Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
File:                     ae3340b6-cbcc-303e-9541-8e0411b269e1.roa (raw, json)
Hash identifier:          X8yi3wylm9qmsWabMTSh9Ahmc34Z7Oy9gG6xQo10Yd0=
Subject key identifier:   2B:79:E9:42:3E:A1:DF:9D:23:AB:4A:F0:0B:38:EB:5F:F4:74:64:D2
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584CC611E92F7E2281D62EEAEBC0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13807
IP address blocks:        24.51.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:e9:2f:7e:22:81:d6:2e:ea:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=711303e9-8112-42fd-adf6-1d461537fa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8c:0e:0d:57:60:c3:3a:ef:6d:92:80:76:cb:
                    25:d3:88:b9:04:f7:f7:db:7f:c8:73:7b:2d:26:49:
                    15:28:25:ad:83:e3:a2:b3:78:75:8e:9a:43:dc:f1:
                    26:1c:b8:7c:93:62:b9:3a:e2:30:a6:20:2d:20:86:
                    a8:3c:ab:46:59:36:4c:09:ce:b6:28:7c:18:ab:2b:
                    80:72:29:df:b9:0e:96:77:a1:3a:a4:75:b0:41:06:
                    d3:c3:3e:d6:1c:1c:e8:bf:a7:c8:66:f8:53:01:7e:
                    ce:c3:b8:2b:5a:ca:1e:85:01:d8:61:a9:de:52:e7:
                    ed:ae:ab:c8:30:c7:01:a3:2b:73:36:64:6f:39:8e:
                    1a:21:6b:19:da:2b:0f:74:f2:a1:ce:00:6a:f0:2e:
                    93:5e:64:32:79:13:7d:a0:4d:79:17:74:70:84:56:
                    84:30:fe:fd:b5:83:cd:94:d3:09:1a:74:79:7b:c5:
                    9d:7c:ee:94:71:71:8e:58:4b:a4:b7:d9:20:6c:f9:
                    13:ac:98:97:f4:48:85:98:c8:2a:10:1c:b7:69:f0:
                    9b:10:21:2e:73:cc:4d:3d:ea:cf:13:45:ef:cc:c6:
                    a8:ab:2b:64:c2:25:a7:74:4d:34:db:9a:d4:7d:46:
                    ff:0d:87:b6:e2:55:b7:6f:89:34:f0:79:7e:6f:b2:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:E9:42:3E:A1:DF:9D:23:AB:4A:F0:0B:38:EB:5F:F4:74:64:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:65:89:7b:26:4a:4e:04:76:65:3d:cd:d3:6a:e4:ec:42:40:
         96:1b:e7:f3:9d:cf:47:98:8a:e6:79:07:df:5f:07:d3:79:ba:
         df:93:42:cc:b9:b3:57:d3:14:b8:2f:13:f3:8b:2f:e1:91:05:
         e1:66:d7:58:77:48:b4:99:64:8f:93:b2:62:25:e6:ce:c8:07:
         ad:e3:46:56:58:28:06:f1:7c:79:f8:52:07:a3:1b:bf:2a:71:
         e3:47:00:6c:12:69:0f:4c:c6:ed:1b:11:8b:66:ae:31:4f:97:
         0f:fb:df:d6:6a:8a:12:43:c9:08:22:46:ac:91:0f:95:18:69:
         b0:c8:1f:69:ec:77:7c:af:35:6b:8a:c4:af:d3:f7:8f:09:df:
         9c:f8:80:07:16:91:62:9c:8e:18:17:17:d8:43:08:c6:43:04:
         4c:36:01:8c:08:72:6f:6f:e3:d1:7f:78:49:5c:06:d2:d3:06:
         17:45:4d:c5:c4:eb:19:ee:48:17:22:03:bc:f8:93:cf:64:c6:
         0a:78:37:ea:dd:79:c0:c9:66:96:fa:89:94:1a:8d:c2:d4:97:
         b9:62:4c:0e:e0:af:53:8b:e9:89:54:9d:bd:34:1b:6e:b8:b5:
         84:94:68:54:d6:23:59:11:49:c5:7c:4e:7c:75:07:e3:cb:ce:
         7e:0c:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:03 2026 by rpki-client