Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/678fc601-83fc-328d-bb2b-bef6a7d89e42.roa
File:                     678fc601-83fc-328d-bb2b-bef6a7d89e42.roa (raw, json)
Hash identifier:          Hj2jnAMMrexWCaVM7lLoKOig9Wlw7AbVEqDUvzU1BGk=
Subject key identifier:   13:15:D6:FB:6A:5A:BD:B0:C8:93:C1:75:7A:37:8D:64:D4:C4:DD:1F
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584F46A7DBE555FCD0D6CF395B40
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/678fc601-83fc-328d-bb2b-bef6a7d89e42.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     15296
IP address blocks:        199.216.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:db:e5:55:fc:d0:d6:cf:39:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=935bd3b7-3aa7-4d6e-bcd1-7af1dab61599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:95:7c:95:67:60:dc:bf:3a:7f:77:6f:52:
                    49:74:e1:a2:6d:4e:b0:54:2e:fe:c9:e4:84:68:3b:
                    36:c8:ca:0b:46:91:7a:a2:7c:dc:a1:38:ba:c7:14:
                    4b:15:11:8e:ba:ae:9b:7f:ae:f3:b3:80:42:99:cf:
                    fa:14:bc:66:4e:ae:df:f7:0d:92:ac:a0:6e:e1:8f:
                    59:37:4a:06:64:d6:24:d7:84:ae:8f:bf:32:f4:c7:
                    19:69:50:6d:42:e2:64:c5:8b:21:75:c3:ab:7d:7e:
                    19:ff:33:a3:2a:1c:8f:b1:e2:f3:10:2e:16:a6:41:
                    54:21:ab:81:bf:63:92:1a:c3:b0:61:a7:06:14:af:
                    75:33:13:7d:71:3c:27:03:a6:d2:ce:f5:64:b7:ce:
                    92:d7:b0:73:83:01:58:64:1a:bc:cd:e5:7b:43:55:
                    cc:a2:14:a2:9b:b8:47:9c:7d:10:69:bc:08:7f:e8:
                    0c:8f:ed:bf:30:97:7c:99:de:93:8d:fe:07:2b:c4:
                    41:1c:ff:b5:c9:ec:11:66:73:29:5d:50:a1:76:dd:
                    da:21:2a:53:6b:fb:51:15:d3:ca:f5:1c:18:be:67:
                    10:81:6d:fc:98:84:83:64:dd:b4:c8:bc:37:2d:88:
                    26:a2:84:c6:15:0e:2f:b2:89:1d:f0:34:b8:32:7c:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:15:D6:FB:6A:5A:BD:B0:C8:93:C1:75:7A:37:8D:64:D4:C4:DD:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/678fc601-83fc-328d-bb2b-bef6a7d89e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:0b:32:0c:bf:71:28:37:fc:45:be:15:7a:dd:e8:01:60:
         ae:16:a9:6b:f0:57:b4:6c:1b:5e:e6:56:c5:6c:64:16:7f:75:
         e4:7c:97:b5:6e:7a:b8:df:b4:2a:b1:a4:78:b6:8e:7f:c9:89:
         70:6f:f0:7a:e0:b9:ce:41:59:b4:a5:38:ba:7d:88:b4:e3:66:
         c8:83:39:77:b4:33:b5:18:44:91:4e:17:dc:62:c7:32:db:41:
         d5:53:85:90:c8:1b:ed:bf:d2:52:09:22:51:c9:41:75:1b:1e:
         07:18:4d:5c:9e:08:ed:7c:3c:8c:c6:7e:fc:77:65:35:93:2d:
         c2:de:b5:a4:8a:7a:7f:91:e5:2a:d6:66:47:26:39:26:b3:99:
         6c:82:57:ed:1a:88:b7:3c:e7:27:a6:1b:d2:38:f3:b1:06:fc:
         2f:9b:de:22:b0:45:55:24:e7:46:6a:ca:cd:a3:4e:49:69:13:
         9b:47:23:0d:5d:bf:4a:71:b6:42:0e:0a:77:f5:e7:a1:b2:bc:
         97:84:08:f4:c5:40:b9:b2:58:bf:3b:02:8e:e7:66:b5:f7:20:
         8a:18:2c:7c:f5:23:df:b2:07:92:8c:a3:14:f4:b9:b3:b2:9a:
         ed:3c:6a:90:da:61:36:47:76:f2:e7:b4:93:d4:19:08:d2:25:
         69:13:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:41:39 2026 by rpki-client