Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/2f854648-1c82-3dc7-81d3-47f989b041a6.roa
File:                     2f854648-1c82-3dc7-81d3-47f989b041a6.roa (raw, json)
Hash identifier:          A7RBIWiaO/DUXkbyo5KW+h8Xdp/vtin1CHI49DY5PJY=
Subject key identifier:   FB:92:E2:D8:F1:DE:96:D2:85:A9:FE:76:F5:42:2B:99:C8:F0:45:8A
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584D3F64C9B8E16E2C7451208A80
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/2f854648-1c82-3dc7-81d3-47f989b041a6.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        209.196.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:c9:b8:e1:6e:2c:74:51:20:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=58fb2948-f597-45db-aa15-b2a700926845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:75:31:32:91:38:73:6a:d6:e3:61:16:2a:
                    9c:c7:6a:4e:9d:65:65:05:2a:70:a1:80:af:ff:bd:
                    1d:fe:dc:79:41:58:8f:70:73:ec:61:28:a0:d1:56:
                    54:fe:39:d3:22:9d:14:2f:7f:82:10:4e:13:fb:c2:
                    74:f7:56:79:c6:bf:c4:f4:2e:35:9e:7a:4b:ef:a2:
                    43:66:13:9f:af:db:f0:b6:90:d2:5f:11:37:5e:79:
                    99:04:09:66:16:bc:08:7c:ef:21:28:e9:14:be:b8:
                    20:63:f4:3f:58:42:b8:b1:e2:9c:c9:1e:31:a0:35:
                    a1:a8:34:bb:bc:33:1c:03:54:c4:a1:74:90:39:58:
                    a2:83:a6:56:af:e9:39:1d:77:ef:55:13:c7:e4:5e:
                    1b:ff:de:b0:1e:28:3c:5d:dd:11:f8:ed:67:d7:7c:
                    17:5c:ad:1d:a9:e0:46:be:61:52:00:f0:82:c0:07:
                    ac:3a:02:95:b5:77:bf:25:a0:06:e5:e2:01:a2:4a:
                    7d:f4:8e:09:df:fc:f4:8f:d8:53:7c:85:cf:52:ea:
                    96:09:da:4f:d9:7c:d9:9a:0a:0c:35:1c:0c:84:e2:
                    c7:f9:af:96:db:cc:ef:9d:06:38:34:49:1d:62:57:
                    21:63:53:d2:36:45:73:26:09:b1:20:2e:13:b6:a7:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:E2:D8:F1:DE:96:D2:85:A9:FE:76:F5:42:2B:99:C8:F0:45:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/2f854648-1c82-3dc7-81d3-47f989b041a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:d6:fc:99:1d:da:ae:92:30:6e:b2:41:43:1d:a6:2f:67:
         05:98:f4:11:12:c9:cc:ef:8d:74:e1:d6:27:0c:96:d4:e2:9d:
         16:fa:9e:7a:b8:c2:52:7a:e0:4a:3e:91:9e:32:8e:fc:17:b7:
         ca:e8:04:e6:ea:dd:a9:4c:f9:31:ba:25:b8:9d:ed:25:c2:fb:
         2f:bd:e2:7e:3e:5f:25:cc:e7:75:90:57:af:b8:19:33:34:67:
         db:26:ff:79:66:0c:e5:4e:db:26:62:e1:5d:88:83:80:e7:a8:
         11:24:34:a5:4f:e1:e0:47:2e:77:cd:7b:28:b6:89:c5:8b:18:
         97:34:90:78:10:d2:2d:0d:ab:4d:e4:81:9d:a2:60:78:be:c9:
         92:29:fb:a8:09:0b:85:64:74:27:68:6d:65:14:57:61:db:96:
         90:8c:5b:b5:c6:cd:48:cb:2d:3b:58:28:9a:4c:96:74:81:bd:
         01:83:8f:c9:e1:f8:40:e2:83:a5:68:9f:c4:22:c1:6f:6f:da:
         af:d4:fe:a6:56:15:a7:3f:a3:e3:3e:49:ca:79:96:be:33:fd:
         fb:8e:bd:fc:52:51:82:97:26:c0:dd:17:c9:61:f7:b4:c8:bd:
         70:3f:df:75:84:81:6e:55:0e:20:fe:92:65:ba:b3:b4:f4:55:
         43:1e:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:23 2026 by rpki-client