Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/19a8c366-0229-39c2-b264-035be316605a.roa
File:                     19a8c366-0229-39c2-b264-035be316605a.roa (raw, json)
Hash identifier:          pUrmxTEzYKs2URCbPs4/skE+c3vXPX7/xQVjVon8A3Y=
Subject key identifier:   4D:66:77:F9:C0:0D:5B:96:1B:1D:13:07:32:D8:12:74:BD:B9:E1:07
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584DC29AF148ED1171E54CEE0300
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/19a8c366-0229-39c2-b264-035be316605a.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     12083
IP address blocks:        24.42.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f1:48:ed:11:71:e5:4c:ee:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=fbae51c5-f0ff-4d1b-82ca-d40e346a80e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:97:4f:b3:d0:f9:98:f8:9f:04:97:68:44:
                    1f:14:82:ad:b4:21:56:2e:43:d5:5d:e5:fc:9b:6f:
                    11:62:57:31:1b:2b:ee:83:37:b9:15:16:b4:34:9c:
                    c7:38:06:26:af:eb:71:17:5b:01:b7:b3:bd:3d:43:
                    e3:d0:16:1d:87:f2:8b:4c:8b:97:37:31:6b:52:09:
                    49:d8:c5:98:00:2d:af:d6:85:75:91:64:fd:6c:ad:
                    77:3d:c6:6d:e8:a1:fe:b2:08:72:16:d8:e8:27:37:
                    d9:2b:c5:50:28:f0:65:5c:bf:79:ec:28:79:2c:e0:
                    a7:18:b0:ba:e3:3e:2f:c4:55:db:c4:ba:f5:be:85:
                    d2:86:29:fb:30:bc:cd:66:d4:e7:03:14:61:4f:c0:
                    7f:9d:c7:b3:4d:e4:1c:5d:65:c7:89:42:e5:e1:ae:
                    ea:eb:98:2e:03:48:ff:52:e6:7d:8b:8b:49:fd:e2:
                    4d:63:fe:8d:f3:c3:de:e7:1f:01:65:a9:19:c8:09:
                    a8:e4:95:fa:78:95:99:e8:9e:4d:d3:89:2a:b1:4e:
                    c9:4f:bf:ac:42:67:42:a5:1f:19:5e:64:60:c2:6c:
                    bf:2a:cb:08:fb:30:d9:1c:ce:cc:f8:96:43:77:0f:
                    b8:89:62:8f:d8:9c:7f:bd:b2:a7:51:51:51:39:e7:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:66:77:F9:C0:0D:5B:96:1B:1D:13:07:32:D8:12:74:BD:B9:E1:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/19a8c366-0229-39c2-b264-035be316605a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.42.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:66:92:f5:ed:02:c6:a3:25:08:57:b6:14:00:df:eb:76:6e:
         02:12:21:ce:47:02:b8:61:c1:ab:dc:e9:c9:4e:03:97:61:26:
         fe:c2:7e:2a:80:50:ec:be:57:91:c9:43:a7:c8:3f:2d:d4:d5:
         d7:a0:11:34:7e:40:5b:39:d5:29:3b:b7:ee:a3:71:36:ca:22:
         88:e7:96:da:8e:e6:e5:3f:14:12:60:8c:c0:f4:24:a7:00:78:
         7b:c4:a5:5a:98:93:be:44:f4:05:ca:a6:b3:5a:2a:4f:0f:18:
         e0:bc:a7:83:31:71:e2:4d:f9:61:eb:1d:78:57:ac:9c:23:67:
         a1:e1:95:8f:a2:c6:b0:5e:13:ee:5e:b4:a2:8b:3c:d8:c1:b8:
         52:5e:b6:f4:31:63:87:75:04:cc:ee:42:94:3e:cc:08:5c:da:
         93:5a:68:8f:59:7f:6b:36:9e:e4:0a:57:4e:9d:bf:76:a5:df:
         0e:6e:32:ac:c4:95:3e:d4:35:4b:8c:40:13:cd:c8:e9:a2:b4:
         be:05:a6:f5:27:f8:de:d5:08:8e:8e:60:98:1b:d1:35:5a:d1:
         ed:07:29:b2:1c:b9:52:60:67:ce:a5:e1:68:7c:6c:86:b0:1e:
         71:7c:ea:1f:36:d6:01:96:ef:90:dd:c7:b3:ad:4b:a3:49:af:
         d7:63:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:37 2026 by rpki-client