Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
File:                     db249113-d187-3685-b1cd-e35d0bc9ece7.roa (raw, json)
Hash identifier:          iitvAhigCThTW8ZMYLFB8D5chCKkti1aFpjC1SfKoV4=
Subject key identifier:   B5:C8:E6:43:94:DD:63:FC:82:73:3B:D2:46:83:7E:6D:76:DE:BE:F6
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F4328584F225D091C4382852CE8E03660
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     715
IP address blocks:        216.21.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:09:1c:43:82:85:2c:e8:e0:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=425737a5-da48-424e-b8f1-556ae860e450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:8b:7f:33:a0:e0:12:72:5b:14:04:35:02:
                    7c:55:cb:f8:eb:f0:5d:28:bb:16:6d:d7:b5:2e:7b:
                    e3:1a:53:6e:25:36:61:79:e7:0c:8e:14:e3:0a:50:
                    f8:af:1e:8a:e3:bf:e5:f0:22:1f:14:3c:f0:72:7d:
                    be:6a:c5:b7:92:de:4b:c8:36:11:d6:cf:9b:91:4a:
                    5a:78:66:30:08:cd:2e:30:2f:06:a5:46:c0:43:83:
                    06:33:5d:ee:5f:b4:f1:d6:fc:33:11:f3:65:94:f6:
                    93:8c:1e:59:de:b5:25:e8:da:2d:a0:cf:e3:2b:fe:
                    ae:2d:5d:1f:9a:a5:95:5c:9b:3c:f8:57:2f:7f:9d:
                    55:b8:4c:36:89:07:c1:ac:4f:f8:68:35:01:10:9b:
                    f3:e6:00:3d:08:7e:b4:9c:40:94:7d:66:46:48:cf:
                    b9:17:41:69:fb:a5:ed:d6:3a:df:61:69:18:4e:e7:
                    bb:e9:23:6c:c9:6c:60:29:9b:9b:3e:50:16:cc:5e:
                    85:6b:be:77:57:fe:1b:2e:bc:27:60:9c:14:7f:f2:
                    e9:91:b0:6b:6b:5b:9a:1a:86:28:6d:be:cb:13:13:
                    f1:48:ac:ff:4d:e0:f0:d9:20:f3:5d:50:a3:ef:5a:
                    11:53:02:da:b4:65:5c:27:23:ca:b2:53:90:81:e9:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:E6:43:94:DD:63:FC:82:73:3B:D2:46:83:7E:6D:76:DE:BE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:a1:f9:0f:e5:cd:8c:0b:33:d9:92:fd:dc:d7:17:0a:be:
         1f:6c:c4:07:41:c0:a2:a1:40:31:9c:a8:a2:d0:1c:13:34:45:
         c9:01:75:b5:c7:18:37:43:16:5e:b6:ea:e2:50:0b:af:39:95:
         e9:0b:99:21:2a:5e:6c:16:c7:12:24:cf:c0:a4:f2:a9:73:f5:
         78:dd:61:ad:2f:c0:28:56:99:7e:b6:1b:19:48:25:a2:4c:85:
         67:ef:e7:97:1e:bb:5d:63:b4:e6:18:e6:b5:2c:fb:04:9d:ee:
         95:8e:5d:29:f4:ad:fb:34:7b:ea:b8:dd:9e:b7:aa:8a:72:5b:
         3a:e6:97:bb:c2:37:9e:ff:6f:ee:51:6a:d6:f8:b8:83:b4:7e:
         26:c6:dc:f4:30:d7:db:91:b1:b2:1e:43:66:c9:39:ce:23:a0:
         e8:46:49:4b:23:7c:0a:db:d3:d0:06:aa:55:e2:3f:bb:92:d2:
         38:9c:69:2a:c6:aa:ab:36:db:27:84:60:0e:7f:c9:a7:c3:d1:
         e9:5d:6f:a1:20:31:a6:14:1a:50:89:9b:be:81:c8:3f:6d:f4:
         a4:7e:56:5f:29:9b:b8:f1:d6:e0:04:ba:b0:0e:8b:1c:ca:89:
         1d:26:10:68:15:9c:ff:45:f2:90:f4:1d:40:32:0b:b2:16:1f:
         b1:3a:ff:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:23:36 2026 by rpki-client