3:35:f2:e4:9e:92:65:88:fd:24:59:7e:6e:03:e7:
                    0c:1f:68:79:43:f5:af:b8:5c:ef:23:bd:34:96:7c:
                    c8:6c:8e:fa:79:b1:14:6e:ed:b4:6a:30:2d:1a:87:
                    fc:7d:dd:00:a9:20:f4:13:b3:f4:a4:3c:73:20:23:
                    e9:1c:8f:74:df:f3:ef:dd:72:01:1c:b5:8a:95:71:
                    d2:6c:5a:ac:40:b7:09:1f:e6:47:85:f0:72:66:58:
                    33:30:cf:61:06:fb:2d:05:9f:e5:30:15:5e:16:63:
                    48:d8:2c:0e:46:a3:4f:a1:fa:0e:80:e7:a4:51:42:
                    d2:5e:a1:dd:10:f5:84:1a:bc:cd:05:d6:19:f8:01:
                    b7:92:3f:f2:62:46:ae:02:67:0a:f0:43:92:23:b8:
                    61:6d:8c:b6:cb:40:51:17:68:05:e5:21:ed:51:76:
                    40:e5:f2:bb:38:00:6c:e5:eb:45:71:e0:fc:ca:bd:
                    c9:b6:49:f3:44:3e:a7:58:33:43:1f:b5:bc:f9:9b:
                    90:64:c8:ad:25:95:51:0d:c3:52:83:10:b4:97:0a:
                    aa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9A:59:64:DA:CB:C1:39:C4:B8:BD:1B:24:93:BE:7D:C8:74:F2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/08b8473b-ed8c-3ed8-8108-06aa61ea34fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:94:75:8b:50:af:84:fd:b6:c6:67:c0:67:1e:64:d6:72:c7:
         29:c5:d7:c3:64:b8:b2:d0:65:31:6a:0e:b2:1d:c6:00:7e:84:
         8e:8f:4b:9f:ea:05:7f:7b:8a:ca:8f:18:79:cd:1c:d6:44:77:
         2f:b5:02:b1:ab:28:70:fe:7a:7c:d0:5d:f6:54:27:4e:3b:35:
         35:8b:54:6c:77:38:6e:dc:03:ae:0c:4c:7b:d7:3b:ce:ce:1f:
         15:9d:2f:83:36:97:b3:d7:56:e5:c8:f9:24:d4:c1:99:86:72:
         45:89:a1:9c:49:14:26:17:73:a6:ba:ce:cf:3e:9d:47:fc:34:
         22:5a:81:ca:b0:9b:d4:e5:ae:1d:15:3c:b4:1d:f3:83:e9:f4:
         93:8d:28:f1:a7:ec:b3:7b:52:b1:e5:df:c6:1b:63:01:a7:22:
         22:a5:c9:e7:31:4b:06:dc:55:fb:0c:6e:36:20:b8:58:05:7f:
         36:d2:a3:8d:40:74:f1:bf:48:ef:0f:f8:b5:77:f1:4b:16:4c:
         52:3c:0f:ff:4a:b5:02:66:cf:19:89:ea:1e:48:be:86:b1:04:
         09:cb:aa:89:4e:78:56:1f:4e:03:80:a3:04:f2:22:9a:14:10:
         f2:1f:3d:83:4c:c0:89:48:77:27:3e:da:83:ca:46:3b:0b:c4:
         f7:2c:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:50 2026 by rpki-client