Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f5ba459c-c424-3d72-922e-721d68a95f32.roa
File:                     f5ba459c-c424-3d72-922e-721d68a95f32.roa (raw, json)
Hash identifier:          ALMpLECeyOfuoNcZ7JCEXBYtPSf+2B+mvMUdJd7prPk=
Subject key identifier:   D6:78:1B:76:AC:CE:69:D5:DC:99:38:7C:33:C6:FE:AD:68:1A:EF:4D
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584F30526B14618A9F7FC415EA70
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f5ba459c-c424-3d72-922e-721d68a95f32.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     399629
IP address blocks:        199.91.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:6b:14:61:8a:9f:7f:c4:15:ea:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=10fea584-2936-490d-97f7-b09ae324ff16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:29:65:e4:84:30:64:84:d7:1c:5a:c6:d2:
                    d3:cd:0d:07:bf:55:05:80:c5:9f:49:12:ee:21:14:
                    d5:46:3b:d3:08:9f:fb:4c:d5:94:9c:cb:2a:d5:7e:
                    aa:fd:b3:66:9f:93:6f:28:a3:63:a8:8c:6c:f3:85:
                    bc:72:09:14:d5:f5:67:13:07:41:40:84:e0:dd:20:
                    c3:f3:7f:1d:c9:ea:90:23:12:da:4d:af:71:5c:6d:
                    5a:fd:4f:f8:73:81:7c:be:b4:78:b9:d6:4e:65:06:
                    bf:f2:86:8a:19:4b:ae:cb:1a:10:50:0e:8a:fd:e3:
                    c2:97:5a:31:df:e3:b1:a6:6d:91:f1:f5:2a:5b:c0:
                    d1:a7:ff:7f:74:ac:70:d4:0b:04:51:0b:46:f9:bc:
                    40:3b:70:45:51:71:3c:21:1a:89:51:f9:d7:c9:56:
                    09:d8:20:24:ba:90:a8:38:65:10:bd:5e:1e:b6:f6:
                    f1:e0:6e:df:3a:6b:0b:c3:da:16:ad:f9:18:53:c0:
                    e6:7c:8f:11:68:a4:5a:1b:50:24:51:b1:e9:c7:2a:
                    c2:54:28:cd:aa:a3:11:cd:f4:7b:58:58:24:c0:49:
                    06:2e:5f:f6:fc:25:6b:90:17:a7:75:43:c2:9a:67:
                    26:92:9b:85:12:c0:45:d4:b5:13:17:15:0b:2f:cf:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:78:1B:76:AC:CE:69:D5:DC:99:38:7C:33:C6:FE:AD:68:1A:EF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f5ba459c-c424-3d72-922e-721d68a95f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:89:d9:65:48:a2:69:79:46:06:6f:ea:25:ec:d1:87:f9:
         9c:ab:2b:1d:10:fe:0c:a1:f7:d3:7b:05:3b:be:80:d0:73:9d:
         1d:89:91:a0:d5:e6:65:b0:14:dc:81:a8:52:4f:cf:75:67:c6:
         ad:40:79:30:3e:dc:60:41:c2:0b:a0:93:7b:58:03:00:8f:2c:
         10:ac:1b:6c:34:df:08:ac:cc:f8:d9:4a:d9:43:0a:d4:8d:00:
         94:6c:cc:8f:ac:50:87:5b:4e:e4:e0:2d:71:62:64:f0:d0:83:
         51:12:69:15:b5:3c:ad:5d:19:9c:13:c0:42:94:4f:24:bb:92:
         8b:28:87:56:8a:7a:a5:79:3c:8b:91:d4:6b:5a:67:0f:62:7f:
         61:bd:25:b6:72:a1:07:3b:3c:0d:55:f5:bc:09:af:be:a6:33:
         da:9c:e3:33:23:bc:f4:ca:79:c6:e2:3b:bb:9e:e9:d3:5f:b5:
         ae:a7:7c:6b:52:e1:ad:a0:48:ff:29:e2:9c:66:97:c3:97:c4:
         fd:41:c8:b1:e2:34:e7:9f:90:45:fb:aa:5c:ad:9d:72:c0:05:
         e3:a8:4c:7c:96:f1:0e:cf:a3:7b:0c:b0:37:8f:6f:4a:68:d5:
         44:5b:a2:50:2e:b7:5c:8c:a3:ec:d8:c0:22:7c:fc:1a:dd:f7:
         12:be:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:52:24 2026 by rpki-client