Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/c9d3c389-6eda-3690-91af-1eae10fa2492.roa
File:                     c9d3c389-6eda-3690-91af-1eae10fa2492.roa (raw, json)
Hash identifier:          u4hICxgrFfOkSb1ECpyDBXKj+piFs/s7HL6LzmgxfoQ=
Subject key identifier:   5E:5D:35:F0:21:84:4A:CD:C3:D0:7E:08:A0:42:2F:3D:F9:FE:68:64
Certificate issuer:       /CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
Certificate serial:       010D0C9F4328584DB1DADB58709E79DABFA15FC0
Authority key identifier: A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/c9d3c389-6eda-3690-91af-1eae10fa2492.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     53764
IP address blocks:        72.249.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:db:58:70:9e:79:da:bf:a1:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5309a0-cc40-45fb-8638-b4960e7326cc
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=3996c2c2-d3f6-43de-b596-ea9eab92b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:60:b0:21:3c:13:12:e6:66:e2:f7:98:cb:
                    3f:7e:42:4e:02:47:de:f7:f8:cb:b1:64:cb:e2:dc:
                    34:26:b6:57:45:1a:12:a5:95:46:0f:ff:7a:0f:5f:
                    fe:e7:fa:83:af:8e:6a:ab:70:63:e7:c8:1d:a5:cc:
                    ce:77:c2:cc:7e:96:db:78:d5:af:02:5c:9f:64:9d:
                    5d:00:da:e8:59:16:a4:5b:f1:ae:67:3a:07:cf:df:
                    73:7c:ec:9e:22:13:2e:7e:d0:28:3b:1e:26:91:dc:
                    0b:0c:d1:a7:fd:a9:44:29:21:72:71:72:3f:79:d8:
                    50:42:b9:ba:c9:e2:8d:42:37:0b:eb:ee:84:c5:23:
                    2a:11:a2:cc:78:ce:ce:82:05:67:53:d7:28:ad:52:
                    ff:c6:9f:ef:ba:41:58:e3:18:76:ac:33:11:d0:15:
                    bc:d4:73:3b:a7:b4:ba:df:e8:97:b8:00:ad:b2:61:
                    5e:5b:12:2d:92:64:9c:c3:82:b7:6f:dd:ba:66:45:
                    7f:55:dd:fd:a2:09:3c:f8:dd:30:93:30:99:75:4b:
                    52:be:54:2a:f3:55:7d:08:3d:93:2f:65:4a:97:ed:
                    d7:f0:65:ed:85:d1:36:f0:55:8b:cc:5c:15:7b:e3:
                    8a:e0:91:d9:9d:4f:e0:c7:00:fc:7c:68:83:cb:02:
                    e6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5D:35:F0:21:84:4A:CD:C3:D0:7E:08:A0:42:2F:3D:F9:FE:68:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/c9d3c389-6eda-3690-91af-1eae10fa2492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc/ee5309a0-cc40-45fb-8638-b4960e7326cc.crl

            X509v3 Authority Key Identifier:
                keyid:A1:99:DB:68:6C:94:EF:BE:6C:88:1D:82:50:B2:AC:89:F7:F9:13:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee5309a0-cc40-45fb-8638-b4960e7326cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:25:15:70:3d:27:b6:39:fb:14:fe:af:97:4d:87:02:38:
         f3:f1:62:2a:2d:f0:17:2f:8b:a9:45:54:21:83:bc:49:91:e1:
         00:97:db:a9:9f:6f:b0:8a:b6:24:86:f2:b7:f5:43:dc:16:36:
         1d:89:35:3d:1e:65:7d:29:95:d4:9f:be:3f:f5:22:8b:06:65:
         05:bc:dc:fe:6e:ac:05:31:3a:e0:9b:6a:53:1d:92:48:f7:db:
         00:cc:9d:d8:a6:c1:e6:39:85:d6:a0:7d:e5:37:c8:7b:ea:ad:
         2e:f8:8f:30:49:89:cb:5e:43:7c:55:52:4c:4c:83:69:7e:f2:
         03:fd:b2:aa:3a:7c:6c:b3:8c:b3:12:e2:27:cc:0c:95:30:3b:
         48:ab:4f:7f:f5:78:19:1d:2e:a7:85:12:00:23:50:76:9a:e1:
         cf:e3:5d:a6:77:4c:ac:95:46:eb:32:00:83:fc:8b:e2:d7:48:
         a6:8b:f5:f5:54:2a:54:93:54:f6:c2:57:31:99:0b:95:c0:83:
         90:4f:3e:f9:a5:78:6f:d5:99:d5:ca:6d:bd:55:d6:de:ef:bd:
         ec:87:28:f7:c9:72:bf:df:66:11:94:7b:06:d5:91:07:20:6d:
         59:83:08:27:e6:24:ec:31:a4:e9:2d:d9:29:dc:21:52:fd:ad:
         da:3b:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:27 2026 by rpki-client