Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/64143236-c9e6-376c-bc26-60c1bf738d17.roa
File:                     64143236-c9e6-376c-bc26-60c1bf738d17.roa (raw, json)
Hash identifier:          e6tPVz0vkq7IWx2A7oY3sV+GUVbaqSM97/g5m1icmNU=
Subject key identifier:   1C:C9:6E:DC:33:8E:DB:9C:66:D3:97:03:FB:89:08:30:8A:5A:CE:0E
Certificate issuer:       /CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
Certificate serial:       010D0C9F4328584E9EAFE949C8BE04E65D6F1580
Authority key identifier: F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/64143236-c9e6-376c-bc26-60c1bf738d17.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     40487
IP address blocks:        208.76.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e9:49:c8:be:04:e6:5d:6f:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=5db757b8-893e-4824-b5ef-968e6b130eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f4:26:c1:45:fa:5a:9a:ab:de:c8:55:15:ce:
                    61:f4:a1:e4:ab:dd:0a:4c:21:7b:a2:3d:9f:f1:fb:
                    9d:57:c7:ce:7c:91:a0:e9:0f:b7:dc:8d:44:59:59:
                    6b:ae:96:34:6a:98:7a:81:25:91:ac:c0:b5:99:b6:
                    f6:41:5a:77:9f:56:82:d8:67:d5:ba:04:46:7b:c7:
                    f0:1f:62:3d:15:ba:10:a1:83:83:a3:10:fe:c9:e4:
                    f4:a7:6f:6d:b6:0b:8a:71:bf:33:77:03:9e:40:ca:
                    b7:13:ba:8d:a9:6a:50:59:8e:d5:f1:a7:bc:8c:3e:
                    98:5e:67:3a:b5:38:4f:19:4f:c0:73:71:b0:65:9d:
                    92:bb:98:f2:05:31:51:3f:11:ea:78:c2:95:2e:81:
                    b7:8e:90:7a:95:38:f3:bc:30:6d:9d:ff:46:fb:80:
                    1d:e4:ff:c4:ed:61:38:ac:a2:8f:72:f4:9a:29:9e:
                    b0:f2:70:f9:21:8c:19:bf:7f:bd:2a:f1:f8:e2:8a:
                    72:0a:c6:bd:6a:74:5e:9b:70:f9:87:fd:dd:dc:ba:
                    73:d8:72:56:e1:50:69:ea:32:44:20:fb:a2:db:92:
                    59:24:e2:ad:31:18:d7:e2:9f:71:fd:74:6c:fb:7d:
                    f7:35:a4:7e:82:5a:f4:3b:b0:71:c1:75:ad:ad:0b:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C9:6E:DC:33:8E:DB:9C:66:D3:97:03:FB:89:08:30:8A:5A:CE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/64143236-c9e6-376c-bc26-60c1bf738d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:36:f1:0e:01:90:f1:91:1f:81:8d:42:44:dc:1a:62:a4:
         1f:6b:d7:58:18:d3:70:b2:0b:4b:01:9b:7e:21:b1:76:2d:89:
         9b:52:b9:89:2d:00:24:b4:45:50:4f:a6:83:e0:ef:db:a2:61:
         d3:4c:4d:2f:99:3b:2f:1b:06:f0:b1:03:e0:3a:70:54:a6:52:
         a7:fd:f3:93:ff:c7:91:80:4e:b6:2a:08:88:09:ee:9a:7c:aa:
         91:6b:31:5e:8a:99:95:4b:69:0e:f6:4b:0d:3b:a5:e3:44:2d:
         58:0d:9e:ff:1a:ca:04:f6:de:6c:cb:22:68:4e:d5:d6:5c:6e:
         9c:64:b4:fc:2a:c9:ff:87:a3:53:a3:8c:2c:99:af:3e:3b:69:
         4d:de:20:5f:e3:ee:9e:67:c3:01:90:b3:d4:86:8b:50:b5:77:
         c7:c4:48:ff:e6:15:e6:53:22:2c:ef:a0:0b:c4:c6:2f:59:da:
         48:1c:eb:46:9e:34:8f:5b:84:86:f0:2b:e7:7e:82:1a:e6:5b:
         94:a1:dd:bf:ba:fe:30:07:8d:25:63:1b:ca:bc:de:53:c9:75:
         23:b0:4f:b0:d5:a8:75:3e:53:1e:12:57:92:24:1a:c7:27:66:
         af:a9:ba:7b:0d:31:6f:f2:f2:fd:95:51:05:fd:eb:a7:d5:ae:
         4b:df:35:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:25 2026 by rpki-client