Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f47f61b0-e92b-364c-a3d5-efaff88e099f.roa
File:                     f47f61b0-e92b-364c-a3d5-efaff88e099f.roa (raw, json)
Hash identifier:          9CV1x4lnars6NOBWOG2DZEKJXIWtZ0kdg/rxgqXFlGk=
Subject key identifier:   ED:1C:85:A6:84:BB:B8:3E:2C:9D:5E:4B:E5:1B:30:54:5E:B7:6A:11
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584E1CDEE27DD2108C3DFE088800
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f47f61b0-e92b-364c-a3d5-efaff88e099f.roa
Signing time:             Tue 09 Jun 2026 09:00:13 +0000
ROA not before:           Tue 09 Jun 2026 09:00:13 +0000
ROA not after:            Mon 07 Sep 2026 09:00:13 +0000
asID:                     18956
IP address blocks:        209.196.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:de:e2:7d:d2:10:8c:3d:fe:08:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Jun  9 09:00:13 2026 GMT
            Not After : Sep  7 09:00:13 2026 GMT
        Subject: CN=1e887af0-46db-4461-9d0b-68decb48b427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:1c:a5:aa:ce:b0:a5:d7:21:ca:88:57:b3:
                    e0:a8:50:cf:2d:62:2a:f2:56:13:e8:a7:3c:28:d8:
                    e7:03:ba:90:14:fd:b5:0d:97:4a:20:8f:e6:56:cd:
                    44:8e:d2:1c:35:e1:43:5f:cd:22:c1:0e:6e:00:9f:
                    fb:d1:ae:34:33:e5:0f:98:84:68:f6:41:99:a4:f1:
                    7c:6d:06:de:7f:dd:ea:2b:4f:cd:38:0f:61:8e:dc:
                    af:c6:3e:c6:d2:e0:ec:e4:00:7c:93:2a:a4:da:9e:
                    42:76:21:77:67:d1:df:08:46:63:f9:26:63:ee:56:
                    6a:8d:a1:f5:f8:63:42:c7:9a:79:38:4a:10:99:61:
                    0a:6b:f1:28:7e:c5:1b:a2:93:c4:c6:77:26:af:c4:
                    b0:e9:d3:69:94:93:1a:50:d9:83:8a:6f:52:15:43:
                    22:96:7d:6a:65:8f:fe:10:d2:7f:c1:fc:ee:c8:fe:
                    ea:5c:77:bb:6e:a7:18:b7:e4:5c:2f:02:27:7f:bc:
                    76:e1:a4:8d:23:13:3d:f2:5b:53:7f:88:72:4f:6a:
                    00:6e:a1:f9:93:bb:c7:40:8c:fb:9e:a1:8d:c5:9f:
                    d6:4c:7c:d6:b4:e5:ee:d1:c9:3e:dd:11:9e:d0:ea:
                    a2:b7:fa:cb:3a:d1:4c:ee:8a:d9:ac:c2:ce:7e:80:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:85:A6:84:BB:B8:3E:2C:9D:5E:4B:E5:1B:30:54:5E:B7:6A:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f47f61b0-e92b-364c-a3d5-efaff88e099f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:04:be:f7:89:16:47:9a:c3:a6:55:bb:78:6c:70:f2:12:f0:
         70:27:83:c5:8f:d5:68:bb:4f:19:d7:87:94:8d:86:8d:ec:cf:
         32:59:a5:54:a7:11:e8:7a:3d:c4:18:01:2c:36:7b:58:c5:e2:
         4c:3e:74:88:92:c6:42:00:4d:19:98:b6:42:de:e6:e5:a2:70:
         da:61:d2:7f:a8:d9:45:76:39:35:cd:a2:cf:f0:c9:47:a9:9a:
         6a:4c:d0:60:30:aa:4f:e4:37:2d:7e:3c:84:44:5a:c5:ab:2b:
         ad:7f:01:cd:a8:1b:13:6f:40:02:d5:d7:c7:87:07:92:7a:90:
         a9:0a:99:0f:de:53:77:73:39:0a:3c:b5:d9:9f:91:69:7d:bb:
         5c:d9:88:6a:b8:22:56:74:59:38:1e:5f:a1:09:ba:45:4b:7c:
         9b:f8:35:36:b7:7d:b7:86:b0:48:3c:4f:64:f7:9d:a7:51:ff:
         b6:e6:4a:8b:52:50:21:1a:d0:45:1b:86:4b:38:26:af:55:6c:
         4f:b1:8b:d2:dc:b2:5d:90:0a:d2:c3:53:df:1a:c2:03:f2:c2:
         af:32:52:14:65:32:7a:ee:42:fb:d5:46:95:57:67:ab:9b:81:
         94:13:81:c3:6e:36:15:32:75:3f:a3:a8:8a:f6:a3:e7:d8:0c:
         3d:08:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:23:47 2026 by rpki-client