Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/84cb115f-d113-307d-a81a-56c9031a0184.roa
File:                     84cb115f-d113-307d-a81a-56c9031a0184.roa (raw, json)
Hash identifier:          KCWAQWIBBoE+N86GtTt9yRkk4WdWXqdOot9KS1PtwA0=
Subject key identifier:   85:D0:12:8E:CE:25:88:AA:3A:94:9B:EA:01:61:78:FC:A3:12:D0:7E
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E4559EAFD55AE638BA98CA000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/84cb115f-d113-307d-a81a-56c9031a0184.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16696
IP address blocks:        199.249.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ea:fd:55:ae:63:8b:a9:8c:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=0593b409-150f-405b-9511-ef6450284a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:5b:56:59:a6:d1:1d:9e:72:05:cf:e0:23:
                    e7:26:34:7d:3d:cd:9b:d5:27:ce:20:e5:ce:d9:68:
                    e6:6e:64:5d:d1:c1:c1:85:ee:6e:e6:a4:6a:17:ab:
                    c8:0f:a4:d1:bc:22:4d:85:02:96:14:0e:9f:8e:36:
                    b4:dd:20:97:39:a6:e8:87:44:e4:af:94:c4:d8:9f:
                    51:3e:e3:61:5a:6e:56:e0:fe:63:d2:e9:1c:19:fb:
                    b4:c7:ef:e0:d6:63:50:d2:59:96:90:e4:7d:47:60:
                    09:51:c8:62:9d:1b:fe:b4:c7:05:e5:05:7a:aa:e4:
                    42:27:cc:b3:c3:60:28:73:78:1c:b9:55:0a:7e:8b:
                    d0:a7:b4:c5:c6:85:f2:38:41:f9:6e:4c:10:41:0a:
                    85:d9:20:13:58:0a:f4:34:5c:28:2d:be:37:8d:86:
                    55:a9:06:8c:92:97:3e:40:94:1b:97:0a:91:04:50:
                    49:af:f4:2d:99:66:ca:e5:01:e1:90:09:3c:dd:bf:
                    d9:3e:fa:71:92:37:65:39:c6:b3:f0:91:a9:72:5f:
                    3d:c2:ee:ee:80:69:d8:f5:e7:8f:3d:fa:99:4d:20:
                    17:98:69:1f:b7:1e:31:3d:b8:fc:c8:d7:83:df:de:
                    37:4e:a9:20:a5:62:f4:3d:62:42:4f:01:5c:3b:4e:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:12:8E:CE:25:88:AA:3A:94:9B:EA:01:61:78:FC:A3:12:D0:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/84cb115f-d113-307d-a81a-56c9031a0184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:83:bf:bd:c7:34:76:78:6d:70:bb:c2:44:97:f2:1c:10:a8:
         fe:10:ca:e6:95:d7:92:46:46:cb:7f:9e:38:e7:73:68:7c:5c:
         17:c5:ff:84:bc:21:a1:16:73:b8:d5:7e:df:58:62:66:59:66:
         eb:cd:7e:0b:7f:79:d2:c1:92:73:2b:34:04:1e:b7:70:bc:0c:
         84:22:90:0d:9e:20:66:78:05:36:ab:b4:0c:c0:e4:e1:3a:17:
         90:66:3f:24:86:5f:7c:91:a5:71:79:4a:51:79:35:93:f3:4e:
         bf:19:3e:95:be:ac:f2:f5:4f:c5:64:b2:37:a7:cd:9d:c0:5a:
         9e:8e:37:f9:b2:eb:1c:3f:99:5e:1c:a7:f2:2a:16:1f:b8:71:
         e5:2b:96:84:f0:9e:28:67:34:8b:72:7d:94:de:25:c6:34:8f:
         ee:c0:61:2b:67:a4:43:46:35:fb:73:b5:86:06:65:37:39:b0:
         0c:3e:e2:a8:80:e5:39:7d:3c:cb:4c:7d:cc:f6:ab:29:95:a5:
         95:5f:e7:2a:3e:61:b8:94:58:99:03:03:fb:15:dd:db:92:f9:
         df:76:3b:19:27:6e:d7:a5:d7:e5:cd:44:25:66:02:00:6b:fd:
         4e:82:c0:11:f8:90:a4:78:26:1c:df:f8:de:23:f2:b4:f5:1b:
         64:1b:87:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:28:40 2026 by rpki-client