Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa
File:                     b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa (raw, json)
Hash identifier:          bqvHYRihfhY0HcoFHqH1BcuFdhN+WPITSuZkjRLF/do=
Subject key identifier:   3B:42:76:EE:79:2C:81:57:8A:66:FA:80:E7:D1:3F:4B:71:EE:29:A0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA63CBC06F3A25BAA03200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     7843
IP address blocks:        24.33.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:63:cb:c0:6f:3a:25:ba:a0:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=0ded2bfb-afd8-4e29-86ba-b551f45c2c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:c7:9e:f4:83:53:0c:0d:26:d1:c3:06:f9:
                    13:de:bc:66:6e:98:68:49:60:4d:30:47:5a:1a:11:
                    cf:65:96:d6:87:97:23:d9:2f:4e:bf:dd:1d:d7:6c:
                    1a:3f:ee:73:5e:05:c7:86:6f:52:f5:c6:c1:69:34:
                    da:5f:02:c6:07:9e:4c:da:6c:04:e3:9a:64:2c:d3:
                    37:16:14:ef:a6:5c:f2:b1:32:2a:c4:07:8f:9b:11:
                    3f:41:a9:09:ac:48:e9:88:dc:ee:e7:19:71:38:9d:
                    87:10:fb:df:04:27:a1:c2:94:d5:08:d8:a7:84:41:
                    69:e7:6f:de:23:2f:11:b3:d3:fe:81:26:a5:13:1c:
                    c1:39:69:0d:9c:d0:66:92:b9:17:95:b5:00:11:62:
                    fb:95:60:6d:e5:02:ef:ea:e7:06:85:41:54:5d:fd:
                    60:55:0b:e0:5d:8b:30:90:6e:a3:62:f0:2c:6c:35:
                    f1:60:0b:16:76:9e:b1:33:57:65:dc:b0:07:2d:25:
                    e6:c3:7a:db:d8:67:83:f4:a8:3d:2b:cc:7c:ae:ae:
                    35:62:a8:4f:75:da:f8:ee:58:05:c8:50:9a:0a:a7:
                    cc:79:e9:54:72:40:78:58:38:dc:07:27:ff:4e:a1:
                    ed:d8:09:25:75:67:5d:17:c8:7f:9d:7d:66:5d:b3:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:76:EE:79:2C:81:57:8A:66:FA:80:E7:D1:3F:4B:71:EE:29:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b86ec66a-d8f2-32c1-aa0e-1d03fc30a49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.33.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8f:15:a4:f7:3c:21:1a:9e:57:a2:e0:60:f0:fc:22:a1:37:
         7f:81:cb:f1:ea:b5:83:a4:4f:76:94:ad:1d:fa:11:f0:9b:b0:
         b3:7c:91:f9:ed:17:7b:12:3e:33:90:2b:09:3a:1a:86:fe:68:
         e2:91:73:42:2c:e0:a8:fd:b8:ce:43:07:3f:1d:89:1e:67:07:
         05:8f:40:4e:69:e4:b9:87:20:82:73:55:65:61:8b:39:5c:73:
         18:ee:95:1b:1e:b8:e8:ef:10:aa:43:75:c5:60:07:3c:61:f0:
         9d:5c:68:41:c5:94:c1:b6:ec:42:a9:76:42:ad:75:b3:a0:73:
         bf:e6:0e:f4:00:59:2c:56:90:33:ab:13:29:04:8a:a8:9c:c5:
         d7:9c:d9:c4:fd:5e:bc:9b:f5:5d:63:03:c6:a7:d3:bd:98:13:
         dd:9b:a1:c0:cf:fc:50:3a:c0:52:93:c9:50:cb:45:91:f3:fe:
         5b:26:ea:8d:94:36:92:b3:5c:2f:d3:67:fa:c5:b9:7f:58:44:
         fc:59:9a:0e:c7:24:e8:4f:c1:48:18:39:8e:0f:7d:0e:b5:08:
         33:aa:be:1e:6c:9e:13:1d:2b:33:db:49:6f:ec:51:f9:49:5e:
         f7:6c:8b:a2:25:9d:05:44:25:68:b6:26:20:5c:fe:71:86:11:
         ae:7c:27:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:58:04 2026 by rpki-client