Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/4b302eb7-9501-35bb-9b55-8a81796b0286.roa
File:                     4b302eb7-9501-35bb-9b55-8a81796b0286.roa (raw, json)
Hash identifier:          h8zb2XHHsBEhuTAy6g+Lgu0LsjN9OzN0v5+scL7uXhI=
Subject key identifier:   96:5C:9A:30:D0:DA:0C:EE:44:44:9E:B4:C1:EB:1E:06:8B:6D:78:D6
Certificate issuer:       /CN=df247d2f-5f6f-414c-b8c9-181359f105bf
Certificate serial:       010D0C9F4328584F68282853F7AE360B92C49678
Authority key identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/4b302eb7-9501-35bb-9b55-8a81796b0286.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     13855
IP address blocks:        24.149.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:28:53:f7:ae:36:0b:92:c4:96:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df247d2f-5f6f-414c-b8c9-181359f105bf
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=01a24966-c40b-4f41-80eb-159b16f560eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:1d:bb:ba:18:46:a8:35:9c:4c:9e:1a:cd:
                    11:af:63:67:47:62:7e:3c:2f:25:22:d7:f5:af:66:
                    95:63:fc:f1:aa:5b:da:1c:cb:73:eb:1a:be:92:48:
                    06:d6:16:66:40:83:f7:c2:7a:fa:d5:a9:cc:dd:e4:
                    3c:7f:96:df:16:2f:3c:ee:e3:f6:15:5e:6a:2a:76:
                    ae:6f:ed:03:62:53:f1:be:fa:1f:c8:ab:37:84:71:
                    f8:97:97:34:c0:aa:86:da:59:2f:1c:db:b4:b0:7d:
                    de:5c:48:d7:3b:f5:02:ea:a9:5c:51:7e:b3:a4:f3:
                    ce:f7:d1:ff:bd:2d:40:70:11:76:b6:c3:e1:64:3b:
                    9a:6d:f7:04:bd:fd:36:0a:28:c9:ea:47:af:4a:ef:
                    c3:40:4a:fe:b3:a2:15:b1:37:d0:8e:db:dd:2c:df:
                    14:f0:27:4f:34:45:f5:0e:fc:c9:0a:4a:b4:50:68:
                    68:16:61:78:ad:b0:ee:e8:cf:be:02:50:85:1a:a7:
                    3c:28:18:18:8f:85:e1:51:99:ee:c0:69:7c:9a:a7:
                    08:4a:97:4c:2f:61:d6:ad:83:c9:2f:38:b1:0f:ea:
                    11:52:5b:dd:71:e0:67:55:39:d3:73:47:38:4b:6c:
                    9d:81:47:90:54:18:74:8a:04:e3:c7:6d:7f:9d:98:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5C:9A:30:D0:DA:0C:EE:44:44:9E:B4:C1:EB:1E:06:8B:6D:78:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/4b302eb7-9501-35bb-9b55-8a81796b0286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl

            X509v3 Authority Key Identifier:
                keyid:03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:1c:d7:ec:58:77:ad:f4:81:b0:7e:95:8d:04:02:11:16:
         9a:42:ee:84:37:66:69:1a:b9:7b:16:79:96:e5:14:9d:75:a6:
         2c:23:2a:c3:1a:79:f4:00:e7:59:3a:75:d6:c6:c8:80:66:7e:
         54:74:3c:dd:eb:6f:15:ce:3c:0a:b6:91:71:ab:71:e6:e8:75:
         5b:e7:a3:8c:f8:26:1f:f5:20:43:c1:55:b4:31:76:15:f2:0b:
         88:b9:b6:f9:2c:67:d0:ed:47:14:87:ea:c2:09:72:3c:6c:66:
         5b:a2:af:87:34:af:d9:21:7b:ed:5f:97:49:39:0f:00:c1:f8:
         1d:39:e5:93:6b:16:2e:5f:95:85:f4:20:01:c9:77:2e:dd:bd:
         1d:9a:7f:b7:08:24:e3:65:1a:75:21:0d:01:9b:7f:ca:ce:a8:
         66:4a:bd:64:c6:51:9d:80:b9:5e:e6:58:95:a4:71:6e:50:f5:
         4b:d8:f1:02:9b:4d:67:9e:70:05:f5:80:e4:2d:2d:03:fa:47:
         6d:4f:4d:56:0e:17:92:a9:15:d7:26:50:91:96:89:21:8f:de:
         a6:25:5b:ba:c2:49:5c:e1:18:cf:94:b9:db:9f:53:3a:0b:e5:
         af:7d:d3:fc:63:31:57:03:e1:63:92:9b:22:e1:86:17:aa:da:
         e4:7c:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:22:47 2026 by rpki-client