Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3/232fc0fc-c66a-3dfc-b254-9045a5fc8a73.roa
File:                     232fc0fc-c66a-3dfc-b254-9045a5fc8a73.roa (raw, json)
Hash identifier:          OCzZyJ8NytrWy+g67DzFrmgWfUGR1jYMn4ZiZ2d0k0M=
Subject key identifier:   57:49:C5:E3:9B:C0:39:08:3D:AF:9E:DA:1F:81:0B:E4:03:A4:26:23
Certificate issuer:       /CN=37d62f61-f879-4df8-9689-a268d81a77a3
Certificate serial:       010D0C9F4328584F5768249DF276EE55E5DACB80
Authority key identifier: 2F:57:9B:72:25:E9:B0:C4:08:7B:67:04:47:D1:F0:A4:6A:23:2A:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3/232fc0fc-c66a-3dfc-b254-9045a5fc8a73.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     26700
IP address blocks:        199.43.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3/37d62f61-f879-4df8-9689-a268d81a77a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3/37d62f61-f879-4df8-9689-a268d81a77a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:24:9d:f2:76:ee:55:e5:da:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d62f61-f879-4df8-9689-a268d81a77a3
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=1befa538-a706-4e71-b7a3-78ade89f208d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:36:e7:20:ab:42:25:01:5e:2e:9d:ec:52:
                    ec:42:45:e5:b8:68:f7:a0:b4:97:80:2c:44:ba:4c:
                    be:8d:f6:bc:5c:ff:58:d0:70:2b:34:c0:8b:89:3b:
                    46:7e:cc:6d:5e:04:b6:25:d5:93:99:bb:23:25:b3:
                    63:1c:2e:a2:77:29:b1:ea:5f:15:3b:84:7d:30:c3:
                    6d:7c:ba:df:47:22:25:77:3d:51:23:26:15:14:b0:
                    da:5b:cd:4a:b8:43:86:f4:53:13:92:e2:4e:ac:6e:
                    1a:c1:45:fa:67:59:6b:b8:2b:a1:5f:7f:47:82:67:
                    7d:ad:fd:f5:d0:d8:39:11:a9:d7:67:d6:4d:47:fa:
                    55:d7:65:7c:ad:17:08:37:06:e8:2d:f6:a0:fd:34:
                    c5:7a:eb:e8:ea:75:26:03:70:9b:df:36:7a:2f:99:
                    fb:71:26:81:d0:da:2a:13:48:f2:99:80:a3:f1:7d:
                    db:06:ea:a4:a3:fe:4d:61:f1:9b:34:42:2d:68:78:
                    aa:4a:f6:ab:32:26:fc:9c:9e:69:73:8e:7e:92:6a:
                    f3:24:5a:80:9e:d1:ba:2e:b4:d6:71:c3:eb:e6:43:
                    75:65:67:34:f0:b3:ed:fd:d5:c7:f5:d8:11:6e:82:
                    59:4e:8b:af:d6:4c:4e:36:9c:f4:c4:fd:8d:bc:49:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:49:C5:E3:9B:C0:39:08:3D:AF:9E:DA:1F:81:0B:E4:03:A4:26:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3/232fc0fc-c66a-3dfc-b254-9045a5fc8a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3/37d62f61-f879-4df8-9689-a268d81a77a3.crl

            X509v3 Authority Key Identifier:
                keyid:2F:57:9B:72:25:E9:B0:C4:08:7B:67:04:47:D1:F0:A4:6A:23:2A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d62f61-f879-4df8-9689-a268d81a77a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c3:e4:6c:37:14:f3:5e:9c:28:1a:4f:0e:4f:d3:e8:16:e6:
         4b:d4:43:00:64:e0:4f:22:bd:22:c8:f5:84:d7:8a:17:e8:c9:
         0e:ab:cb:aa:75:56:9a:20:b9:98:2e:21:da:cd:3f:78:d7:65:
         32:4f:82:4f:df:b1:4b:ee:84:a7:d2:10:6b:53:f8:51:b4:a0:
         46:87:95:87:ef:ef:bd:67:1f:a4:39:99:88:6f:54:5d:6d:bb:
         ab:f0:fa:e6:ac:29:ea:ea:b7:bc:3a:ea:46:ed:15:b4:a8:d5:
         f3:31:46:cb:99:f3:76:e8:9d:6c:b5:f7:1b:7c:fe:53:37:ba:
         1a:6a:3e:ba:8a:16:e4:5e:6c:d6:6d:b8:6d:ae:6a:1e:ad:cb:
         39:cd:ec:c6:5e:c0:a8:04:8e:36:0d:13:b2:dd:42:94:0c:30:
         ed:a3:ee:f0:6b:fa:82:b9:79:c5:4e:9e:ae:01:2b:22:75:93:
         d4:30:f6:ed:09:86:9f:53:2c:e1:fa:44:7a:c4:94:1d:3c:22:
         f6:b9:65:ab:88:4c:bb:62:5e:e6:17:0d:5e:ef:cf:d0:b9:f5:
         bc:1d:07:4e:9c:d3:38:64:7b:57:ce:ff:96:42:ac:df:3b:d3:
         6f:27:87:31:d2:c3:fc:c3:74:28:e4:ad:cc:4d:d7:8c:18:2e:
         b6:5e:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:51:54 2026 by rpki-client