Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa
File:                     b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa (raw, json)
Hash identifier:          RdUncLX4KhK4MuDxE6s2vaQxwOyCAEsCmeR1qGtGkSc=
Subject key identifier:   C5:48:79:6C:48:8E:23:3C:E8:87:ED:2E:AC:65:6E:86:95:B5:F6:56
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB10D699DF0F0E8C839D80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        24.208.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:10:d6:99:df:0f:0e:8c:83:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=73970d00-9d92-4b59-a5f9-054de839b771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:10:8d:2f:bf:fc:02:48:7b:a5:46:72:0d:
                    de:ee:35:ed:9b:e7:a9:35:7f:ba:f5:67:ef:be:9a:
                    2c:36:e5:b9:93:21:b6:1d:d2:a3:d4:74:80:09:cd:
                    f1:68:91:ee:c7:e8:84:53:98:dc:28:91:c9:0e:bc:
                    6a:dd:ea:9d:72:8c:53:fe:0d:85:4e:fd:e4:a6:ba:
                    9a:49:51:77:b8:50:4a:31:75:8e:43:cd:49:73:4b:
                    f9:c1:00:c4:82:a7:09:16:95:49:a4:41:99:2d:c2:
                    26:86:e3:0b:27:4f:5a:b9:58:e0:b3:1b:90:e4:e4:
                    63:13:dc:7c:ee:79:93:b9:c4:5c:2b:ee:6a:1d:48:
                    88:07:0f:6e:0b:84:76:06:d7:24:b7:d0:3f:dc:bc:
                    8d:7e:ce:e9:45:78:d4:09:3d:e6:5d:a6:56:45:ee:
                    69:e3:9a:65:12:8f:4e:a4:81:8a:73:da:ae:8c:a5:
                    e3:90:8f:fa:e1:5d:4c:da:e5:c6:f5:d1:5e:30:47:
                    f0:32:90:f6:fc:f8:45:c6:1a:4d:e7:f1:dc:98:f5:
                    50:89:37:87:a2:42:e8:05:f7:12:63:67:04:93:37:
                    4a:07:5f:db:00:c3:e3:29:1c:31:d4:d5:36:a1:4c:
                    bf:8e:5b:bc:93:ba:5a:6e:bb:43:26:ed:b7:66:99:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:48:79:6C:48:8E:23:3C:E8:87:ED:2E:AC:65:6E:86:95:B5:F6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b3a6c310-d0fa-3ade-85ed-85abacf57a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.208.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:69:97:cb:24:11:38:0f:b3:2c:f8:7d:7e:bb:62:54:cd:
         ed:bc:73:01:35:c2:45:10:94:86:7b:58:e0:3e:76:04:8a:57:
         ef:b9:66:e6:e5:91:54:fb:aa:60:e9:c8:b4:b1:90:8f:3f:b7:
         1b:d8:73:ab:89:ef:16:8b:f8:d4:3c:9c:bd:8a:7f:03:08:81:
         f9:4e:ce:a7:33:f6:52:63:7e:c4:03:14:df:f4:e1:32:e3:0d:
         52:a7:1e:8f:3f:11:f2:12:1f:05:93:c8:1c:56:06:65:24:06:
         4e:ee:d6:16:0a:ef:c7:be:09:1f:ac:40:72:4e:e6:2f:2b:a8:
         ea:5b:91:59:7b:de:75:c4:ce:02:6c:cd:12:71:0b:4f:5f:c2:
         a8:55:48:7a:f4:a4:46:07:bf:74:d9:93:7f:60:18:da:d0:ed:
         c9:af:df:89:f9:c8:41:c4:bd:9a:ea:f0:ca:af:b6:55:d2:b5:
         da:fa:6d:0c:57:bb:c6:20:7b:95:0d:b7:a9:8c:9f:6a:cb:9d:
         3b:4c:ae:b8:ff:10:f3:1a:e2:42:5f:d4:c5:77:08:17:d9:f3:
         46:69:01:2e:50:c2:1f:59:f3:ed:0b:dc:00:e4:73:0c:5e:8b:
         16:4a:82:a8:f2:fd:59:f4:59:06:9c:df:c0:d6:91:ea:e6:90:
         1c:37:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:54 2026 by rpki-client