Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b511eb3-13df-3a35-aa23-93f899a7ad30.roa
File:                     1b511eb3-13df-3a35-aa23-93f899a7ad30.roa (raw, json)
Hash identifier:          LIOLKyUTwlLhrzl4kqbLusMEAwzjO1XrGAIuLMOyAiI=
Subject key identifier:   E4:71:3E:48:F8:A7:0B:C3:2A:70:BD:6E:8D:8B:A4:45:D6:71:32:1B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6AAA6D347F2DD37458B40FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b511eb3-13df-3a35-aa23-93f899a7ad30.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     24319
IP address blocks:        72.246.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6d:34:7f:2d:d3:74:58:b4:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=4e058c85-ca09-48ea-8e59-64f621b562da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:5d:f9:5d:46:4b:fd:b5:f1:1b:65:ce:b1:
                    4d:a9:0b:75:74:38:c8:2b:8b:47:a6:10:4a:83:87:
                    de:06:b0:46:52:10:f6:c5:e4:4c:c3:d5:91:f6:6d:
                    4d:c0:33:5d:77:6f:04:61:36:fc:eb:a3:f3:3d:f3:
                    1f:62:d0:b9:8f:03:e3:04:15:6a:d6:6d:7a:f1:27:
                    e9:88:cd:b6:a0:89:af:15:25:29:75:e4:42:bc:18:
                    0e:d7:2e:5b:b8:23:4c:c6:18:51:fb:df:19:03:99:
                    6b:63:f9:31:bc:6f:0f:5b:83:91:be:0e:55:b6:d5:
                    6a:bc:82:aa:ea:d7:b6:74:dd:0f:60:5b:5d:4f:9c:
                    41:7b:79:fb:a3:eb:fb:1f:e0:52:06:02:19:77:96:
                    37:f9:06:7f:03:c3:01:8f:a9:8b:4c:1e:8a:ac:53:
                    2f:26:21:d2:68:c2:dd:aa:62:fb:73:19:63:0c:cb:
                    8f:ee:97:de:f5:ef:91:b6:98:b0:15:b5:b1:5e:66:
                    d8:2d:ba:ee:2f:6f:5f:97:30:bc:3f:48:53:80:50:
                    a5:7a:ee:c6:82:a9:c3:f4:2d:48:10:6f:a7:ee:08:
                    38:47:1c:0f:9c:24:78:29:4b:25:32:33:a3:4f:60:
                    62:d4:ad:4e:dc:72:87:ba:4b:02:44:3a:75:b8:4e:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:71:3E:48:F8:A7:0B:C3:2A:70:BD:6E:8D:8B:A4:45:D6:71:32:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b511eb3-13df-3a35-aa23-93f899a7ad30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:8e:67:8d:86:15:f1:ea:25:28:34:71:c4:3a:8f:07:7e:
         d9:70:43:25:75:bc:d3:21:e0:09:e7:79:b6:b5:8e:b8:c3:ee:
         5b:ec:ea:fe:e1:72:78:f1:da:8c:d0:cd:ee:d2:91:95:5f:63:
         00:38:7d:98:22:ca:f0:b2:2d:68:20:71:55:ff:65:76:4f:fd:
         32:fd:bb:3d:0a:4b:8a:2d:20:d9:bd:59:f5:3f:46:ab:61:9f:
         8d:a7:d7:54:eb:1a:88:1a:e8:eb:a6:23:2a:71:55:64:13:cc:
         61:9b:52:61:84:3f:95:2a:b2:7d:c5:c0:08:85:be:65:95:65:
         b8:40:b8:4a:eb:2a:7b:f9:4f:c7:94:f5:50:c1:57:ba:b9:5b:
         a0:00:8d:d2:07:ec:16:62:27:d2:76:0f:50:29:08:ae:65:cd:
         11:74:1d:bc:93:e0:ce:c7:fe:bb:c5:8f:7b:39:bb:1a:df:e6:
         6f:ba:f5:dd:c5:49:eb:59:a5:90:45:1a:8e:5e:33:8c:dc:13:
         ac:26:f9:5d:7d:c1:e5:1f:84:05:63:08:af:2d:30:00:33:5c:
         9f:0d:b1:e1:9d:77:97:5a:3a:e8:5f:eb:a3:c9:76:c6:e0:c3:
         10:87:f7:c7:a9:12:ec:6c:0b:df:26:be:fc:84:4a:84:6b:0f:
         f8:92:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:31 2026 by rpki-client