Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa
File:                     7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa (raw, json)
Hash identifier:          OEi6eDolNG2xzLOtloHOwLIwdCHJQY7Wcj2al1OzgbA=
Subject key identifier:   A4:D6:ED:78:DD:58:01:12:3B:96:E5:8C:18:02:5F:F2:94:3A:22:BD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D55BB85BFD4BCE0C4B9395C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     36183
IP address blocks:        172.224.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:85:bf:d4:bc:e0:c4:b9:39:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=6fbfe6b5-250e-4a1b-acc9-d92cfa9aa104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:9d:0b:68:79:16:93:26:89:10:a9:c4:49:
                    22:7d:66:0c:86:c4:82:db:ea:ea:07:22:1a:48:5c:
                    57:1e:29:e3:6a:a9:c4:de:aa:10:12:6b:d8:4a:ed:
                    e0:e6:64:be:00:e0:c9:30:cc:72:bd:3f:a3:9e:ad:
                    53:0e:5c:10:b4:da:c3:e0:ef:bd:d5:70:8d:e7:03:
                    4c:c0:93:4a:6b:14:85:c0:73:2f:74:63:02:9b:a7:
                    09:47:f8:db:1b:c3:18:c6:a2:ca:76:75:da:02:ff:
                    9b:8a:e5:95:b7:77:db:50:d3:5b:17:cc:4e:9e:b2:
                    4d:05:90:40:fc:cc:88:fd:fd:62:0e:83:7a:29:4b:
                    14:9a:15:cd:11:7c:58:11:bb:0d:dd:00:60:42:56:
                    a4:cf:ca:f2:63:66:29:83:74:ae:31:b1:83:33:17:
                    38:98:8b:e0:0e:5d:41:8c:1b:2b:ac:c1:d8:02:91:
                    6c:b8:35:61:c0:4f:94:3b:4f:fe:44:09:4d:26:b4:
                    b0:6a:3d:c2:36:02:1f:12:04:42:61:28:ef:8c:70:
                    22:e2:8f:6d:bf:13:99:03:93:df:12:72:d3:3a:6e:
                    02:3b:ed:6a:77:52:dc:65:aa:9a:66:59:e7:42:11:
                    7b:5e:1d:b7:9a:94:bb:8d:96:25:55:28:a3:a6:67:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D6:ED:78:DD:58:01:12:3B:96:E5:8C:18:02:5F:F2:94:3A:22:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f9e116e-a2dd-3f52-abe2-13f0004fbdd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:4e:c7:02:79:88:71:14:83:c9:6a:6d:1b:29:86:78:5f:
         99:47:a0:db:2c:e2:66:49:c1:1c:57:93:6b:9c:ad:46:30:e4:
         3d:99:af:6f:c2:6d:ed:44:66:02:0d:47:4f:64:b4:4a:3e:40:
         ca:e2:4f:7f:02:eb:57:3d:9f:8d:d2:e3:a9:e5:37:35:f6:f1:
         07:ec:3e:3c:a7:fc:e5:c9:ab:c9:a5:e5:ce:d0:e2:9e:a0:c4:
         c0:45:17:73:4c:38:19:e3:05:0b:3e:c0:e3:65:ec:db:b2:cf:
         bb:3f:b1:e8:2d:16:f5:dd:99:ec:c9:40:d5:24:bd:94:91:b1:
         3a:d9:29:9e:3d:90:95:c1:c6:23:7a:44:f3:98:1f:67:b3:33:
         34:f8:1c:ec:63:62:5e:2b:12:76:ad:ec:60:fa:1a:e3:41:55:
         72:3c:b2:c9:8a:e8:ec:a3:4a:cd:8a:8e:ca:c2:4c:ff:33:4e:
         ce:bd:ea:16:c3:77:5a:b8:a9:5b:57:95:1b:a9:e6:c7:69:6c:
         a5:a6:68:f3:fa:f4:bb:e1:fe:22:3e:28:61:1b:15:d8:1c:85:
         43:0e:5c:3f:be:71:12:2a:d0:2b:1f:73:18:56:79:3c:f7:d1:
         40:f1:bf:2d:41:5c:13:83:87:9e:3b:16:d0:10:8d:7e:c7:6b:
         3c:4e:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:48 2026 by rpki-client