Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa
File:                     ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa (raw, json)
Hash identifier:          KRCI58kjjbGpHPflTwuz5DpCgZzuhVd9dEinOVSxhJU=
Subject key identifier:   3E:DC:5E:2D:4C:EF:75:78:96:82:6A:38:AE:D8:4A:33:8B:A6:B5:F4
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F4328584D3DFFAFCE88D8C26E97310380
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        216.24.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:af:ce:88:d8:c2:6e:97:31:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c57699ca-6b20-4302-b44f-8f4490d23808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:6d:13:db:e8:22:2c:04:a2:e2:5d:e9:1d:
                    e0:01:2d:dd:74:4f:a0:51:1e:d6:41:f8:4e:8e:d3:
                    f6:01:f5:6b:5a:35:66:1c:3d:e4:70:a8:46:66:3a:
                    19:bb:b7:e4:f8:6b:e0:3f:5a:ca:69:9c:58:39:ba:
                    4d:d2:92:5d:7a:75:e3:02:8e:68:2b:bb:0d:40:6f:
                    b5:3f:d4:bc:1e:23:c7:4c:a5:23:44:38:dd:12:2a:
                    b4:3c:76:e8:52:ec:16:12:64:c9:a0:23:84:c7:4b:
                    e6:84:23:31:fb:c3:6b:a0:2d:0e:58:23:09:92:13:
                    0b:fb:32:37:9f:8f:24:c6:6c:bc:e0:f0:56:29:7b:
                    46:64:89:09:7d:da:00:39:49:d4:9d:9c:af:d5:33:
                    6c:f6:61:22:9f:80:f1:ca:34:c8:b4:db:77:d0:a9:
                    5f:ff:97:15:f8:61:da:3f:d4:27:6a:ec:44:1f:e0:
                    3f:84:83:54:10:21:7f:36:a1:ec:22:67:96:b6:63:
                    02:bd:77:cc:a1:91:16:8d:26:03:5d:a9:ee:8f:16:
                    ad:1e:71:d5:cc:c6:34:38:e8:a3:cb:c9:2c:e7:7c:
                    a5:16:21:44:4b:af:82:81:d2:4e:a0:0f:7b:3e:e5:
                    64:fa:78:dc:74:74:f1:ed:5c:f3:7a:e2:83:68:d3:
                    3f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:5E:2D:4C:EF:75:78:96:82:6A:38:AE:D8:4A:33:8B:A6:B5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ec30fbd7-2e91-3c8c-8db0-3673787e18a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:01:ce:21:44:b4:c7:49:1d:aa:9b:6f:f0:b0:e4:93:9f:aa:
         a9:d4:eb:e8:04:60:41:fe:41:29:1d:66:5a:18:dc:87:58:70:
         2c:ca:40:17:20:fe:5d:2b:98:18:df:76:41:96:73:f4:02:a1:
         6f:cf:ef:29:46:cb:77:84:b6:99:43:59:77:96:75:46:f0:44:
         84:89:1c:0d:5b:97:7d:14:92:54:c9:9d:05:83:1a:06:1c:f0:
         3f:09:a9:5f:9f:4e:c6:21:32:c2:8b:4e:56:80:e0:49:b2:89:
         f4:75:5b:40:70:eb:6c:24:93:ec:39:da:2e:91:ba:cf:b8:6f:
         40:6a:5c:d2:60:4d:fa:74:1a:8e:e6:6e:b8:98:3f:da:56:f3:
         f4:6f:8e:4b:0d:e2:50:9f:3e:f7:31:a5:26:e4:bb:74:41:63:
         f5:cc:c8:d7:c4:58:6a:c3:9f:53:19:a5:b6:4e:67:72:3a:72:
         da:f7:81:23:3e:e2:12:dd:07:bc:d7:75:f1:ea:2e:41:63:2a:
         1c:b2:d0:62:e1:cc:5c:8a:61:98:39:88:8f:3e:e8:00:c5:06:
         7b:26:97:4f:e2:fc:48:54:c3:28:7b:62:a0:b5:e9:ba:5d:04:
         28:fe:61:41:cd:0d:c4:57:f3:92:a3:37:01:f4:9b:fc:47:f6:
         24:4d:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:24 2026 by rpki-client