Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa
File:                     cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa (raw, json)
Hash identifier:          peD+Z17gJAg3hCs1nLXtO9F7RI0sW7LrHY33IC3GJhY=
Subject key identifier:   78:E5:E2:27:7A:E8:8C:5B:A2:57:E4:CC:2D:CD:54:7E:20:87:01:0E
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584E90BA553192482D001A1C7C00
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     812
IP address blocks:        24.137.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:55:31:92:48:2d:00:1a:1c:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=d3f0ee13-43d5-4792-aa8f-78ce33ce3117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:7e:eb:be:b5:47:dc:38:f0:a5:1f:c8:79:
                    cb:80:2c:8e:e0:c2:08:d2:cc:2f:eb:65:02:3c:a8:
                    b6:a4:58:f4:45:b6:55:e9:e8:d0:92:b1:7f:f8:fb:
                    b0:8d:74:a9:aa:b2:d7:dd:84:3b:8e:8b:af:26:ad:
                    11:c2:3e:28:4e:ba:73:48:30:ec:d0:61:9d:40:ac:
                    87:8e:20:25:f3:9e:cc:2f:61:7b:3c:1d:16:f7:1d:
                    e1:44:bc:8d:98:e4:2d:bd:b3:62:d6:2d:9f:27:da:
                    4f:64:b6:81:7d:d3:97:ec:d0:30:6f:04:bb:ca:a2:
                    e1:7a:09:90:c8:2d:c8:bf:86:1e:77:26:f7:a0:ca:
                    8f:6a:7a:ea:d2:17:24:a1:4c:c4:b9:f2:54:15:17:
                    c4:e9:5a:44:04:6a:0e:c9:80:bb:e9:af:07:aa:ea:
                    ab:97:e1:1e:37:8e:81:6b:ae:98:88:86:c3:8f:d2:
                    b4:22:b8:f6:51:52:87:fa:6f:ae:7e:8a:07:b9:79:
                    2a:bb:79:42:64:02:cc:23:93:cf:f2:29:31:5d:32:
                    9b:89:63:c2:30:13:7f:39:7f:97:f0:4a:f4:16:d0:
                    6f:ec:ed:15:4d:b3:81:99:f7:d2:0a:d6:bc:75:bb:
                    ff:02:0a:01:db:cf:5c:71:72:c2:d9:97:84:7f:81:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E5:E2:27:7A:E8:8C:5B:A2:57:E4:CC:2D:CD:54:7E:20:87:01:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/cdaa2df5-c231-3499-8475-c51e6b98bc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.137.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:da:06:d5:8e:67:9e:7d:33:cd:4e:d4:ad:c5:95:25:5a:8c:
         cf:a4:e2:0c:22:bc:16:36:bd:51:8a:81:6c:ce:a8:86:11:ed:
         5f:ce:19:3b:93:02:31:e7:f5:94:53:8d:10:95:3a:f0:8c:18:
         ec:bb:fe:82:65:5c:ad:ab:89:77:5e:d6:46:dc:2d:cd:a5:8a:
         1d:a5:ff:07:f5:4d:6d:bf:4b:ba:45:ce:58:c4:c0:37:0d:fd:
         9a:f2:03:c7:5f:1c:aa:a9:b2:09:38:bd:be:9b:01:38:2b:3e:
         10:ea:93:8f:0b:55:ac:f2:c6:3c:c4:3d:59:3d:c9:75:79:92:
         52:2f:d5:a5:13:0f:91:b1:17:70:ea:72:17:7e:ec:1b:ce:f1:
         b7:9b:ae:69:9c:18:29:3f:10:ee:0d:38:88:ed:3f:b6:5a:fa:
         1b:88:61:c1:6b:57:6d:d4:7b:f8:d1:3d:56:32:70:4e:61:b0:
         65:fb:5d:44:48:42:4d:0b:f1:60:71:be:90:13:47:55:48:5d:
         1c:f9:80:f8:2d:3e:e3:5e:ba:c1:40:3d:5d:65:df:7d:35:6e:
         2f:14:fe:6d:bf:c3:2c:2f:e6:ef:07:8b:ee:d0:69:6b:2d:cd:
         45:f9:a6:fe:06:e0:10:dc:96:b7:d0:27:79:25:db:e9:70:7f:
         66:c6:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:09 2026 by rpki-client