Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa
File:                     3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa (raw, json)
Hash identifier:          QHLpo9jJRAfNsp6I6TXuc5bcAbg8fm0506lwlbytE84=
Subject key identifier:   2D:E0:F7:F7:5F:08:B9:92:8D:EF:68:07:D1:56:51:84:83:AF:B1:33
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584D905AA4E0792F1CF4C2EF9D00
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     15296
IP address blocks:        199.216.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a4:e0:79:2f:1c:f4:c2:ef:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=2cc56ca1-1005-42da-a0c7-a0edaf27be37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:d5:dc:40:5a:34:33:d3:54:6a:37:01:a3:
                    11:65:d8:50:82:a8:a7:2c:54:13:bc:93:69:1f:07:
                    a0:e5:16:a1:84:08:0e:0b:3a:01:59:fe:8b:43:f6:
                    cb:a5:04:26:2e:48:44:ae:db:c5:5f:ef:21:af:6a:
                    b1:15:8e:50:88:68:b3:77:f8:70:46:a7:8c:01:3e:
                    7c:c5:23:75:c3:12:f8:68:97:b7:83:3c:04:ee:c7:
                    02:03:0f:8d:aa:66:2f:b2:40:1c:db:c7:71:8a:e9:
                    d8:dc:ab:ea:1c:b0:50:19:0c:c9:d6:85:c7:53:5a:
                    a8:f4:d8:f5:5e:6f:19:8c:78:e5:5b:29:c7:f7:39:
                    b7:4e:ca:0c:9e:03:cf:e0:d2:eb:79:f9:15:09:c5:
                    d5:5f:6f:e9:dc:96:1c:53:1c:f1:9f:07:6c:33:d6:
                    a3:c3:95:82:7f:1c:d3:ba:bd:65:8a:16:af:2c:3a:
                    d2:d3:dc:09:92:4b:ff:87:23:6f:4a:0a:ed:bb:55:
                    92:80:cb:32:69:77:eb:05:2c:42:56:cb:9f:a9:9e:
                    ca:be:9b:de:31:5a:06:27:00:9a:da:21:90:97:bf:
                    f3:91:83:65:af:5c:92:1c:8c:17:78:2f:8f:14:ad:
                    f0:93:ca:2b:c3:c9:e0:7d:7f:f9:20:3d:a4:f2:9a:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E0:F7:F7:5F:08:B9:92:8D:EF:68:07:D1:56:51:84:83:AF:B1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/3c2f4ee4-6ec5-33ef-b4f6-da975b418539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:bf:61:88:dd:41:57:29:54:e1:40:2a:54:c2:6d:5f:79:
         ce:8e:25:8c:3d:7f:15:ea:7d:92:f9:94:21:9b:02:6b:e8:2d:
         8a:95:bd:f5:e4:f5:ed:63:8a:ed:18:9b:b0:0a:26:86:97:79:
         4d:fe:5d:1b:aa:95:3c:00:9c:5e:e4:c0:a2:7f:f5:cf:61:73:
         2b:eb:47:0a:4e:5c:0c:df:d2:82:c6:dc:af:54:9f:c4:07:12:
         bb:43:60:8a:34:3a:67:2c:71:4a:30:7c:8f:71:58:ae:dd:ef:
         42:d3:db:39:0f:e6:03:a0:b3:65:dd:b2:94:99:37:8e:7e:b1:
         a6:d2:90:de:1b:66:fd:50:db:76:09:91:9b:ee:d3:2f:5e:47:
         4d:51:23:7f:dc:f1:61:f8:d2:2b:5e:94:33:c5:b1:5b:39:5f:
         fe:23:05:dc:50:c5:cd:d4:fd:4b:08:07:7e:5e:34:19:67:0a:
         2b:d9:74:e8:e9:31:bd:c1:08:3e:7c:7c:4e:31:5e:bb:b1:fb:
         9b:d0:27:7b:34:dd:48:e8:bd:b4:00:44:32:d0:60:57:5a:f4:
         2e:24:b6:44:0c:f7:05:81:ea:77:bf:ca:88:28:20:f5:34:d7:
         d9:83:99:f1:1a:f7:47:f3:33:9e:07:c1:e2:d5:1b:50:1d:23:
         e9:79:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:00 2026 by rpki-client