Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4a01d80d-e07f-3831-b19e-aafb48689ea4.roa
File:                     4a01d80d-e07f-3831-b19e-aafb48689ea4.roa (raw, json)
Hash identifier:          HJpcEwTUIEpx1Pkp8pHYXaj8NlTCQ9r8grmADfbxNBs=
Subject key identifier:   EE:E6:46:22:53:1A:08:76:43:C3:61:6E:C2:14:B7:77:DF:B4:35:BA
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584E885A5FEA9DD97877BC72EF60
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4a01d80d-e07f-3831-b19e-aafb48689ea4.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     6327
IP address blocks:        24.84.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5f:ea:9d:d9:78:77:bc:72:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=5bac7292-c682-4f55-b423-c07bc2e84558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:64:fb:8c:5f:fd:ee:23:b0:fa:d4:e4:e9:
                    2e:5a:8e:1f:15:0a:03:74:b3:04:41:cb:60:dd:0f:
                    8d:eb:b8:6b:17:44:e8:ac:6b:61:83:0a:c9:53:6d:
                    6b:40:1e:82:87:20:da:1d:97:b5:9a:57:3b:58:3b:
                    b7:d2:aa:b2:a0:d7:82:0d:83:60:74:c0:fb:57:f5:
                    8d:ae:84:c6:cc:77:d0:37:82:d8:44:89:11:e5:e1:
                    d0:0d:53:6b:1c:5f:97:b5:0e:e8:66:5b:ac:e0:0e:
                    6f:63:a8:c9:f4:c0:fa:1d:ab:c1:93:53:1e:97:1b:
                    ff:dd:8b:c5:1a:1b:48:c6:d9:f6:f5:88:d7:25:8d:
                    d9:8c:d1:36:f6:e8:10:33:77:f9:be:6f:d9:b1:19:
                    04:10:fc:48:1b:45:25:55:ab:4f:99:77:84:e0:50:
                    9e:90:4a:ea:9f:7f:47:85:b5:11:f5:ac:c3:37:24:
                    30:9b:3c:41:21:4c:b7:13:2d:5a:73:84:07:b4:c5:
                    20:cf:c2:23:95:d4:57:ab:17:f1:99:40:fe:5d:a2:
                    42:d0:76:56:8d:5b:4f:d2:5a:be:f3:ad:8f:05:22:
                    c8:9c:0e:3f:b9:02:ca:82:2c:e2:6f:a1:21:10:32:
                    aa:5b:14:31:e4:d6:35:ca:0d:8e:31:a9:00:d2:73:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E6:46:22:53:1A:08:76:43:C3:61:6E:C2:14:B7:77:DF:B4:35:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/4a01d80d-e07f-3831-b19e-aafb48689ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.84.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:de:a4:15:3a:b7:ba:1a:b4:78:73:f2:cd:a5:2c:75:e9:f0:
         5c:d3:12:4c:8a:4c:4e:13:82:77:e9:04:2a:6d:c4:36:2e:7a:
         47:82:d5:0f:47:32:f7:da:ab:47:03:f9:88:f9:cf:83:29:87:
         a8:79:b6:df:11:ad:8c:5f:11:5a:16:5c:4e:ff:cb:fb:e1:f4:
         e2:97:c5:10:ae:ab:be:28:c4:d2:ec:23:9c:df:33:0c:44:30:
         67:38:65:23:7d:ee:cf:a5:87:fe:59:bf:f5:49:02:3a:e0:c8:
         59:32:74:ec:09:35:12:de:fa:2a:4e:9f:82:b4:8f:d0:80:2c:
         9f:a1:77:89:68:db:c3:2d:f3:25:0b:7e:44:69:89:d7:a5:e8:
         c7:41:02:5b:3c:1a:56:43:4a:e3:72:2c:ac:55:c0:f3:cf:34:
         fc:45:c9:48:60:79:9b:a9:1b:df:5e:5b:5e:80:09:11:fd:e7:
         34:41:9e:68:3f:a6:22:71:bf:16:d2:d6:b7:19:9a:a1:a9:4a:
         4d:bf:8a:0b:34:50:6d:83:5b:cb:f4:ca:12:8f:b8:de:70:4b:
         a7:3f:16:bd:a5:f1:62:6d:d4:61:37:3b:d9:96:dc:5b:3d:fd:
         2a:38:b8:f9:52:ec:86:86:6f:d9:72:c3:11:3d:7a:97:cd:8d:
         ae:2e:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:45 2026 by rpki-client