Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/574fd772-434c-3b4c-84b1-20bf648aae21.roa
File:                     574fd772-434c-3b4c-84b1-20bf648aae21.roa (raw, json)
Hash identifier:          Tvvrg5Ly5yT1i5gWP6n/PkRrOiL+TZ5CJjm71hMt/7s=
Subject key identifier:   96:8A:44:AF:CC:A7:9B:F1:5E:63:A6:F2:1A:2E:3E:24:02:68:82:04
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D558576F46E3CC55D9CA37C80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/574fd772-434c-3b4c-84b1-20bf648aae21.roa
Signing time:             Sun 29 Mar 2026 23:14:12 +0000
ROA not before:           Sun 29 Mar 2026 23:14:12 +0000
ROA not after:            Sat 27 Jun 2026 23:14:12 +0000
asID:                     10753
IP address blocks:        216.24.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:85:76:f4:6e:3c:c5:5d:9c:a3:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 29 23:14:12 2026 GMT
            Not After : Jun 27 23:14:12 2026 GMT
        Subject: CN=b689c75a-9569-497c-8901-bc50e9b141b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:97:21:e9:d5:62:f9:88:81:4e:f4:73:66:
                    ae:cd:17:22:cb:20:40:b1:10:4c:f6:7a:a8:f7:26:
                    06:69:46:8c:2b:16:93:07:00:ed:31:71:21:cf:bb:
                    63:bc:4e:6d:54:eb:80:4a:71:4d:a2:79:9c:fd:8b:
                    80:fc:83:01:13:c8:02:93:bf:4e:31:06:4a:23:d8:
                    83:09:37:07:9b:28:ae:89:ee:78:c3:06:67:70:80:
                    58:6a:57:8b:3a:02:7d:f3:62:da:8a:c2:6d:d8:fb:
                    eb:52:0b:e2:84:37:a4:d9:a1:e9:c3:f1:ea:ae:b1:
                    3a:77:fe:dc:c8:6e:42:dd:a5:0b:2a:e7:5f:a0:9a:
                    b7:0a:fb:ee:a3:88:1c:55:01:94:59:87:13:cd:81:
                    3b:d2:4b:85:58:59:75:a8:64:07:16:3d:ed:f3:7d:
                    1a:cd:c9:c6:33:58:b2:0b:c3:23:a4:fb:61:d8:3a:
                    98:e0:89:5c:37:67:f1:c5:1e:c4:0e:e1:2f:7c:f5:
                    72:14:9a:74:f7:cc:36:c3:8f:7b:0f:b0:3d:f1:1a:
                    12:ab:8a:dd:1c:75:3f:90:0b:84:9c:12:7f:97:43:
                    93:85:5c:4e:36:fb:c4:a1:17:30:9a:f4:12:c1:40:
                    c5:72:8b:84:b3:21:06:94:0e:43:0a:31:3b:04:d8:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8A:44:AF:CC:A7:9B:F1:5E:63:A6:F2:1A:2E:3E:24:02:68:82:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/574fd772-434c-3b4c-84b1-20bf648aae21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:46:54:9b:6b:d1:5a:a2:1e:1e:6d:53:ab:1d:fb:d7:39:65:
         a5:1b:20:6d:db:b4:93:62:c8:a9:20:23:04:9a:82:bc:5c:a6:
         f1:e6:ec:3a:2a:1d:bc:e6:21:9f:a9:38:db:fd:7d:33:38:2a:
         b4:08:34:65:c5:40:fc:fc:87:48:28:09:18:cd:16:30:fe:69:
         2e:b0:15:06:15:07:18:b3:8d:07:96:ce:48:cc:09:62:9b:62:
         a0:70:68:04:95:42:07:1b:31:63:c2:d5:39:92:16:e4:37:76:
         bf:a6:81:ee:e2:8a:9f:f6:c4:88:6a:c1:19:a0:60:db:61:cb:
         e8:39:e7:be:ad:be:22:de:1d:d6:b3:65:66:a2:b0:67:4c:27:
         7b:c8:83:3c:d0:51:87:e8:ab:f5:5a:44:8f:43:90:17:d4:a3:
         c8:28:3e:2f:b4:14:d5:8f:cf:04:0c:cc:2f:07:21:15:d0:26:
         9c:4d:23:6c:d6:42:c2:aa:87:66:61:21:80:eb:bd:ca:c0:56:
         37:59:e3:09:26:00:48:c5:ed:75:04:7b:eb:38:7a:41:88:ac:
         b0:de:7e:40:3c:b3:86:ba:e8:93:40:37:8e:47:a0:9a:e4:ca:
         cf:20:d9:f0:c0:3d:48:7e:4a:ff:50:c7:4e:cd:ce:a4:74:35:
         d5:84:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:28 2026 by rpki-client