Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
File:                     3ccb2ccd-6776-345a-bf6d-3805674a638a.roa (raw, json)
Hash identifier:          fsHoRsZ9LzX2rHp6cpUwK1hTuHh3ONWj4IqZG2pHgKs=
Subject key identifier:   BD:E5:F9:85:E8:A5:E8:56:D0:12:DC:F1:1B:EC:F4:FE:D5:1D:7E:16
Certificate issuer:       /CN=61b23514-b37d-4216-9f76-1988ace05318
Certificate serial:       010D0C9F4328584D316F6EEB3E64F3816B941600
Authority key identifier: 46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     32329
IP address blocks:        199.4.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:6e:eb:3e:64:f3:81:6b:94:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b23514-b37d-4216-9f76-1988ace05318
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=9c266878-c505-4bd8-9d76-622e2f08498f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:45:bb:08:93:d3:1e:f5:94:63:30:0e:19:
                    82:ec:7a:08:d0:5c:b8:3a:c5:a1:6b:18:0f:1b:e5:
                    79:69:70:d1:77:de:80:d4:76:ac:80:3c:4e:36:84:
                    f8:0f:5c:32:d4:f8:96:3a:20:be:44:c8:9b:01:70:
                    8f:9d:6c:6a:ae:a7:18:00:a8:1e:9d:63:25:f1:33:
                    9b:c2:f6:cb:d9:d1:d3:87:d4:ff:5f:ee:7a:1c:4e:
                    6f:72:ec:ad:67:30:6b:b5:fa:64:30:02:7b:c3:bf:
                    7d:07:b1:fb:a3:c7:be:7c:58:a5:09:67:26:a8:66:
                    cf:85:dc:8c:63:59:1e:45:bf:6a:cc:cb:34:ce:31:
                    f3:43:9e:85:2d:7e:fa:70:ae:e0:e5:b3:55:39:06:
                    13:8c:d9:c3:96:56:b9:15:af:06:3e:e3:54:78:75:
                    cd:68:63:45:b1:09:ac:63:2b:51:ee:b0:74:d4:0e:
                    57:ae:eb:63:bf:1b:a8:44:26:30:d6:ca:24:14:2e:
                    0c:ae:99:13:bf:91:44:b0:31:21:37:1a:d7:6c:35:
                    42:5a:4d:70:85:ad:a9:16:ba:64:79:4c:0d:bf:b0:
                    df:b9:72:71:46:65:7c:18:8e:50:ed:e9:17:b5:9a:
                    4d:d0:24:68:69:1f:36:49:8f:28:cd:db:d2:4e:32:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:F9:85:E8:A5:E8:56:D0:12:DC:F1:1B:EC:F4:FE:D5:1D:7E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl

            X509v3 Authority Key Identifier:
                keyid:46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7d:b5:78:a0:26:b3:9b:ea:fb:35:83:b4:52:1c:78:14:eb:
         c0:b3:10:58:5c:77:e0:43:2f:ba:78:db:15:38:58:69:5c:94:
         0a:63:6f:37:35:11:f0:8b:57:cb:20:b6:c4:9f:78:28:01:73:
         37:7a:aa:d1:bb:a1:cf:a4:a5:e4:0b:be:72:df:41:d9:83:96:
         dd:a6:08:73:c3:e4:55:d6:a2:53:36:da:b0:16:8a:d2:c0:13:
         2a:0a:0e:b5:42:3e:a1:26:c8:ca:9c:47:fa:11:10:9d:47:2f:
         36:ab:00:d9:79:24:bb:57:a5:4a:f8:a6:6c:38:87:df:e5:08:
         ae:f9:7b:8f:18:43:90:b9:c3:39:9c:ca:c6:14:3c:9a:d3:3c:
         26:8d:67:a3:6e:49:19:11:3f:0d:7d:bc:c9:28:73:df:d7:2f:
         b7:37:05:c1:62:69:09:7b:f3:c0:75:f9:28:fc:16:83:3b:3a:
         4e:eb:66:8c:0a:9f:76:fd:69:c4:96:a0:9c:13:c0:50:a3:67:
         5b:0c:c3:8d:7d:ff:52:89:0b:7b:35:94:34:c9:31:4d:25:d8:
         e9:a3:1d:ca:9a:9c:96:96:fd:cc:d7:b1:50:be:19:12:eb:c8:
         39:7d:6d:09:15:b5:93:31:66:6d:2d:33:22:15:53:c3:d8:a2:
         29:70:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:08:54 2026 by rpki-client