Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa
File:                     279b99c7-6717-3c8a-974d-137532afc328.roa (raw, json)
Hash identifier:          i4NH6HpdpYxfhfQCW+1Y5n5BjzQGEYBSfVlwwk1mjC0=
Subject key identifier:   1F:95:4A:5A:A9:1D:CE:56:86:FF:AF:E4:31:45:8F:9B:9B:C8:6D:86
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E1B79904A648271199D925640
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     10397
IP address blocks:        208.85.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:90:4a:64:82:71:19:9d:92:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=71ea9415-81eb-4891-847d-b9ec0b47ec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e6:79:b8:c5:d3:45:ab:aa:0c:8e:6f:08:8f:
                    77:05:9e:7e:fb:7a:60:db:76:55:90:02:1d:17:33:
                    87:c5:cb:b1:23:b5:ab:b6:e5:70:ce:79:9d:2b:06:
                    4b:51:33:55:1a:31:cb:d0:9c:7b:4c:81:f0:e6:5a:
                    40:57:dc:2b:7e:96:dc:21:0a:49:0b:55:7b:02:20:
                    79:e8:f8:63:f7:74:0d:b2:80:7a:b1:31:76:4d:14:
                    d2:b5:51:cf:de:46:23:14:48:33:5d:78:f7:1f:58:
                    31:32:5c:1f:4c:f4:7c:8e:43:68:94:ff:3d:31:a5:
                    e4:22:e1:6c:9b:93:83:05:18:c1:da:02:4e:6e:f0:
                    32:2e:56:92:3f:ee:a5:dc:06:94:b7:71:ec:61:4d:
                    a5:83:34:35:69:45:d6:9a:42:4b:88:a7:af:34:a4:
                    4d:c7:63:64:94:1d:a4:f7:9a:43:56:63:1b:06:27:
                    c8:06:18:e4:dc:60:5c:13:d4:ab:ca:6f:15:5b:36:
                    97:df:ff:8c:a5:51:fd:5f:6b:f0:81:51:62:66:f2:
                    db:3d:60:7c:a4:83:97:8a:e3:79:58:f9:33:d2:d4:
                    af:f9:48:26:bf:51:b5:d9:a3:31:7d:d0:e3:8b:9a:
                    3e:11:9a:f1:1d:a1:10:21:55:c7:d4:f9:65:9c:f0:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:4A:5A:A9:1D:CE:56:86:FF:AF:E4:31:45:8F:9B:9B:C8:6D:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:43:7a:c8:e5:cd:5a:9b:5b:e6:8a:f7:cf:2a:57:e2:c8:a7:
         b6:6a:bd:26:59:4c:d0:85:ff:48:ec:85:d8:c0:ed:7f:f9:2e:
         23:22:dc:16:46:76:72:9b:1e:be:02:cb:59:df:cb:8f:cd:25:
         fa:24:ec:02:e6:44:c4:4b:8f:d0:64:52:8f:a3:e5:c6:71:8f:
         15:0a:37:80:67:48:ee:08:81:60:16:ea:e3:51:0b:86:36:e9:
         ee:ba:a3:f3:68:c3:df:ea:5f:5d:e0:0d:5e:de:91:8b:23:c2:
         fe:ce:6f:71:2b:9e:25:42:30:d9:fa:cf:a2:29:c8:ec:60:f5:
         62:92:00:71:8d:b5:1b:03:a7:c9:67:74:e6:1c:53:15:c0:4b:
         49:20:76:72:d1:15:9c:33:94:4a:a1:94:d6:56:8f:35:cf:8f:
         30:a1:97:21:c7:eb:f0:80:e9:63:59:7e:e3:58:af:6c:22:88:
         8d:ba:36:08:36:6d:b1:89:9e:cb:11:e2:a4:17:ed:15:c2:36:
         77:ed:a1:b6:c4:c7:e7:c6:c9:c8:04:55:1f:1e:33:44:a3:57:
         7b:03:88:41:84:e0:ce:87:ef:53:8c:da:49:de:bc:79:72:9e:
         ad:da:ca:7a:ae:dd:6e:7f:06:57:86:5c:11:ad:db:2f:4c:fc:
         eb:7c:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:44 2026 by rpki-client