Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/478248af-1257-3a91-82e9-a505f2e92769.roa
File:                     478248af-1257-3a91-82e9-a505f2e92769.roa (raw, json)
Hash identifier:          OgoU3NA3ZuMpkHLpybPYIaXxxGiOEKiPIwCljsICV/8=
Subject key identifier:   71:08:89:28:E9:3C:33:09:1C:4E:74:35:44:8A:4B:72:1C:3B:06:7F
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584EA2DFC12654BB3A6A806ECF00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/478248af-1257-3a91-82e9-a505f2e92769.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     12083
IP address blocks:        24.214.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c1:26:54:bb:3a:6a:80:6e:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=b15771fb-0cca-4701-895e-1c421a07e58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:f4:0b:0d:b0:7e:a8:53:3a:88:65:f6:fc:
                    57:8e:1f:0c:f3:49:5c:aa:e1:e7:8c:4f:77:f2:d2:
                    cc:91:c5:8d:cd:8c:68:d9:a6:b0:1a:41:3a:8c:24:
                    88:63:81:4c:2a:e8:6c:e9:50:53:18:3b:3b:91:7c:
                    32:05:8a:e2:b1:c5:2e:39:00:f3:b9:8f:d2:6c:2d:
                    d5:4f:d7:08:31:37:00:e5:61:88:9b:1f:20:67:30:
                    72:0f:93:53:df:90:99:a4:bb:be:e7:d7:5f:d1:e9:
                    e2:6d:a5:84:aa:a7:de:3e:c9:bb:ac:a2:43:be:01:
                    76:c9:a3:a5:d8:1d:a9:3e:fb:17:2e:e8:e0:2b:e8:
                    31:ed:6c:b5:0c:e5:52:3c:18:85:c9:7f:3c:c6:16:
                    51:fb:02:32:c5:1a:e3:32:c5:18:61:19:b4:2f:d5:
                    de:88:f9:5a:9f:4c:56:05:c2:50:8c:ba:a5:c5:48:
                    95:9c:be:b6:87:06:22:2e:d6:dd:46:03:fc:9a:ff:
                    6e:0d:06:c4:ae:b4:62:2d:49:c2:f5:a5:15:f3:81:
                    88:48:e6:ab:56:ce:6c:7b:33:6a:47:80:19:f1:3d:
                    aa:ca:d4:43:0f:c4:00:79:12:a1:3f:63:43:07:3a:
                    e3:ce:18:40:ef:0c:02:5b:5a:50:4f:87:07:12:2c:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:89:28:E9:3C:33:09:1C:4E:74:35:44:8A:4B:72:1C:3B:06:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/478248af-1257-3a91-82e9-a505f2e92769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:2e:0a:fe:1e:ba:6d:5e:1b:8c:23:d2:a9:2e:3b:50:c7:
         89:ff:4c:95:9e:75:4b:03:b0:57:7c:1e:8c:d8:33:81:66:8c:
         f5:3b:54:b2:ea:fc:45:2b:c4:5b:5c:62:88:1e:67:0e:07:fc:
         f0:8f:5b:cb:90:78:f1:66:76:21:0a:45:52:1f:ca:46:8e:55:
         0d:68:76:18:23:34:fb:20:34:6e:32:4d:70:6d:4e:f6:8a:8e:
         c0:d9:c0:79:04:c9:75:5d:d4:eb:91:64:b4:7d:2f:f4:4d:a7:
         a1:0f:a9:09:00:01:42:71:58:ca:78:b9:89:9d:14:11:3a:b8:
         8a:e2:87:fc:f4:99:e3:15:80:18:b9:5f:27:0c:6e:ef:3c:34:
         a7:d6:ae:0a:29:0d:9e:77:42:ed:0a:6b:85:c2:d0:78:bf:9b:
         a2:2d:02:de:ef:b0:27:90:e9:5d:38:56:c8:42:a8:1a:b8:51:
         e3:ca:7f:e8:65:9a:be:1a:66:49:89:2f:3a:7c:c2:a5:48:65:
         4a:9c:38:71:55:3e:26:71:30:5c:e9:87:cd:e4:d9:eb:e4:ba:
         dd:e0:9a:2e:fc:32:f2:d3:f0:ae:6d:85:01:b2:93:12:8a:15:
         39:38:92:42:2d:8c:ca:54:55:2e:f7:e2:06:28:7f:30:1e:d3:
         92:98:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:57:17 2026 by rpki-client