Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
File:                     f79cabc0-9140-3552-a764-dafa1e390e03.roa (raw, json)
Hash identifier:          BtjcR7adpoOmbrFA+uJ+m+4FFtxr7qY5Mn5rZECIc10=
Subject key identifier:   DE:F6:31:AE:85:4B:40:EC:0F:EF:90:9B:41:1E:CF:68:78:D1:2B:ED
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E86F4ECA5417B1CC2675E5700
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13807
IP address blocks:        24.223.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ec:a5:41:7b:1c:c2:67:5e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=5c518585-5801-4e52-bcbc-14588d47c6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3a:49:a6:05:29:6f:c9:1d:45:d0:25:0a:b0:
                    33:14:51:f4:f2:fe:aa:37:89:5f:f9:30:8f:da:71:
                    1d:30:5d:7e:12:81:99:3d:e7:eb:b0:24:50:4e:34:
                    31:94:79:0c:d8:2f:53:57:01:7d:00:00:71:4e:ec:
                    70:bc:c6:0b:00:54:d8:0c:6c:89:32:b9:9f:a6:47:
                    ac:db:91:b5:27:21:e0:5d:eb:cd:24:32:fa:d2:20:
                    db:e4:cf:cf:53:a0:89:c8:79:69:22:c1:e8:7f:1e:
                    fe:bb:eb:d8:30:4a:89:77:15:db:1d:f4:a9:bd:02:
                    0a:e4:ff:e1:7f:82:2a:fd:07:6c:6d:bb:ec:a5:fd:
                    b0:00:a7:d4:ba:e3:d7:98:95:76:9b:e7:3a:8a:f3:
                    70:60:11:94:28:92:d9:bc:0d:db:6f:ae:08:75:42:
                    ab:0e:59:a0:57:5c:88:5f:28:cd:14:f0:ef:4d:8b:
                    25:63:5d:32:90:80:f7:96:32:cb:3d:f8:d7:18:30:
                    a6:f9:d2:13:99:45:91:e0:65:33:cf:7a:bd:b4:68:
                    c0:79:62:26:33:dd:4a:bc:3c:4b:5f:1b:71:1b:1d:
                    f1:70:0b:a2:5b:08:79:8b:73:05:53:68:bf:64:f4:
                    5f:d3:41:ca:7e:3e:1d:d7:aa:14:09:33:f8:5e:41:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F6:31:AE:85:4B:40:EC:0F:EF:90:9B:41:1E:CF:68:78:D1:2B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.223.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a3:ec:e8:12:7e:e3:4b:91:13:de:89:17:eb:5e:23:6b:10:
         8f:60:33:82:8e:ae:b0:7d:69:eb:45:b6:0a:41:65:aa:56:9e:
         fd:4a:6e:e3:86:fe:02:9b:ec:d8:71:4c:2e:3e:d5:5e:cb:5b:
         e3:8f:2d:5e:66:51:47:22:83:6d:ec:38:03:ca:3e:a0:cc:00:
         ee:ac:a0:6b:58:48:3e:2b:62:5b:9f:0e:e8:39:d1:8b:e6:ce:
         6b:1c:78:43:c4:de:bd:2f:56:b6:db:8a:48:c4:00:b9:97:58:
         d9:8c:f2:6a:37:90:5b:b0:00:da:43:4e:be:60:63:95:61:4e:
         67:0b:6f:11:17:60:ed:9f:c0:05:ed:f4:dc:65:e4:29:a2:e1:
         ea:42:b5:94:47:90:ba:26:83:44:2c:89:c3:b0:b8:2c:cf:04:
         ec:e5:be:ff:90:fa:9a:0a:82:c7:01:19:1b:9f:bf:59:5c:6f:
         a0:f8:37:88:1a:f3:d0:07:24:ae:af:2c:3f:fc:15:d3:66:df:
         47:ea:db:53:a0:e7:6b:b4:ab:14:77:4a:f2:f2:31:37:ce:5d:
         85:2c:c9:e3:7d:be:33:88:94:a4:9b:da:43:09:b5:21:f3:f1:
         01:c3:d5:1b:68:c5:3c:f2:1b:4b:ea:c5:08:76:bb:cd:70:dd:
         16:ce:56:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:40 2026 by rpki-client