Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa
File:                     de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json)
Hash identifier:          KhsvARTyLDtecxRzF7U71thAzp6OqOai82Ua+bvgvsA=
Subject key identifier:   76:63:6C:1E:E0:E9:57:F5:A0:24:DF:8F:74:1C:30:89:A8:5E:2D:7C
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584E4824809542AD43A7E238B180
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     394625
IP address blocks:        199.38.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:80:95:42:ad:43:a7:e2:38:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=32c1a0e9-ea45-49af-b581-1d9d1ab06e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:62:bd:8d:9e:6f:a4:06:62:48:18:54:93:
                    48:f5:a3:f5:04:ca:cb:ca:7f:7c:4c:c1:51:02:09:
                    7f:01:0c:73:8c:33:0a:fe:b0:e0:6f:91:f8:a7:f0:
                    8f:75:67:12:91:a1:1e:97:8c:a7:bb:e2:77:d0:fe:
                    15:23:0c:7b:0b:23:d1:4e:d1:64:c6:93:e4:ed:b1:
                    0d:1b:b9:16:8b:9e:cd:f6:d7:94:4d:92:17:c3:2b:
                    d0:01:c4:58:8d:b7:55:c0:c7:37:48:cb:a5:7d:eb:
                    42:dd:80:49:e2:e7:68:c3:68:6b:ae:86:15:c6:dc:
                    fc:2b:2a:3f:72:80:ec:de:21:23:ea:f2:f7:4b:56:
                    e8:84:19:e7:53:e6:8a:39:c2:46:87:71:a4:55:af:
                    6a:2c:60:e4:de:08:d9:f6:3a:6e:1d:8e:8e:c1:a3:
                    8c:7d:9f:99:a5:ba:86:dd:50:02:08:7e:17:fd:a0:
                    c0:07:bd:39:a0:57:e4:20:f8:32:d5:d7:6c:cf:a6:
                    86:7b:9e:ca:8d:b4:c8:80:bb:77:b0:a6:9c:35:58:
                    61:61:de:d4:7c:fe:7c:9b:93:9b:76:7d:52:4b:ea:
                    c1:e2:d8:3d:e4:6c:71:41:06:d0:3b:fe:8f:50:6c:
                    a1:73:56:25:1b:6e:d2:82:f1:ab:cf:5c:e8:ad:53:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:6C:1E:E0:E9:57:F5:A0:24:DF:8F:74:1C:30:89:A8:5E:2D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:45:20:e6:86:bc:2c:57:28:88:54:85:77:52:5d:cc:33:
         55:91:bd:72:76:f1:86:33:71:63:aa:52:85:59:c6:56:f0:d0:
         60:1c:35:9f:15:07:e5:0c:32:87:4c:c3:d1:63:50:48:63:01:
         ec:72:d6:87:63:ad:56:1c:de:61:32:22:b8:a5:94:72:a9:86:
         75:ca:74:81:aa:c1:95:56:16:18:ea:ce:45:52:8a:24:70:cb:
         75:af:a2:36:0b:07:49:ce:98:90:1a:2f:8d:86:a5:7d:f4:44:
         b1:df:f1:98:66:64:f8:29:fc:af:99:5c:23:88:44:7b:c0:de:
         ee:a8:e1:fb:58:dd:3b:4f:17:4f:7a:b6:69:17:a8:7d:89:53:
         4e:da:51:e4:2a:31:7a:d0:d5:25:ee:79:fb:90:0f:c9:bf:fb:
         9f:ce:2a:5a:00:91:c1:8c:62:36:06:82:06:70:ad:a0:3a:b7:
         8e:16:6d:83:16:ac:b4:15:04:ee:82:4f:83:12:e8:e1:4b:47:
         43:0c:9d:f2:c7:7f:16:17:e4:ad:0a:9d:dd:f6:67:86:03:d6:
         42:9b:f6:c6:41:6b:54:be:e6:ed:6d:01:a3:69:1e:0a:ac:38:
         57:41:0d:85:14:92:19:88:ad:0a:43:bd:ba:b1:9e:eb:1f:4f:
         25:90:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:51 2026 by rpki-client