Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7735bd3d-2b65-3a93-9bcd-2d4a06a8a344.roa
File:                     7735bd3d-2b65-3a93-9bcd-2d4a06a8a344.roa (raw, json)
Hash identifier:          jUePU2Yfx6qo2xiDKwb4Litn2DsZB6ZxpIOgv5NJe78=
Subject key identifier:   8C:BB:BE:67:80:31:2E:1F:1C:A8:FB:87:91:96:B6:AF:86:88:AD:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6C0FD09F30B9FE38458E69C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7735bd3d-2b65-3a93-9bcd-2d4a06a8a344.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     20940
IP address blocks:        72.246.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:d0:9f:30:b9:fe:38:45:8e:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=c6881375-0beb-4b03-bb4e-c059290b8847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:42:5e:fc:bf:3c:82:d9:61:59:bc:cd:8a:8b:
                    c4:58:ea:17:eb:c8:00:97:ca:9c:c7:cc:f8:8c:2d:
                    ed:59:75:65:c6:18:99:ac:80:42:24:18:e8:b0:71:
                    cf:c5:53:14:59:43:a8:d2:99:76:9a:fd:be:7f:82:
                    4f:2d:95:9d:0e:25:03:47:80:67:ce:65:ea:a0:d6:
                    da:7e:56:06:0a:22:6e:b1:a3:2e:73:a9:d6:aa:98:
                    f1:1d:5e:78:73:59:1b:fc:a5:6f:4e:1a:38:1f:83:
                    f5:d7:41:ab:45:67:3e:ef:97:56:a9:12:c9:9d:81:
                    42:ac:4c:22:7c:1a:37:38:bf:38:d6:54:4f:ce:41:
                    04:fa:55:16:ba:f7:83:f2:9e:80:65:e8:d4:43:3a:
                    c8:0c:2e:3d:a7:ef:b6:e2:40:62:fb:82:fc:a2:a8:
                    14:ac:cf:9a:6d:9a:7c:b7:3d:d9:3d:48:56:c3:b1:
                    9c:94:e1:b1:76:21:c2:f0:23:c7:e4:45:e4:00:ac:
                    30:93:70:45:c1:34:53:0f:50:cd:18:9b:4f:f1:6f:
                    c8:a8:9d:03:ef:26:12:98:37:07:75:2b:e8:b7:2b:
                    12:04:af:9c:9f:29:27:4f:49:1a:a1:5a:bf:90:17:
                    25:9a:55:87:3e:b7:85:14:a2:0e:f9:dd:71:a2:e7:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BB:BE:67:80:31:2E:1F:1C:A8:FB:87:91:96:B6:AF:86:88:AD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7735bd3d-2b65-3a93-9bcd-2d4a06a8a344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.246.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d2:06:5b:f3:10:17:e5:58:2a:ff:5c:51:37:1f:0a:a2:e5:
         b0:f2:f3:6c:43:65:b2:22:ea:ec:b8:ba:6c:7e:38:e2:1f:60:
         53:f0:96:08:f5:77:9d:e3:40:14:e3:78:11:51:a6:95:75:09:
         b0:fe:41:a2:28:25:dd:2e:a8:9e:8d:9d:c5:ed:9e:8b:b8:e6:
         ee:29:ab:87:01:cf:4c:97:c4:6a:a7:79:9c:b4:12:86:af:03:
         51:4d:2c:78:f3:21:cf:0c:50:7a:d9:41:42:60:e1:04:ef:06:
         c7:c5:3b:c4:c4:50:9e:ea:b8:94:28:22:c9:a8:c6:4e:1f:50:
         76:21:30:a9:05:54:4a:54:05:7e:0a:c8:22:b1:dc:25:1b:4e:
         67:49:be:4c:df:5b:65:3a:5e:aa:a0:eb:87:41:71:c4:4e:81:
         4d:a9:3b:2f:60:f9:58:f4:ad:15:8e:1e:0a:ec:46:7b:15:67:
         dd:c4:a5:3b:71:f8:a9:ec:0a:36:17:da:d2:f1:aa:f4:18:03:
         34:6d:43:19:fc:a0:f0:37:9b:d4:87:1d:53:88:61:4b:1e:a5:
         78:ae:a9:84:9a:bd:a0:16:02:34:a8:77:98:d0:19:ad:86:85:
         e1:76:75:c3:c4:30:d0:41:e4:b6:fa:71:ba:05:6e:22:a1:47:
         fd:c9:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:46 2026 by rpki-client