Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
File:                     afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa (raw, json)
Hash identifier:          d4qly0gzc9kFlP0RDNt98ieCMWwxEIKOgEEFe4vfq0c=
Subject key identifier:   32:0B:00:A5:8C:6F:57:05:04:AB:A3:F1:41:47:29:2E:A6:CE:CE:60
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584D1FC957A6CE56768A50801280
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa
Signing time:             Tue 10 Mar 2026 17:17:19 +0000
ROA not before:           Tue 10 Mar 2026 17:17:19 +0000
ROA not after:            Mon 08 Jun 2026 17:17:19 +0000
asID:                     46407
IP address blocks:        173.199.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:c9:57:a6:ce:56:76:8a:50:80:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Mar 10 17:17:19 2026 GMT
            Not After : Jun  8 17:17:19 2026 GMT
        Subject: CN=a88455f0-a84c-4cfb-8e61-1185f3e10155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:60:5c:3a:d3:98:a0:fd:b7:ca:3a:6b:4b:17:
                    96:bb:52:06:bb:3a:5c:70:0f:3e:00:a0:cb:55:d9:
                    85:5d:cd:94:a8:5f:b0:c7:a7:23:86:17:d2:09:88:
                    9d:97:87:d8:ef:c5:89:8e:65:6c:1e:d2:91:93:0c:
                    32:94:3f:e0:5c:4d:bb:bc:5d:fb:31:f1:c1:2b:79:
                    28:27:a1:4a:15:97:a3:c5:d0:5a:53:32:35:28:71:
                    6f:b5:3e:94:72:d3:6a:1c:0f:5d:b0:e4:90:64:f8:
                    0a:64:88:c2:a3:ab:44:8b:5d:e4:74:82:ce:0d:f1:
                    75:16:b9:55:03:ec:12:5a:5c:77:5b:ab:f7:24:e5:
                    f2:14:a7:db:e4:0d:21:28:0b:61:c2:51:1b:fd:5b:
                    79:f0:09:3b:9a:41:20:c8:8d:d7:c8:ad:54:ad:7f:
                    b0:94:3b:9f:0d:0e:c7:4c:6e:ab:18:f5:7d:00:08:
                    7d:0a:a5:ff:d4:f9:9b:66:68:7a:77:82:77:45:69:
                    58:c8:14:a8:13:a7:11:e8:e0:8e:fc:2e:76:2d:66:
                    1b:2b:9b:70:2e:80:ea:c5:f2:06:a5:95:0a:44:70:
                    7b:a2:81:07:7c:12:fb:d7:48:67:8b:e9:93:01:fd:
                    75:b6:47:06:b0:49:88:e6:ab:f8:db:12:80:d8:8c:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0B:00:A5:8C:6F:57:05:04:AB:A3:F1:41:47:29:2E:A6:CE:CE:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/afc2f8e0-6d1c-37e8-bdc7-c4ed2bf3e094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:23:fb:61:1d:e8:e0:4a:86:20:d1:62:d3:c1:88:64:04:
         e1:42:4e:25:4b:98:77:72:40:c5:47:cd:74:6a:45:ee:5f:77:
         d1:fd:e1:f8:22:91:b6:ff:2d:87:1c:7e:e0:80:6f:6a:07:2e:
         42:1e:a1:ca:f0:24:09:31:f6:22:93:51:de:7e:93:6e:7a:51:
         77:e4:a0:e3:7a:29:8e:bf:f8:e7:ee:ff:53:d0:e1:a1:32:77:
         9c:7a:b1:de:9e:c7:3e:a9:d5:70:7f:75:dc:bc:43:3d:c8:3d:
         9c:85:ec:88:62:22:b0:b8:51:0e:c2:c8:7d:be:d6:8e:56:05:
         f2:14:17:ed:a9:35:c0:17:52:74:34:b2:6a:22:bc:eb:21:40:
         3a:92:f4:e2:7f:30:7a:ae:24:d1:00:9c:54:b1:78:e2:0f:e8:
         ef:7a:5d:24:b2:0f:09:9c:cb:91:1c:85:11:7d:fc:5d:c6:47:
         91:3a:06:c0:3f:b0:ab:3a:05:20:75:59:0f:a0:16:77:58:a6:
         6b:48:3d:90:57:1e:3a:f1:5d:57:dc:25:07:f3:f0:a9:af:b2:
         d6:75:c8:1c:d1:34:6f:a1:3e:00:63:b8:f5:54:01:fa:aa:3f:
         94:a5:25:2b:b6:9d:f9:b4:5c:67:56:9a:a1:9f:bd:47:4a:70:
         f0:4c:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:10 2026 by rpki-client