Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f4f2f764-a281-309f-bf83-6b465297251e.roa
File:                     f4f2f764-a281-309f-bf83-6b465297251e.roa (raw, json)
Hash identifier:          kZJohmFnrMrA0Lkzg6wziGX29QIlmTZVoAvmNTZV6dg=
Subject key identifier:   B8:F3:EF:F4:9F:FD:46:CD:0A:97:D8:BE:41:2D:E2:9F:E4:AB:0B:DB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA929AE1210C3050191540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f4f2f764-a281-309f-bf83-6b465297251e.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        24.160.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:92:9a:e1:21:0c:30:50:19:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=51d2f821-629b-4d83-94e4-1b7814beb3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:26:44:7c:2c:75:97:93:f7:14:25:b5:19:
                    b3:6f:b9:4c:06:f4:eb:92:84:4a:e2:d4:aa:9a:76:
                    34:0e:32:06:62:f6:40:a2:d7:b1:85:5d:ff:12:bf:
                    0a:0e:bc:58:81:29:d1:72:a8:d6:11:47:58:32:75:
                    ab:21:c3:ef:11:35:8e:12:0c:8d:da:ec:a4:2f:1f:
                    bf:ee:d1:5d:65:a3:33:aa:9b:94:24:92:2d:36:9f:
                    3d:a2:c1:f8:49:18:8e:79:c4:d6:ed:20:2a:93:6b:
                    6a:bd:e4:29:b4:2c:55:9a:22:1d:a6:30:6e:86:d0:
                    fc:79:9a:d7:0c:64:73:6b:21:64:bf:fa:c9:ee:e8:
                    7f:9c:57:84:af:08:b5:d3:43:f5:59:08:cf:81:a8:
                    6f:52:81:5c:aa:1a:0d:88:a1:80:f8:08:54:f1:ca:
                    49:0f:ac:93:92:10:98:3c:07:dd:c1:31:74:73:83:
                    79:4a:21:0b:12:a8:9d:8f:87:a5:b1:2c:52:b2:33:
                    e4:96:13:c7:7c:09:af:21:6f:a0:7d:bf:d5:03:c4:
                    a2:95:8f:6d:16:2a:e0:07:31:af:0b:cd:29:4c:68:
                    5f:5a:39:c0:bd:31:61:fc:22:a6:76:a8:2d:19:1c:
                    01:24:af:28:97:8a:cd:cc:5d:8a:4f:eb:34:04:5a:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F3:EF:F4:9F:FD:46:CD:0A:97:D8:BE:41:2D:E2:9F:E4:AB:0B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f4f2f764-a281-309f-bf83-6b465297251e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:58:ac:4a:6e:cb:f0:38:eb:25:fa:d1:29:9d:6b:6a:22:5f:
         5b:b1:21:ae:6f:f7:b9:42:9b:f2:b8:3b:66:cc:ad:c3:88:37:
         eb:e2:d2:89:69:13:0b:be:26:d3:0b:e1:7d:5b:97:30:7a:02:
         ef:4e:7b:02:eb:c7:2f:46:ef:ca:0e:f6:c8:7f:d7:2a:4e:8d:
         5e:08:4e:90:b5:88:7a:86:cb:3c:f6:8e:0d:a6:da:3d:8d:ba:
         3f:1a:2b:bb:50:7e:58:eb:e3:0f:c0:55:a9:67:61:e3:6b:2d:
         6a:33:b1:72:1e:38:79:e5:77:dd:65:2b:eb:08:37:dd:0f:d2:
         a7:d2:a0:8e:c6:37:17:9e:ca:3d:bc:3b:57:70:67:05:dc:3f:
         f6:fb:d9:a8:39:72:23:d5:0f:9b:e0:80:95:25:70:45:39:42:
         01:f9:d5:5d:2b:16:6b:52:d6:b5:84:11:ac:5d:aa:d8:ea:d1:
         89:e2:77:63:38:e9:7a:c0:66:05:d8:d2:d6:e7:0e:0f:56:3a:
         e0:80:2f:27:78:17:c3:e6:3d:4a:b2:05:a3:41:fe:16:f6:00:
         6c:49:74:51:1a:df:5a:2c:5a:34:6e:15:d0:aa:4a:d3:87:00:
         19:b5:a9:e3:2e:40:fe:bd:b1:fd:26:b8:b1:89:1e:51:d8:ca:
         4f:57:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:05 2026 by rpki-client