Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/31f66441-4361-3c82-8a4b-4acdec647cbc.roa
File:                     31f66441-4361-3c82-8a4b-4acdec647cbc.roa (raw, json)
Hash identifier:          HkZvkyjh3ORsZJiyeUn9i9lbQbcTezH/4uSHwAicdHs=
Subject key identifier:   0B:A8:B9:9A:EF:FE:C3:6E:E7:A4:18:E5:22:72:D3:A4:CF:64:63:55
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584F3CE29D97E9B8E42A09E93B00
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/31f66441-4361-3c82-8a4b-4acdec647cbc.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7992
IP address blocks:        24.51.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:9d:97:e9:b8:e4:2a:09:e9:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=62a04302-770e-4022-b481-8a8dd2852a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:5a:0f:5b:58:a1:ec:c0:86:b9:57:19:e1:
                    f8:5b:f5:12:10:05:6d:ce:a1:30:ea:1e:5c:50:f9:
                    1e:97:07:b0:c9:02:2f:e1:a5:f1:a5:1c:ef:8b:c4:
                    06:4d:00:74:a0:dd:a8:2f:02:ec:ca:de:5a:ad:92:
                    68:e0:19:fb:b4:d7:37:bb:d3:e7:50:e6:75:48:76:
                    94:d6:ea:69:ff:9e:60:dd:ee:c5:96:b4:47:33:75:
                    cc:76:d9:73:70:3e:93:b8:5d:e2:88:3f:f2:0e:20:
                    1e:5a:39:61:42:51:fa:31:a0:58:1f:88:e0:69:ec:
                    96:fc:cd:f5:6a:bb:94:fe:e4:b0:30:59:41:84:7f:
                    4d:1f:9f:f4:af:36:90:a1:ca:33:c4:72:b8:03:ed:
                    31:ca:a6:fa:45:f7:82:51:17:1c:1e:0c:1d:15:97:
                    0a:4b:cf:07:15:ab:72:d1:1c:8a:b8:61:a1:52:12:
                    85:0a:91:54:d1:3c:1f:5d:c3:a4:10:44:de:3d:0f:
                    a9:87:72:70:ca:4f:c2:bc:0c:f2:41:97:ce:8e:86:
                    a0:e6:b5:fe:07:74:b3:68:74:04:cc:c1:98:49:61:
                    b9:a3:99:c1:e9:d0:7c:97:2c:41:95:62:3e:30:d7:
                    74:2b:22:d3:4f:ae:35:28:d8:df:97:61:de:ce:3e:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:B9:9A:EF:FE:C3:6E:E7:A4:18:E5:22:72:D3:A4:CF:64:63:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/31f66441-4361-3c82-8a4b-4acdec647cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:51:c6:eb:e9:69:2f:85:83:b8:24:f2:cc:01:37:59:7d:83:
         9e:6a:15:06:cf:47:29:84:dc:74:ab:09:70:d5:8b:11:89:50:
         e0:ef:ab:55:1f:3f:d9:77:fd:95:64:76:38:d6:e7:fd:f9:23:
         e5:84:f8:4e:24:12:fd:6d:f9:fd:b0:18:a1:e9:5f:0c:f3:a0:
         df:5b:e2:f7:cc:93:ea:c7:72:ad:78:e8:04:85:25:d6:ef:5c:
         99:a4:96:50:54:dc:27:f9:b9:91:47:f1:34:8f:fb:0a:fd:4f:
         72:44:2a:52:fa:bf:89:13:56:89:19:de:e4:ac:b3:bb:16:b8:
         8b:d7:8e:94:2e:e0:19:08:84:4a:76:cc:28:33:d2:c7:e5:1b:
         72:eb:56:a9:b8:27:bc:34:61:c1:b7:82:f4:f3:80:e9:76:85:
         3c:8d:7b:87:8a:24:07:6f:bf:59:6f:00:35:39:34:72:23:18:
         4a:29:f5:c0:99:e9:11:38:55:af:1d:93:b3:f6:c5:5d:c3:a9:
         20:8d:2d:45:0d:e7:f9:93:e9:09:e7:e4:59:9d:a7:a7:b4:10:
         36:ca:5b:8c:77:d3:c9:80:99:14:0c:40:72:d2:7a:c4:75:42:
         68:3f:44:5e:22:ee:4b:98:1b:bd:50:05:89:4f:59:8b:31:5e:
         28:a7:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:41:28 2026 by rpki-client