Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/39625d1b-2497-3359-918d-d43f12cfccde.roa
File:                     39625d1b-2497-3359-918d-d43f12cfccde.roa (raw, json)
Hash identifier:          k8Sldr7oXf7aizWl42qYlaDa+DLWhuY/RWGguO0eetY=
Subject key identifier:   86:23:FA:32:2D:1B:24:66:42:5F:74:4F:EA:9D:9E:72:62:5F:64:50
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584F2EED2899030B501B2AF6B580
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/39625d1b-2497-3359-918d-d43f12cfccde.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11983
IP address blocks:        71.18.33.0/24 maxlen: 24
                          2605:340:f094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:28:99:03:0b:50:1b:2a:f6:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=2b2baeee-b0ed-4b9f-87a0-8ad4ec4a4c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:d9:96:61:9e:d0:49:5b:61:1b:90:56:84:
                    7d:92:ce:a0:2b:0a:17:fe:15:08:de:a0:7c:c8:53:
                    71:21:e1:15:3c:3b:fa:51:cf:ce:fa:7b:9b:db:ae:
                    f3:26:c0:72:1a:0b:d8:6a:c5:58:a8:bb:a8:a4:88:
                    7d:a8:6e:f1:a2:ce:d5:78:a6:5f:20:ab:08:2b:f9:
                    16:b7:82:98:d1:2b:b2:ed:70:d1:7d:9d:f7:e3:d6:
                    38:34:22:76:2c:d8:e8:87:b4:59:a5:bd:a7:52:7d:
                    b2:7c:12:d1:88:a9:ca:31:21:bc:e5:63:6f:2c:9e:
                    6b:27:f2:ec:91:30:80:c8:a7:6d:35:71:07:c8:ef:
                    43:1c:97:69:82:f9:95:ca:ad:f7:76:0d:cf:14:95:
                    78:ea:2e:6f:ec:50:db:a0:d5:41:8d:94:0e:25:71:
                    61:7e:b6:65:a4:b7:21:0c:13:7e:0f:e4:9d:c4:67:
                    0a:3b:58:16:b5:6f:0d:8c:c6:b8:c0:b5:ee:b7:fb:
                    d9:96:c7:ca:d8:68:6b:e9:15:b1:83:84:d8:8f:09:
                    64:ce:28:60:0a:85:55:82:fc:ad:dd:a9:22:09:e2:
                    be:03:88:3f:7f:d8:5d:bd:70:cf:3b:f6:5a:09:be:
                    6f:6a:48:65:cb:5f:ae:ef:27:cf:b7:88:0e:d1:9e:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:23:FA:32:2D:1B:24:66:42:5F:74:4F:EA:9D:9E:72:62:5F:64:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/39625d1b-2497-3359-918d-d43f12cfccde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.33.0/24
                IPv6:
                  2605:340:f094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:5e:77:d5:57:71:5e:46:f0:95:13:82:63:8a:c9:32:ca:
         c2:bc:65:71:f6:86:cc:17:64:2e:ca:d9:bb:ae:ce:24:76:48:
         ca:45:21:a3:01:7e:c6:cb:b3:4d:a5:9b:c6:51:b2:ca:a5:0f:
         47:86:ee:cf:75:d3:8b:3d:e9:79:8c:ff:b0:f4:6b:f5:1b:70:
         ec:ac:18:8d:82:b9:a7:92:08:68:98:be:0f:2c:02:65:20:b0:
         ac:4a:23:4b:e1:77:c3:e8:5f:c3:1e:ed:25:6f:a8:19:29:44:
         12:81:9a:61:0e:05:f5:fe:62:72:bc:c8:22:27:2a:8d:19:fe:
         81:4a:21:1b:6b:60:3b:99:6f:9d:25:70:80:38:3e:31:32:a6:
         a2:ec:2b:91:ff:28:eb:ea:ed:a6:3a:4f:52:eb:c7:bf:0f:7e:
         96:e4:0c:9c:45:73:f9:3f:5e:25:6d:40:95:d3:82:3e:1d:79:
         84:c8:ad:04:fa:d6:9b:1e:b7:64:64:8f:f5:57:35:76:86:c8:
         02:92:3a:a7:38:a6:20:2d:ce:9a:0c:db:ba:ea:ba:37:0c:6b:
         94:e2:e3:e6:2a:1e:bf:a0:6c:f3:c3:70:19:ec:81:76:e4:3c:
         d5:fd:c6:d2:ea:15:02:13:14:75:73:8f:ec:ad:cd:7a:2b:af:
         3a:c2:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:54 2026 by rpki-client