Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a124af3d-72b0-3343-9467-6f337b7786e1.roa
File:                     a124af3d-72b0-3343-9467-6f337b7786e1.roa (raw, json)
Hash identifier:          ryBrEQof9SFGPtT/dUCbTe25WYe1Z7cTzHMmavYJFck=
Subject key identifier:   68:22:C9:E5:18:3A:D1:F9:06:67:34:76:8D:EF:BD:6D:3C:4C:A2:79
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E26919ED40D4097BA5778AE00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a124af3d-72b0-3343-9467-6f337b7786e1.roa
Signing time:             Fri 12 Jun 2026 20:22:38 +0000
ROA not before:           Fri 12 Jun 2026 20:22:38 +0000
ROA not after:            Thu 10 Sep 2026 20:22:38 +0000
asID:                     30219
IP address blocks:        209.133.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:91:9e:d4:0d:40:97:ba:57:78:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 12 20:22:38 2026 GMT
            Not After : Sep 10 20:22:38 2026 GMT
        Subject: CN=ff67c5ec-6c58-4bfa-a44b-02739f087653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:ac:5a:ec:4c:4f:84:15:9b:2f:c0:30:8f:
                    2a:81:25:21:ec:05:20:33:89:1b:fb:17:9f:b5:e7:
                    13:ef:92:f4:66:12:01:ae:f1:6f:d0:30:2e:22:c3:
                    be:30:46:f0:77:54:3a:89:d3:0b:03:b5:28:5a:fd:
                    62:bc:a8:6b:dd:04:a9:e6:63:13:67:c9:17:7c:07:
                    d1:b2:60:94:82:92:56:ed:b8:91:bd:3d:0e:9b:af:
                    b9:8f:54:4d:d4:8a:69:2b:6c:e0:d3:db:cd:1b:b3:
                    60:2b:3a:31:18:20:00:1f:f4:f5:e1:61:13:49:a2:
                    d0:82:3d:0a:f0:56:f6:f9:e3:21:b4:35:a1:ae:e8:
                    c5:aa:af:ce:46:39:5e:14:59:3f:d5:84:87:47:7e:
                    49:00:12:ec:65:75:12:85:3a:3a:b1:c8:dd:9e:6b:
                    ea:e6:d3:e6:57:87:54:76:24:9a:0e:59:4a:1f:2b:
                    49:0b:96:6a:e2:2c:14:1e:4f:21:04:a5:4d:e9:53:
                    a9:5d:62:42:4c:e5:20:e1:dc:69:2f:d3:5c:04:da:
                    dc:e4:0c:8d:0d:27:91:bc:3b:a8:82:ca:84:f9:02:
                    41:4e:92:c1:c9:1c:60:56:36:2d:d4:6c:29:32:92:
                    5f:57:e4:55:ed:76:7c:e4:60:bf:cc:68:46:47:e6:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:C9:E5:18:3A:D1:F9:06:67:34:76:8D:EF:BD:6D:3C:4C:A2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a124af3d-72b0-3343-9467-6f337b7786e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a4:df:ff:19:25:9f:f3:e2:ea:19:f8:d8:60:13:f0:b1:fa:
         84:68:9f:43:07:be:21:4e:b6:2e:09:b6:de:19:f5:5b:7f:7b:
         30:07:4f:a5:35:79:61:82:9f:11:c3:55:0d:48:88:6c:44:19:
         c7:89:8a:20:c2:f6:b4:5c:fe:11:2f:04:9d:9b:14:e6:e8:79:
         c3:fa:95:4a:41:46:57:87:4d:86:7e:15:26:9c:2a:02:53:54:
         12:e8:b2:b3:4a:df:8f:f8:d3:5d:ee:22:24:02:63:42:bd:06:
         84:e3:e9:8d:49:e6:d6:f1:6c:bc:4d:fb:c3:57:08:5c:29:25:
         15:f5:c1:1b:7e:d8:dc:b4:ab:97:8c:bb:93:7a:5a:76:b9:ab:
         a6:4f:65:20:69:25:4e:9d:81:5e:0b:8e:1b:f8:8f:05:c3:64:
         97:be:be:81:c9:c8:06:64:54:c4:2d:07:1d:35:01:5e:33:f4:
         cf:70:63:66:a1:9a:76:9f:33:f2:97:bf:0e:01:a1:c3:c0:52:
         30:b0:d7:1f:cd:21:28:ca:50:5f:7f:19:66:2c:ff:ed:ba:1b:
         de:6b:ea:35:73:b2:f9:86:e7:5a:12:2f:7f:8e:e2:32:5c:9d:
         d9:f1:83:46:df:92:a4:e4:36:6e:b1:12:82:f1:ec:5f:1b:c0:
         71:f8:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:34 2026 by rpki-client