Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
File:                     f79cabc0-9140-3552-a764-dafa1e390e03.roa (raw, json)
Hash identifier:          8RocARVnlybtuD3t/CXB1+Hajl5hLSCdSSqXGPJzuTg=
Subject key identifier:   83:B1:A2:5C:EE:D7:F6:5C:3E:D5:AA:F2:B8:AE:0C:AB:41:2F:81:BB
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584F2957B0BC488D80DAEFFB6080
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13807
IP address blocks:        24.223.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b0:bc:48:8d:80:da:ef:fb:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=b7602acd-9afa-48c6-bc99-6d261b8a38ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:72:ee:31:90:5c:9e:7a:53:16:01:b4:6e:
                    07:80:9b:35:5f:a6:15:06:ba:86:49:50:05:ed:61:
                    91:dc:29:b1:21:ac:8c:b3:f8:23:54:e4:e7:c8:7f:
                    07:26:ef:8b:df:fa:75:6f:a6:f6:4a:3a:a1:2f:36:
                    8a:69:d6:95:13:86:ff:0d:59:f3:8c:64:33:de:fd:
                    50:a6:47:66:07:e7:d8:a1:4e:1f:71:7b:f9:ab:a6:
                    ba:3e:c7:17:fa:f2:4d:44:40:e6:32:45:0a:68:b2:
                    69:a6:b8:95:98:b4:47:68:3c:d9:d4:ca:d4:6b:90:
                    1d:c3:4c:fe:f8:37:f9:0d:72:3b:91:62:64:91:0c:
                    1b:ec:5f:a3:6e:19:7a:c2:89:46:fc:3f:53:b8:36:
                    a0:cb:3a:3e:4f:be:ff:ee:59:b0:f0:40:1c:6d:f4:
                    2e:00:64:1b:eb:87:49:fb:02:14:97:16:cc:24:25:
                    c8:96:eb:34:80:d3:e4:44:ce:a5:7c:e1:fb:13:9b:
                    5a:0a:b6:7f:76:e0:91:a7:ae:eb:c7:4b:9d:2f:ad:
                    4c:e6:d6:7a:e7:45:82:54:6a:a2:1b:1b:3d:14:50:
                    9b:75:27:ee:3a:0a:97:ac:15:de:04:29:97:a2:61:
                    4b:be:f6:91:ba:24:6c:23:af:84:bf:70:67:5e:3d:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:A2:5C:EE:D7:F6:5C:3E:D5:AA:F2:B8:AE:0C:AB:41:2F:81:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/f79cabc0-9140-3552-a764-dafa1e390e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.223.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:28:fb:4f:33:0c:ad:d6:2f:0c:3a:0b:58:f3:b7:e3:41:50:
         41:97:8b:34:53:03:8a:5a:cb:13:43:c3:45:58:6b:73:f5:55:
         27:17:bb:03:a0:a2:7c:09:c8:93:cf:77:15:8f:c0:50:5a:67:
         aa:59:c2:a0:d7:c0:b5:79:eb:bd:7b:8d:6d:43:1e:c7:cd:ba:
         b1:7f:84:6a:62:8d:45:7f:35:09:0a:5b:0b:e2:21:f5:53:52:
         95:c4:01:5d:3a:d7:64:22:be:b4:d3:9a:b1:b9:37:13:39:1a:
         4a:d9:73:4d:51:0e:c9:25:dc:27:d2:22:e7:8b:89:95:31:3d:
         64:2e:69:37:bc:65:fc:ae:38:62:b7:3c:66:2d:8c:88:a6:29:
         ed:ec:f8:bb:ec:72:e0:16:3d:3c:db:7b:01:5f:9d:21:35:4c:
         6a:ab:84:ba:02:3a:92:87:df:3f:73:72:1b:d5:c7:29:bc:47:
         a4:37:b3:60:f7:10:d8:a6:ae:aa:6b:f4:03:9d:cd:86:34:34:
         44:46:19:fb:69:52:4e:e5:49:77:7f:b0:ac:ff:65:81:56:ef:
         2e:c4:99:1c:87:ca:6c:d6:fb:6a:a8:df:dc:2b:4f:e8:f3:f5:
         5b:01:9d:b9:53:73:fa:91:ad:b8:42:1a:c2:c6:8b:f2:ac:86:
         87:93:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:31 2026 by rpki-client