Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa
File:                     e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa (raw, json)
Hash identifier:          d/qBJJTXb2LV+vG2H6+hjedkgtDrzeH1jPjtQY8Dv4A=
Subject key identifier:   CE:B5:5C:D0:CE:FD:34:05:5C:57:FF:62:3F:0D:21:79:68:B6:C5:58
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB3E9F685DA1688FA1D580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33363
IP address blocks:        24.94.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:3e:9f:68:5d:a1:68:8f:a1:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1200076a-2821-4e21-b02f-4b995b082c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:f5:23:e6:64:13:3b:c5:e2:f6:43:4e:c7:
                    e3:c5:57:ca:24:e4:97:20:52:d5:ab:4d:6f:a2:31:
                    d6:26:8d:8f:c4:b5:19:5c:36:c3:27:bd:50:f0:98:
                    5f:ac:ca:f1:06:1f:b0:66:37:b1:14:e3:37:aa:c0:
                    5d:9a:7e:25:48:37:7c:19:2e:ae:7e:65:08:2a:1d:
                    86:d0:43:78:0d:32:32:d6:6f:1e:45:39:1c:b7:34:
                    9f:8f:73:a6:fa:ba:fa:28:62:3b:d7:3d:60:a6:1c:
                    c7:cc:09:4a:f8:0c:81:b7:c6:63:dd:f3:2c:a0:76:
                    31:e6:22:64:81:7a:7d:88:c8:91:66:68:44:5b:0a:
                    9e:04:89:81:e1:53:da:02:3d:9b:23:fd:f3:a5:e2:
                    c5:62:89:2e:d6:bb:36:56:ca:34:7b:df:34:13:9b:
                    ef:17:f9:1a:fd:6a:41:27:1a:b0:02:b7:e0:21:35:
                    4b:5c:13:28:f8:8c:7b:bb:87:b4:c9:2f:64:98:81:
                    70:7a:07:e3:c4:5f:ce:c4:5d:d3:17:9c:5c:0e:6c:
                    0c:83:48:58:46:5f:32:1a:3d:02:85:8f:d0:0f:12:
                    fe:95:ae:c6:b6:ad:98:78:2d:a0:58:29:ee:d3:da:
                    a0:35:11:04:fd:d0:5c:ea:ff:b1:d2:1f:ad:a2:ee:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B5:5C:D0:CE:FD:34:05:5C:57:FF:62:3F:0D:21:79:68:B6:C5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e20e09cb-5894-332e-9c0a-90e6f5785a9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:29:f0:dc:94:9e:fb:d8:2e:de:e7:1b:64:cb:30:69:80:1e:
         53:03:bb:02:0c:0e:ef:ab:34:35:1a:d8:23:75:7b:d9:b2:65:
         b7:9a:ba:69:9c:ea:35:c3:f3:aa:1d:e2:3b:1d:1a:f9:9b:46:
         8b:c1:0e:f7:27:e4:a6:ba:76:1d:8f:f5:b8:7b:d1:de:a7:c7:
         01:95:5e:74:c5:e3:a2:21:ad:2a:8d:3b:8d:f0:74:72:b8:a8:
         48:ca:85:c1:13:a8:49:be:c1:bd:41:f0:0b:c8:73:d5:87:3b:
         f4:5d:b3:56:6f:ca:27:13:4e:de:80:54:30:28:29:57:ff:70:
         2c:31:99:83:61:56:c3:6b:24:3f:9c:38:a1:8f:db:ce:15:f7:
         45:ff:37:86:0e:bd:a3:74:13:0e:08:25:c0:49:c3:d1:dd:d7:
         83:dc:58:ed:f8:6c:9b:11:5a:8d:c5:1e:ca:d9:ed:13:a5:87:
         cc:7a:ea:df:da:8c:c6:2d:9e:f1:44:9f:4b:8b:45:83:6a:18:
         90:67:a6:1c:da:1b:3d:b7:32:d1:d9:ca:d3:26:d8:12:67:dc:
         33:48:1a:07:9e:44:8e:b1:cb:a8:3a:33:56:49:8b:1c:86:2e:
         3b:a4:2f:9d:ec:f8:49:99:73:90:1a:e2:22:bb:4f:2f:66:f0:
         b1:0b:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:14 2026 by rpki-client