Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa
File:                     6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa (raw, json)
Hash identifier:          jAGf6qwAKwFm/jPLJsG7B1VzcNLEe8fSWvqp5JV/vMY=
Subject key identifier:   84:0C:93:A5:98:98:B3:B5:9E:2D:F4:22:83:A1:02:A5:69:F8:71:97
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F4328584DC29AE818BBB3EAC3DA9C4580
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     19551
IP address blocks:        199.83.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e8:18:bb:b3:ea:c3:da:9c:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=e56543cb-d574-4238-9413-56cf2cb765e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:56:7b:37:08:ac:03:cd:2b:48:ef:34:06:
                    b8:ab:b5:19:31:ca:da:46:17:d1:ac:a4:f3:c7:cb:
                    7d:fb:c6:f7:3b:0b:b6:4b:89:68:d7:55:0d:b3:c7:
                    7c:9c:2b:2d:e9:05:18:a2:7e:70:25:8d:ae:b7:95:
                    e4:73:17:5b:94:29:b5:20:bb:99:76:81:b1:ce:a1:
                    87:79:15:4b:74:90:86:eb:34:75:fa:0f:4b:96:5a:
                    5b:6c:5e:36:fb:cc:bf:1f:cf:10:5a:4d:4e:50:f4:
                    d7:c5:1d:3a:f2:c8:ab:7d:e6:12:8e:05:6e:77:57:
                    32:d8:67:26:87:f6:01:18:91:9e:41:6e:84:12:cd:
                    96:54:a2:4b:15:44:45:0d:e2:1b:9a:68:54:ea:3e:
                    6a:ff:82:74:d0:ed:f7:78:22:60:c9:7c:f0:73:dc:
                    7f:98:33:b5:93:08:71:5e:82:f1:96:47:65:ba:6e:
                    0b:0f:25:df:9b:58:a1:e4:c2:8e:9c:52:02:9e:09:
                    e2:da:a0:a7:c2:0c:99:9e:da:cb:ec:bd:c0:3b:4c:
                    75:95:1e:0c:36:0b:82:79:ef:92:e4:0d:1c:95:54:
                    1c:24:6a:ae:8d:9c:29:97:54:db:1a:a7:f7:77:b6:
                    8d:91:5a:31:b8:15:72:63:e3:b1:17:f8:8b:51:ab:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:93:A5:98:98:B3:B5:9E:2D:F4:22:83:A1:02:A5:69:F8:71:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/6f12b6b3-3f88-3b5f-a379-6b6c651c025b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:34:8a:7f:b5:89:3f:8d:0c:1a:15:0b:34:67:22:f9:d6:95:
         c0:39:4b:2c:93:56:9a:d9:b5:73:16:af:44:38:1b:23:53:3a:
         d8:b0:06:7e:66:24:ee:7c:13:be:d3:39:e4:ff:43:9f:5c:ad:
         50:60:0c:cc:cd:e8:5e:f1:00:54:63:1b:88:a1:d9:29:25:05:
         b5:7b:8b:44:25:12:0d:2e:36:88:cb:e9:1f:af:e7:26:09:f6:
         f2:72:ea:fd:49:55:5c:ba:27:4d:d6:4e:3f:75:f2:ed:99:00:
         5c:20:1f:2e:dc:19:97:c7:48:73:83:0d:24:61:0e:7b:d8:bf:
         ee:ae:d6:fc:af:07:8b:1d:8c:76:d0:36:11:51:3f:e7:e5:ad:
         7d:8e:57:95:3f:39:6c:05:67:10:4b:25:9d:d5:b0:8e:72:86:
         1f:5c:b1:68:da:3f:5d:c2:33:37:ad:75:75:cd:71:b9:ca:be:
         ff:4c:75:44:a6:fa:ae:e9:c7:c0:ee:9c:bf:13:82:dc:bd:98:
         53:14:82:c5:de:88:45:0f:ce:e2:6e:c2:30:75:b6:07:67:0b:
         ea:6a:55:00:b1:17:cc:d9:84:92:6c:1a:dd:fc:ef:55:e2:35:
         ee:7a:92:79:14:ee:49:04:23:78:66:b8:18:60:be:33:c4:6d:
         ed:5a:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:25 2026 by rpki-client