Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa
File:                     e70d00de-ba3b-3298-a862-b8e63df24836.roa (raw, json)
Hash identifier:          zWa4YM4DxdwV4kwmhuK6SQCt/hbVIGEEpGsukYGKe0A=
Subject key identifier:   95:9F:4E:C5:99:40:39:35:FE:98:07:A9:F9:E0:79:97:63:FC:92:17
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584E4824B9BC91F50BBC9F321000
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     12009
IP address blocks:        65.38.48.0/20 maxlen: 20
                          72.35.192.0/20 maxlen: 20
                          216.228.192.0/20 maxlen: 20
                          2607:f248::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:b9:bc:91:f5:0b:bc:9f:32:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e24a9fea-2353-4b54-953f-5ba3186ca5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:ad:fd:62:77:db:c9:25:b7:e2:a5:1b:d9:
                    01:70:7f:b6:d3:ad:01:fd:d9:15:51:1c:7d:0e:a7:
                    b8:e6:ab:40:04:7e:f2:86:4b:17:9a:3a:d3:49:d4:
                    68:b9:d1:6c:ae:07:e1:ad:8d:82:01:84:af:3b:4b:
                    a1:d0:1c:c1:77:f3:b4:cc:d3:19:9f:c2:4e:26:bd:
                    4c:98:a7:e5:af:de:7c:4e:bc:3c:4a:0b:e0:3f:5e:
                    20:88:8d:b2:ab:d9:a6:de:47:e5:4d:fc:2d:ad:4f:
                    7c:01:26:d0:f4:c7:d5:b1:f3:23:b3:b7:00:9e:56:
                    1f:68:47:c2:4b:a3:ae:c3:67:5b:76:ba:b0:6b:e3:
                    ac:28:36:29:5d:90:46:62:b2:90:09:d2:84:45:62:
                    e2:a2:a7:2f:37:d1:80:11:54:9b:ae:a4:b5:88:dc:
                    48:a0:e9:58:30:4b:ee:62:cd:12:83:7d:de:6a:46:
                    c0:ef:7a:3e:53:8a:92:0e:1c:1d:a0:72:eb:41:f1:
                    25:a0:49:df:ac:61:82:71:d1:d7:07:a4:5a:f0:b3:
                    6e:c8:34:b6:5c:d6:99:6c:c6:97:e9:38:54:00:2f:
                    a8:ba:a3:ac:12:16:6c:5f:d1:c8:fb:38:6a:8d:1a:
                    c3:f3:0b:4a:07:b4:5f:a3:1d:7e:8c:57:71:77:8d:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9F:4E:C5:99:40:39:35:FE:98:07:A9:F9:E0:79:97:63:FC:92:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.48.0/20
                  72.35.192.0/20
                  216.228.192.0/20
                IPv6:
                  2607:f248::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:88:dd:4b:81:91:7b:6c:55:ae:06:5f:a6:e7:99:4b:ea:d2:
         2b:44:e0:04:0c:af:8f:58:c0:a7:4b:e9:23:19:0a:96:e1:9f:
         41:c0:d4:3f:5d:45:84:d6:75:54:7c:c3:0c:f9:bc:22:8b:58:
         0f:12:77:24:a6:49:74:74:a2:e4:33:32:b6:09:86:b2:27:28:
         33:04:1e:22:49:73:3a:ec:9c:08:2d:3f:9f:a4:c8:3f:1e:5a:
         c9:e0:1a:13:3d:bd:48:a7:d1:9d:30:4a:d6:00:08:65:d0:ec:
         73:50:05:9e:86:38:84:b7:be:fd:62:5a:4e:52:95:68:3b:e0:
         d4:20:34:27:81:0f:94:c7:5c:5d:01:23:59:fb:95:da:2d:1d:
         cf:91:5d:31:c7:ee:8a:db:1c:b7:88:06:8c:83:b6:c9:5a:8b:
         c8:fa:5a:4a:e1:98:ad:6e:1e:22:3c:49:f9:2a:ca:21:7a:28:
         bb:28:41:d5:85:4a:2a:4b:88:e3:9e:e1:6f:c0:f4:da:3b:8c:
         4d:20:81:69:b9:25:f9:2a:23:9c:72:92:83:ea:bb:98:4c:2d:
         84:2a:e9:fc:95:31:a7:f8:29:1c:84:f7:4e:7e:52:56:56:4b:
         f3:1e:27:76:ec:5b:a4:10:aa:f6:00:17:81:6d:e6:f2:8e:be:
         4a:f4:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:12 2026 by rpki-client