Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
File:                     e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (raw, json)
Hash identifier:          lDLf3AIH0RKxFcQKVapeYRzGYu8ta0uW+qjz5uNRc8A=
Subject key identifier:   9C:00:EB:33:B3:AF:FD:0E:90:C6:E7:AC:02:87:0D:DC:31:B3:7A:8A
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584D44FA432D46CFAD5663EF6160
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     65104
IP address blocks:        199.212.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:43:2d:46:cf:ad:56:63:ef:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=62b8abc8-0221-41a9-9f29-3c4041aea95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:ee:76:15:91:45:e3:9a:77:d0:8f:ef:85:
                    06:52:58:79:be:3f:6b:e4:57:61:95:00:88:ed:65:
                    22:6d:f4:18:bb:6e:00:6c:3a:30:13:8e:d4:ff:c9:
                    6d:9c:57:74:4c:8a:e8:8e:6e:b4:db:5a:4c:a4:ab:
                    47:2e:3a:ea:ac:f7:81:16:e2:86:1f:2e:95:70:9f:
                    53:85:70:a9:58:04:c7:31:af:49:53:69:34:07:d4:
                    d7:7d:23:44:91:c2:b8:c6:aa:ab:5d:4e:d4:38:a3:
                    e8:44:15:97:34:f0:db:9d:7d:8c:ea:45:83:a8:b1:
                    af:28:9e:75:63:dd:e3:07:cb:0e:8a:92:57:76:e4:
                    b2:a8:60:00:d6:4e:22:2f:44:43:65:8b:6e:e5:14:
                    a0:79:43:a2:d0:a1:5f:dc:7f:54:d9:59:bb:27:02:
                    2d:2a:df:f8:92:8b:a1:f3:9f:d5:d6:bd:65:17:5e:
                    3c:6f:6e:64:c6:08:d9:9f:af:04:33:a9:fb:82:ca:
                    84:97:b8:5f:0f:38:73:39:af:34:10:27:94:4e:80:
                    dd:d3:0f:2c:bd:83:e4:03:df:26:71:46:b6:09:08:
                    a0:d8:7c:c5:11:28:f4:e5:41:f2:02:29:4f:83:0e:
                    e5:7b:76:f7:1e:89:05:e0:d6:38:b4:61:6d:7b:a9:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:00:EB:33:B3:AF:FD:0E:90:C6:E7:AC:02:87:0D:DC:31:B3:7A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:a9:e3:01:05:6f:f0:fc:ff:b7:57:93:af:dc:8e:08:e6:
         9f:a1:de:d7:22:cb:03:b7:c5:d7:be:fc:5e:d6:ae:6f:20:c4:
         e7:03:ee:b7:1b:8f:6c:ec:a8:2a:21:85:bf:ca:4e:1a:ca:ee:
         00:df:ff:f0:e5:28:c2:46:b6:ec:a6:46:94:e4:2f:4a:d9:2e:
         c6:dd:b6:5c:1e:d2:8d:85:2b:48:75:30:e4:88:4b:f9:b2:e3:
         c3:1f:93:13:b5:10:eb:6b:dc:92:2a:5e:62:e9:e1:e9:90:18:
         6c:10:e1:2e:65:c4:66:ce:34:1b:98:e2:9e:5e:ea:d0:85:c9:
         52:e4:8b:47:ab:22:a8:fe:4f:55:0f:6f:d5:ed:8e:02:50:23:
         ec:84:25:c2:ac:b4:8f:f6:df:65:79:fc:f4:a8:35:2e:dc:1b:
         69:83:8a:c8:5a:40:33:5b:10:8d:46:77:af:21:12:ba:d5:8c:
         6d:b1:7b:1a:43:f0:8f:54:cd:06:57:bc:bc:5d:f7:ba:83:4e:
         44:bd:dd:db:8a:5a:4e:7f:e8:4e:80:7e:3e:1f:de:3d:6b:72:
         e1:97:02:73:24:4b:89:a5:4c:6a:38:33:5d:77:a0:97:01:3a:
         c1:f9:45:f2:c2:a2:63:28:14:2e:ae:0e:8b:8e:80:a8:cc:e9:
         8f:34:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:26 2026 by rpki-client