Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa
File:                     a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json)
Hash identifier:          J7BCGi9nyiqTiseZ0HSl60kUSGikUO2lB/NkvTrHhdA=
Subject key identifier:   C5:14:75:9A:55:8A:88:CD:E9:0B:BD:2A:F6:5C:2F:49:A0:3D:32:35
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584E6144B679177D2CD54AE6F700
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     11052
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b6:79:17:7d:2c:d5:4a:e6:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=bd062d02-0f41-4d8e-b91d-f41ce04e2dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:b1:6c:9f:bb:24:36:05:52:74:72:55:59:
                    aa:44:57:4b:0d:70:28:6e:9d:73:da:f2:11:92:d2:
                    a5:32:92:4e:cd:fa:0e:54:32:24:c2:f9:17:f5:65:
                    c9:ac:3b:63:e5:db:dd:f1:5a:49:a1:60:81:25:6f:
                    78:64:dd:35:82:80:6c:43:9d:f4:2f:64:7f:aa:5e:
                    28:f0:d5:65:da:bd:7f:20:d6:83:19:f0:d9:79:f7:
                    ee:75:fe:26:bf:d8:e9:9e:d2:9a:9b:5f:de:d5:e6:
                    b2:09:91:29:b7:c8:22:3d:0e:d7:97:54:6a:e9:68:
                    1c:2c:fd:1d:9c:c3:9c:e3:82:b8:1a:73:db:a9:1a:
                    37:91:97:1f:bb:1a:5c:90:aa:a2:8e:77:ff:ef:f9:
                    43:6e:52:0b:31:ba:a4:1c:40:d8:d8:47:6b:b7:79:
                    98:b0:f5:06:b7:66:96:6a:68:2c:e5:91:ae:4c:ab:
                    57:b1:88:1a:c3:f6:50:68:b0:0b:cf:8f:ab:fb:82:
                    2a:0b:fa:37:60:e4:a6:7e:35:4c:77:91:5f:a0:c2:
                    7b:25:8f:a1:96:02:df:4d:22:8d:57:78:92:c3:09:
                    8f:2a:f6:b1:12:ba:86:16:ac:10:67:a6:7c:1f:f1:
                    fb:d0:57:62:e1:da:0a:60:77:ad:1f:bd:ba:2b:ee:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:75:9A:55:8A:88:CD:E9:0B:BD:2A:F6:5C:2F:49:A0:3D:32:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e4:91:33:cd:ac:da:cd:8b:37:8b:2e:f8:9c:5f:75:3b:58:
         66:ff:34:87:06:61:6c:90:8e:b1:cb:9e:c6:0d:6a:fb:c3:03:
         f5:c8:a7:a0:e4:11:b1:6b:6f:78:fd:6a:b6:b4:45:5c:4f:4c:
         46:5a:4e:86:1d:67:3d:42:30:aa:17:6c:eb:96:be:36:33:a4:
         dc:76:6f:59:7b:23:71:87:bb:b5:6d:d4:ab:f8:07:21:6e:04:
         f6:02:d0:55:ef:c7:be:94:55:f9:76:62:d0:79:34:e0:27:9b:
         59:8b:f8:69:13:d3:f2:9c:33:9f:d4:1b:af:3a:48:1f:a2:85:
         6d:d5:5e:8a:d8:cc:8d:e9:66:25:9d:51:0d:41:e3:3e:86:fe:
         95:8b:b9:7a:3a:30:8d:23:91:2c:8d:ff:92:d4:d6:3b:c6:c3:
         d0:2e:49:3a:13:ea:a1:25:37:63:db:02:36:a7:c5:94:42:ad:
         71:99:1a:f3:e3:95:cf:12:82:e4:14:1f:8a:ce:e6:5a:20:9c:
         b1:ef:53:51:ad:37:40:09:e6:50:e9:d9:51:29:f4:98:f2:6a:
         35:a1:d8:bb:17:af:be:08:7f:de:1f:29:94:3e:a6:50:dc:dc:
         f1:bb:a9:25:a8:e3:ae:a0:fb:4a:67:9c:0e:62:98:f7:d5:4f:
         aa:b9:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:33:09 2026 by rpki-client