Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa
File:                     c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa (raw, json)
Hash identifier:          pYAhEr2PeemwZjgBIDKDdcgvBSk/ACrWnUIsAZML/xQ=
Subject key identifier:   91:37:13:9F:C3:F4:87:B9:38:72:DD:D2:FA:7E:8C:71:09:6C:FE:A1
Certificate issuer:       /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial:       010D0C9F4328584E210EFDFE2BE6810C7EED6B00
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     46687
IP address blocks:        24.213.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fd:fe:2b:e6:81:0c:7e:ed:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=9d05d769-2480-4703-8557-ef973e8c1602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:1c:b1:1b:fa:ef:68:62:70:76:e0:14:b1:
                    5a:ac:6b:b9:a3:ef:f3:9c:86:ab:f6:bd:43:ed:44:
                    99:80:88:1e:82:bc:01:69:4f:72:87:62:4b:90:65:
                    5a:8d:d6:45:71:f8:4a:19:61:d1:16:d7:92:7c:d8:
                    23:31:83:09:fd:ec:3e:80:84:78:6f:69:10:11:ec:
                    d9:7c:89:35:8a:09:cd:eb:2b:63:68:af:8e:06:ae:
                    2e:27:70:aa:26:a6:f9:18:06:b3:be:05:7e:34:80:
                    7e:56:47:07:09:e9:58:90:3e:75:7b:46:45:27:f3:
                    00:60:fa:59:2b:4c:64:2c:9b:16:99:05:0c:67:5c:
                    68:a7:58:33:29:6f:a6:9d:98:b5:54:50:ee:87:28:
                    31:89:30:e2:9f:19:42:55:e0:90:a9:32:e9:af:1c:
                    ff:fe:21:ac:2c:57:dd:2d:a4:9c:49:96:34:6e:af:
                    c0:1f:3f:2b:b6:f6:f3:49:4d:22:e7:49:11:d4:6e:
                    4e:33:ba:ac:7c:12:71:25:22:d4:25:84:a8:53:91:
                    2c:83:c0:a8:d6:cb:92:7c:83:8d:45:34:84:3b:ea:
                    1d:d7:38:a0:66:01:99:9d:ee:43:da:48:e7:94:2c:
                    8e:be:30:04:04:c9:c5:a1:5f:89:5c:42:14:3f:9a:
                    5f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:13:9F:C3:F4:87:B9:38:72:DD:D2:FA:7E:8C:71:09:6C:FE:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl

            X509v3 Authority Key Identifier:
                keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.213.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:42:54:be:fa:ea:5f:2c:fd:dc:bd:ca:2b:cb:65:4f:84:8f:
         b9:03:7d:89:5a:ea:8d:93:79:c0:95:5a:d6:84:41:f0:23:35:
         47:26:82:26:fc:c5:9a:23:df:16:bc:48:88:de:f9:88:50:09:
         21:a7:1d:be:d0:77:36:3a:92:d4:85:52:72:67:3a:7f:74:4d:
         fe:a0:06:29:83:4d:7f:30:f5:83:0c:02:f9:bc:92:ec:0b:a8:
         cf:a4:a7:8d:b5:42:fb:df:2b:0e:b9:64:45:b2:5f:f3:01:1a:
         9d:d1:3d:64:21:cb:b7:e6:f2:8f:ad:10:aa:bf:55:d9:e4:2f:
         c1:ea:e0:b0:94:af:87:f3:17:d8:01:d8:0d:81:5f:1b:38:fc:
         e3:be:53:36:82:7a:a2:cb:ce:7f:24:6b:42:15:ad:1d:de:93:
         7b:97:ec:da:5b:93:37:77:db:22:f5:10:b3:8f:7a:e2:a2:85:
         07:e5:f2:a5:78:76:57:0c:fe:30:32:a0:f3:3d:dc:32:88:ed:
         58:ae:44:2d:89:38:1d:1f:b9:8a:b9:69:19:51:e8:f5:14:68:
         cb:33:91:39:a6:1f:f6:25:ad:bc:39:c7:9b:a4:f8:5f:6c:6b:
         0b:be:b0:52:84:76:d6:d8:33:29:6a:c5:58:f0:59:4a:60:8e:
         08:f1:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:26 2026 by rpki-client