Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa
File:                     c17d307a-6891-39f3-9e92-66ead209b199.roa (raw, json)
Hash identifier:          I0oL7McUU7t5DAxBKvAzHnVlQr4KAFV34SdImvuD+n0=
Subject key identifier:   AD:CA:06:A2:68:7A:C9:0E:57:09:8D:7C:8B:3E:F1:83:E3:1F:54:26
Certificate issuer:       /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
Certificate serial:       010D0C9F4328584E0005E4E0A05F4B1B761FEC40
Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     11067
IP address blocks:        216.251.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e4:e0:a0:5f:4b:1b:76:1f:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=00fae18e-8d40-4dce-bb18-b36465e2581d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:59:3e:49:76:ce:29:40:8f:b8:fc:ba:cf:
                    60:48:df:a2:8c:17:1c:8a:33:af:d5:d1:44:4d:78:
                    25:19:ac:0c:22:6a:9b:84:c0:7a:d4:ee:64:d5:42:
                    22:16:ef:47:3f:3d:d6:0e:96:b7:2c:c1:cc:1b:3e:
                    6d:bd:70:6e:c3:3a:e9:38:9a:3e:10:7a:c6:70:8e:
                    04:a4:c6:2a:c6:01:7c:62:28:cc:bd:2b:19:41:4e:
                    7b:8c:20:31:2e:ef:98:7d:c4:14:87:02:66:23:29:
                    3b:6e:fb:c4:4a:3d:94:c6:eb:ff:19:cc:76:32:82:
                    82:7e:30:78:1d:25:0c:85:3b:09:02:cb:d9:b1:c6:
                    19:06:60:02:4d:e0:06:e4:50:aa:4a:14:5d:93:c9:
                    6b:2e:39:e5:b6:47:96:0e:06:81:ac:0e:a3:aa:b0:
                    b1:63:96:82:9f:dc:90:f3:b6:65:30:cc:12:83:f8:
                    f3:62:f8:57:9a:f8:de:2b:b7:56:cc:a7:e8:4a:db:
                    0e:e0:24:b8:f0:32:cc:f8:66:6f:df:ad:d5:e3:d2:
                    1f:14:60:05:92:8a:69:a2:58:24:c2:38:19:36:13:
                    5a:3c:8b:86:57:df:0e:53:75:ce:06:32:f9:d9:c3:
                    d1:9b:a1:d2:9d:30:95:a2:9e:9f:4c:5f:9e:1e:76:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CA:06:A2:68:7A:C9:0E:57:09:8D:7C:8B:3E:F1:83:E3:1F:54:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/c17d307a-6891-39f3-9e92-66ead209b199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl

            X509v3 Authority Key Identifier:
                keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.251.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:1f:b5:f2:ae:1b:c1:2a:de:92:aa:23:79:54:74:7c:3d:
         30:58:b4:0d:87:3a:85:65:93:55:d8:23:23:ad:c7:78:78:29:
         d6:9f:61:71:80:01:64:50:9b:1d:b4:9b:a7:66:27:ef:0b:5f:
         fb:8d:98:0f:56:95:dc:d6:21:a5:29:2c:d5:3a:bc:ca:af:d8:
         8d:93:d4:39:82:2a:53:9e:1d:15:3a:b9:a9:43:cd:92:8d:24:
         e1:a6:5b:cf:e9:6d:a7:d2:ef:25:62:01:3d:f7:bf:c1:37:88:
         55:c0:78:7b:4a:36:68:62:e5:ad:af:ed:4a:fc:68:b0:61:89:
         3d:dd:b6:e6:6e:cc:4e:cf:31:2e:6e:db:92:f3:b6:81:92:d2:
         8d:19:e6:93:7f:e3:f5:70:81:53:f5:47:83:d6:f1:e0:a0:c0:
         ea:fe:40:23:f4:50:45:70:41:53:3c:30:09:01:ee:d7:e4:dc:
         11:da:a7:7f:43:b4:5d:11:24:f7:76:de:0d:f6:be:c4:f9:3d:
         04:60:85:6a:36:c7:44:db:d4:6c:d5:9f:9b:40:32:bc:49:c8:
         84:00:d0:e8:58:71:2c:1e:11:6d:05:9d:c2:f1:89:a5:42:8f:
         35:43:f2:db:91:1a:f4:84:3d:ff:1c:58:b1:64:13:40:7a:28:
         47:d3:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:36 2026 by rpki-client