Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/06f71bb8-6ee7-3d0e-8cdb-778b4d936b5f.roa
File:                     06f71bb8-6ee7-3d0e-8cdb-778b4d936b5f.roa (raw, json)
Hash identifier:          lW5XBKX9vGUIMoOjIPY0CzmJSei0wrMoeoJ55rwcfrQ=
Subject key identifier:   F7:54:FE:A2:D9:9B:46:89:EE:D0:51:27:DC:10:79:8A:5E:8B:BA:AC
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DA6B02084A194CAB17B958680
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/06f71bb8-6ee7-3d0e-8cdb-778b4d936b5f.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        24.149.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:20:84:a1:94:ca:b1:7b:95:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=6edff7d1-62c3-4ced-9156-b9f686e7466e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:41:40:7a:b9:68:4b:41:2e:49:81:30:65:
                    fb:6b:d2:7c:a3:2a:8e:4e:9c:a5:f3:1f:d6:44:1a:
                    ac:a5:ce:d5:d8:3a:4a:3d:6a:cd:2b:c0:07:7e:7a:
                    6d:01:d7:9e:1c:e8:14:6b:49:25:6d:6c:b6:75:7e:
                    78:df:41:cf:ff:e1:51:93:5a:37:04:90:e5:be:35:
                    18:5b:ae:ae:a6:89:8a:17:32:a3:7c:a8:99:5a:fe:
                    52:db:41:5a:31:ea:47:53:ea:a7:b0:f5:d3:95:d4:
                    92:13:9b:d0:ea:89:68:f6:44:78:90:fb:b1:d1:e3:
                    d8:6b:4c:07:f7:a7:b1:4c:c9:fb:b4:ea:65:3b:47:
                    95:db:eb:95:45:49:73:d2:96:de:89:0d:9a:70:7a:
                    d3:56:bc:10:9d:bd:3a:43:a5:b7:66:f6:b5:a7:68:
                    d0:31:3f:22:79:c2:0d:0a:6f:cf:7a:a8:12:3e:ae:
                    0a:ab:6b:43:a3:74:25:73:de:f9:db:a9:b2:bb:6a:
                    62:9b:4f:f6:b8:30:c9:42:42:26:95:d3:84:52:ec:
                    09:7d:35:8d:b3:f2:04:19:76:19:fa:8b:45:bd:d4:
                    74:b8:d6:e5:7f:f9:04:c8:ef:89:cc:bd:7c:6c:a3:
                    87:35:2c:fe:96:b7:d8:93:bd:b9:d2:83:30:e1:f6:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:FE:A2:D9:9B:46:89:EE:D0:51:27:DC:10:79:8A:5E:8B:BA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/06f71bb8-6ee7-3d0e-8cdb-778b4d936b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:8f:c2:dc:f5:21:ac:2a:17:ff:f1:d9:88:f1:47:c4:f0:
         65:3a:1c:19:f7:20:6f:26:88:87:53:88:f7:a6:99:d0:36:7b:
         3e:93:98:a7:6a:ac:5a:04:51:0f:fe:4f:4f:96:8e:d9:95:0d:
         6d:2d:62:dc:44:7b:67:c5:58:70:60:bd:d2:af:cd:dd:04:bc:
         f1:fa:f4:9c:b6:ca:15:55:79:82:e6:76:80:5f:70:cd:92:14:
         fa:b4:22:7f:e9:ed:da:7f:e5:cb:64:dc:08:93:ca:c8:2e:c9:
         e7:23:3b:1f:16:bd:ee:62:cd:f0:63:5b:fa:75:ab:33:bb:40:
         f1:0e:de:71:58:52:7d:ca:58:40:a5:7c:25:00:27:1d:28:fd:
         7e:90:ea:0a:cc:19:f9:fc:46:f0:c6:e5:78:b4:8e:51:56:f4:
         2c:37:e5:55:15:a1:1d:94:b1:c4:1c:13:b2:92:ab:23:b9:ce:
         0d:03:8a:04:69:0c:ad:3c:80:f5:ef:ab:95:50:55:9c:23:5b:
         02:41:49:4b:b7:ca:52:b7:5c:ab:a0:10:23:48:bc:03:b3:a3:
         eb:ba:dc:17:73:ea:62:f4:b0:5a:92:f0:0e:03:7e:09:09:7a:
         29:07:ec:6c:72:3b:d4:ae:72:7e:14:ab:9a:6a:e8:90:e4:35:
         d3:98:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:05 2026 by rpki-client