Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/4b302eb7-9501-35bb-9b55-8a81796b0286.roa
File:                     4b302eb7-9501-35bb-9b55-8a81796b0286.roa (raw, json)
Hash identifier:          NmCqB7aLdR55Ojtc0b4+HJ5eZBhCd33CR3cR3m9WLaE=
Subject key identifier:   00:51:3E:A0:A1:ED:AC:48:3C:A2:CA:CF:4F:E5:5F:0B:F9:6C:88:AE
Certificate issuer:       /CN=df247d2f-5f6f-414c-b8c9-181359f105bf
Certificate serial:       010D0C9F4328584E238995ECD554F9569B90F2C0
Authority key identifier: 03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/4b302eb7-9501-35bb-9b55-8a81796b0286.roa
Signing time:             Thu 11 Jun 2026 18:19:01 +0000
ROA not before:           Thu 11 Jun 2026 18:19:01 +0000
ROA not after:            Wed 09 Sep 2026 18:19:01 +0000
asID:                     13855
IP address blocks:        24.149.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:89:95:ec:d5:54:f9:56:9b:90:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df247d2f-5f6f-414c-b8c9-181359f105bf
        Validity
            Not Before: Jun 11 18:19:01 2026 GMT
            Not After : Sep  9 18:19:01 2026 GMT
        Subject: CN=58684fbd-8810-4475-b61c-41735870da3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:f1:78:84:84:80:1f:af:68:54:a4:76:69:
                    7e:30:f4:9e:91:f0:c7:28:0d:91:00:d4:63:57:7f:
                    b7:38:7c:f7:7f:84:26:ce:06:0c:c3:b9:42:0b:c0:
                    04:d9:26:4f:f8:77:47:f7:a5:fb:d8:98:7b:7a:ea:
                    43:15:4a:2f:ac:90:36:fb:75:59:f7:ee:44:78:26:
                    b8:ec:4b:0c:95:33:7c:b3:53:4d:0e:e0:c7:07:e3:
                    3f:e5:5e:68:f2:9b:3a:00:58:62:ce:89:fc:a7:3e:
                    44:94:37:59:5c:22:ef:3c:cc:60:5b:03:09:d3:59:
                    5e:6c:d7:38:aa:66:d3:fa:6e:cb:cf:8c:c6:0f:fb:
                    fd:65:ef:9a:1b:61:f9:32:20:61:91:d5:da:81:54:
                    ce:ae:04:3e:9e:55:2d:f3:50:74:cb:2e:78:b4:41:
                    ae:6a:8d:33:87:37:75:a2:8a:c4:7d:88:8f:84:dc:
                    88:54:d9:10:e5:bd:ba:07:6e:81:46:74:4b:b1:22:
                    b2:7f:ed:33:9d:fb:c3:0a:e2:cb:01:2b:9e:d4:4e:
                    95:df:f6:10:58:9d:91:99:fd:2b:ef:f8:ee:f2:ee:
                    13:d0:b5:69:06:6d:c4:34:da:e5:db:58:f0:f6:e4:
                    27:e0:12:eb:e7:5a:a6:30:06:06:04:e1:58:94:fc:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:51:3E:A0:A1:ED:AC:48:3C:A2:CA:CF:4F:E5:5F:0B:F9:6C:88:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/4b302eb7-9501-35bb-9b55-8a81796b0286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf/df247d2f-5f6f-414c-b8c9-181359f105bf.crl

            X509v3 Authority Key Identifier:
                keyid:03:BB:A1:0F:14:B2:C4:C7:5E:C8:B5:D9:2E:81:2F:15:48:0D:47:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df247d2f-5f6f-414c-b8c9-181359f105bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:4a:60:7a:b2:79:fa:95:69:82:fb:f7:b9:ef:db:1b:f3:
         fb:64:71:0f:de:d4:a3:9d:31:11:ce:7f:8b:41:37:26:c3:f7:
         59:39:52:18:ff:10:9b:d2:a2:3b:27:01:bd:0d:c5:6f:b7:cc:
         ac:ba:66:a6:e4:9a:d1:92:cc:ce:05:4a:63:34:ff:ef:66:59:
         b1:a4:f5:a8:88:cc:ba:77:be:7b:a0:9c:f4:78:34:a4:05:b1:
         9c:16:42:d8:b2:d8:05:08:eb:e0:77:c7:b9:4c:6f:54:8a:7d:
         5f:18:e9:16:ad:03:7b:6c:c1:d3:4c:a1:10:5d:1a:bc:60:0c:
         28:92:a4:b2:dd:08:10:df:ad:a8:18:90:ee:96:a6:93:66:bf:
         db:2c:8b:48:42:d4:d7:e9:39:51:80:ee:5e:d2:de:5e:81:61:
         ac:97:bb:f1:e3:a7:3c:14:35:e7:cd:0b:6a:c9:50:2c:32:f7:
         5a:81:42:d5:74:d5:93:9f:f8:0e:cb:ac:1b:d8:e0:94:27:01:
         3c:8f:ac:8e:6c:0c:ec:8a:99:40:2a:98:9e:0f:71:32:bd:2f:
         2f:14:55:4c:05:cb:c1:c1:0b:56:c7:65:f3:f1:10:7f:1f:97:
         e1:a2:aa:a3:e7:b4:25:a7:bb:47:c4:bb:e6:5c:e2:4c:d1:b5:
         86:ef:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:42 2026 by rpki-client