Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa
File:                     2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa (raw, json)
Hash identifier:          hFrzgGo2bGV4RLbewrJoWDRlLO5RHR6BKiZxYofQ0tU=
Subject key identifier:   A9:70:65:55:39:12:41:5D:F8:58:62:D9:00:51:9C:56:21:E2:C5:A4
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584DBE6B21737C136DC305E50580
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     396026
IP address blocks:        199.230.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:21:73:7c:13:6d:c3:05:e5:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=4342d81e-451f-4f91-856d-19fe4c583156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:4e:57:5e:6d:92:64:1d:88:86:44:06:3d:
                    44:cb:b9:4a:fc:12:4e:73:04:87:8d:8f:23:5a:f6:
                    cb:a5:cc:55:40:99:16:59:da:94:2b:7d:8c:3f:c9:
                    b8:60:f9:2a:c2:51:5c:6f:0c:49:24:e8:1f:1c:3e:
                    09:5c:08:02:83:8f:5c:c6:d1:a6:f7:20:20:e2:07:
                    2d:eb:45:cb:9a:11:84:ae:95:36:a2:37:50:57:32:
                    15:65:9b:45:24:52:b0:bb:ea:7a:e3:c8:c2:37:e0:
                    95:21:bb:b7:5a:16:2d:7f:5d:dc:b0:a0:5e:00:20:
                    18:7d:07:ce:96:03:e5:e3:ca:9a:ab:cd:6f:18:44:
                    70:b7:ed:7f:cc:fe:17:f0:ec:b0:06:1b:fe:60:f3:
                    f5:8b:b7:2d:fa:90:f9:28:d1:2d:f1:bf:dd:01:5e:
                    49:ef:05:1b:28:95:fc:0f:30:59:02:df:b6:18:5c:
                    3a:aa:56:e4:a0:4c:81:a0:80:d5:f4:dc:5f:c4:9a:
                    c3:0f:64:8f:a7:3e:53:93:18:60:24:59:2e:39:19:
                    76:d6:df:b3:91:5b:68:f7:2f:48:55:f2:bf:75:f0:
                    2f:8d:b3:60:05:f7:ed:b4:e2:de:1d:5d:a4:e0:0d:
                    28:2a:7f:a3:74:1e:6e:9f:6f:01:21:38:0e:9a:28:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:65:55:39:12:41:5D:F8:58:62:D9:00:51:9C:56:21:E2:C5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2d8e14bf-123a-353f-bc1d-7f0f708721d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.230.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cc:a0:c8:b7:bc:d2:03:ec:4b:64:31:cb:d3:69:63:0e:75:
         8a:06:4b:11:32:44:1e:14:ac:3f:42:9a:79:63:b9:b2:f9:79:
         21:09:6d:1e:d9:41:10:01:1b:44:77:9d:30:3a:fd:b9:2a:fe:
         53:0a:df:db:6a:94:53:01:34:5e:22:13:e2:e5:fa:bc:97:36:
         2c:d7:e5:1f:79:d5:60:81:37:ec:99:da:24:58:2b:ca:cc:60:
         cd:cd:9b:5d:e7:ce:57:a8:28:03:20:89:30:28:78:b2:91:f0:
         a0:28:99:95:32:27:36:c5:a0:3f:c6:0f:a1:17:a1:52:c2:23:
         d1:86:f0:75:74:55:1b:4b:b5:21:da:ea:5b:0f:9b:57:17:11:
         e1:fc:93:c2:f9:2b:7b:3b:29:c8:6d:6d:8b:00:5b:87:0f:bf:
         5a:26:49:96:ea:99:b2:79:5b:57:d6:3c:da:3b:33:ea:e4:87:
         a0:bb:5e:40:db:2e:df:b4:29:07:5a:62:5a:83:8a:c1:50:54:
         42:e4:8a:14:b4:a3:3e:0b:e4:b9:a4:cf:20:c5:17:f9:a1:de:
         5c:6e:91:ec:83:f1:c1:95:92:6f:56:1e:da:59:c9:4f:fd:b3:
         18:9d:8d:46:30:e5:7d:53:69:83:74:b7:a6:06:de:cd:27:87:
         36:6c:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:04 2026 by rpki-client