Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa
File:                     a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa (raw, json)
Hash identifier:          L2lK0V0SWha+Mt1ISXNY0eC7cxgt3+mcBZgQd36q9p4=
Subject key identifier:   C7:2E:A9:03:74:DA:88:BE:39:41:E1:87:EC:9B:37:CA:53:81:06:E5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E210F84CDF14157147ECCC000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     11351
IP address blocks:        24.58.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:84:cd:f1:41:57:14:7e:cc:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=3bb17872-12b6-41e0-8911-03ab4dea397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:e7:ac:5f:79:43:fa:69:4b:8c:07:69:91:
                    df:00:99:19:9c:76:99:1f:3d:f3:4d:d7:93:35:58:
                    1e:be:d6:74:95:33:e6:27:da:9e:e7:5a:3b:96:98:
                    20:1d:a8:fd:c6:57:21:01:17:3a:33:f8:20:b9:08:
                    e7:2e:e1:d6:28:fb:ba:d9:cb:66:5b:19:e2:8e:c2:
                    26:6a:ba:e3:60:d0:60:10:a9:66:b7:e7:98:7e:8b:
                    b4:f6:ae:ed:e2:04:32:07:ac:5e:df:11:ec:f0:1f:
                    f2:51:94:24:84:40:91:f3:f3:fa:ec:0b:08:6d:48:
                    96:8d:4a:3e:d6:8c:2c:5f:f3:59:dd:87:8a:5e:e1:
                    9b:17:08:95:9b:c3:02:75:f0:d0:fe:76:f0:04:3c:
                    82:02:4c:f1:7c:90:55:e4:7d:a6:1e:18:a9:06:49:
                    e2:26:d7:0f:ee:ad:45:8c:c9:9e:f0:3d:8a:7c:c6:
                    75:30:b9:73:35:36:b1:16:d3:4a:92:68:4a:a7:7d:
                    73:5c:c0:1a:e6:38:ec:0a:49:fa:b2:b9:2c:a4:77:
                    d4:1e:be:c6:a9:ac:56:a7:f0:5d:52:f5:46:ba:3e:
                    37:e5:76:8a:bc:d9:cb:57:91:0a:8a:a4:9c:7d:dc:
                    6b:a6:b6:e5:e6:f1:ee:a3:47:20:c3:b9:7f:e6:9d:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2E:A9:03:74:DA:88:BE:39:41:E1:87:EC:9B:37:CA:53:81:06:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:2d:dd:d8:d2:60:f8:84:5d:7d:58:d9:64:f3:6d:50:0d:
         84:d9:26:a7:fb:d7:aa:7b:1b:98:8a:e1:d4:fb:da:7b:3e:fa:
         c4:50:18:39:27:23:bf:54:84:7c:17:00:52:53:f7:fe:c7:ab:
         f2:a8:e3:c0:16:d9:87:9c:04:a7:68:e4:b0:b2:c9:7f:bd:25:
         26:86:28:96:27:b2:fb:83:dc:a8:d4:d3:3d:a3:fe:2b:2a:d7:
         00:34:92:22:7e:bb:90:26:07:55:f6:64:06:cc:33:14:25:89:
         bd:56:f4:a2:d9:a8:8e:77:23:b6:d3:92:28:94:5e:17:32:22:
         1e:9f:69:2e:3b:35:c0:3a:b0:95:10:1f:6c:de:95:c3:06:b3:
         8d:62:3a:61:eb:8e:ee:dc:a5:e4:01:57:d7:2a:a2:c9:03:a8:
         b5:a3:c6:d3:69:53:c1:a2:a1:c4:78:d3:a0:58:a0:49:73:ce:
         1f:43:5a:1d:a5:2e:b2:37:9c:2f:8b:aa:5e:18:97:79:f5:0e:
         41:68:79:3e:b0:73:08:f0:fd:2d:73:f9:2a:5f:64:04:61:d9:
         73:02:9f:6f:85:56:b6:fe:07:2e:66:b3:c1:3c:eb:95:d0:1d:
         b0:16:0c:b3:2b:71:b9:e9:7a:c5:30:ed:f4:89:06:99:da:eb:
         70:2d:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:01 2026 by rpki-client