Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa
File:                     6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa (raw, json)
Hash identifier:          ecfZixbpl4XYNRouo3/TGTqbCk5JdgYXqKnky9lguMQ=
Subject key identifier:   FA:52:A1:B5:EE:91:97:A0:7B:1A:0B:FC:6D:BF:6F:4E:BF:27:2F:02
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584D905AA4F961BB80AEEE4A3920
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     15296
IP address blocks:        199.216.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a4:f9:61:bb:80:ae:ee:4a:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=8c8459b4-7f43-4831-9448-993f950b5f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:a4:8e:97:01:68:db:a7:41:67:1c:df:71:
                    e5:ac:a8:f5:cb:10:70:eb:7b:61:5b:42:37:26:4c:
                    77:55:f8:fd:3c:03:0c:9a:56:cb:99:06:bd:2a:b6:
                    a4:f5:c0:d9:85:5b:71:97:f8:83:21:32:4b:f0:5d:
                    b3:1e:cb:ad:fa:8b:aa:fa:76:d5:d5:e9:a7:fa:ed:
                    62:51:36:8c:81:20:4e:43:aa:d1:f7:34:e9:1c:75:
                    37:06:f1:32:aa:f7:d6:c3:7d:71:82:0f:b0:92:7c:
                    18:0f:b4:fd:23:92:7a:21:29:1c:5b:eb:a8:45:14:
                    1e:40:d7:49:ea:6e:ea:00:d9:02:6b:e7:be:10:bc:
                    c8:02:87:54:52:21:32:e7:86:47:14:b5:ea:96:46:
                    87:25:88:8b:11:a4:c0:cc:1d:f4:43:b1:f6:16:8f:
                    d6:0d:5b:81:74:93:a6:49:62:1a:0b:6e:5f:5d:62:
                    cb:2d:77:5b:ab:71:42:45:2e:b1:f4:37:ed:3e:d3:
                    36:ac:67:2e:c7:af:a7:89:9d:d1:6e:9c:cd:34:83:
                    42:5b:e4:d6:bf:cb:0d:25:cc:56:75:d6:23:8c:be:
                    bd:6d:2d:b3:93:10:f4:91:3a:b9:22:80:11:45:fa:
                    a3:60:0e:df:9c:15:d2:c5:c0:e8:e6:c6:cc:aa:1e:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:52:A1:B5:EE:91:97:A0:7B:1A:0B:FC:6D:BF:6F:4E:BF:27:2F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/6c6917a5-c689-3b0f-8d42-0c7d1225ae4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:de:86:ea:1c:f8:88:2f:cc:5f:15:5b:05:48:97:0e:e0:dc:
         68:03:26:d5:e3:32:96:d7:39:90:e9:45:bd:27:2d:cd:dc:2c:
         d9:b8:43:5f:38:6f:e5:2b:f8:f6:07:97:24:ff:39:5b:68:cd:
         90:ba:9a:65:a3:c4:1a:37:39:62:bd:e1:b1:cf:4b:e4:47:8d:
         d1:0a:d9:a9:1f:c5:20:f0:e1:9a:d9:5e:04:82:d8:c2:75:6c:
         21:03:c3:74:8f:2d:b1:f7:75:c4:3c:ca:7b:3f:54:ac:e7:82:
         6e:bd:aa:17:c0:73:26:02:37:14:d0:3b:03:13:d9:a0:23:d1:
         d7:c1:96:94:99:eb:5e:a4:33:2c:76:21:7f:85:e1:b5:56:19:
         42:59:dd:14:0f:92:2c:8c:87:a3:7c:b4:02:20:1d:8c:10:58:
         b4:c0:74:f3:00:5a:07:a7:0e:8e:07:f6:70:f5:d8:fa:89:da:
         a5:61:ea:26:cc:47:58:8e:47:4d:dd:49:43:9a:ef:b2:e2:b8:
         aa:04:15:36:a8:b9:fd:f5:f3:af:bd:9e:50:c2:80:62:6b:88:
         da:20:8b:ac:70:2c:18:cf:1a:85:1d:d1:d0:f2:70:ac:c9:6d:
         04:f6:a0:a9:20:41:ce:6c:02:1e:e3:31:84:94:e4:17:9e:28:
         38:e7:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:32 2026 by rpki-client