Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ad236b1b-fd5b-33a7-9438-94ea9e9556d8.roa
File:                     ad236b1b-fd5b-33a7-9438-94ea9e9556d8.roa (raw, json)
Hash identifier:          y+8o6Z3ReCYSCVM7sEbIpCTcjiMx2wY4PkL5LDyxCUA=
Subject key identifier:   8E:A4:04:7D:95:B4:34:B3:10:6F:88:1A:F5:83:AF:B7:7D:96:38:95
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584DCDC5DAC222CE57BD69B47700
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ad236b1b-fd5b-33a7-9438-94ea9e9556d8.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     15296
IP address blocks:        199.216.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:da:c2:22:ce:57:bd:69:b4:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=a08b08d6-defd-432b-9a26-2a8a82c1f9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:c8:79:13:96:96:15:da:14:68:2f:ad:70:
                    31:0d:7d:2c:57:bf:1d:e1:e6:36:4c:cc:2b:ae:27:
                    f5:16:f2:52:c5:2f:7c:09:c9:a5:87:bf:6a:cb:8b:
                    c9:42:2f:17:0c:56:e9:56:13:83:d3:82:aa:69:78:
                    68:11:c0:f7:e7:2c:a7:e0:6c:4b:46:a9:91:bf:c3:
                    ac:35:d1:79:5e:49:c4:29:c7:27:89:d6:dd:8e:f7:
                    f8:0e:47:9f:32:a4:e5:25:35:f0:ec:5d:6c:3e:da:
                    4d:6f:0c:59:5a:8f:0c:5d:c5:62:fe:1e:6f:0e:bb:
                    b2:3f:3c:96:21:26:a3:57:48:8a:e1:68:8c:fe:1f:
                    e7:cd:9d:2a:48:21:db:2d:14:ec:3c:42:6a:5b:dd:
                    9c:dc:d6:c5:a6:31:38:ab:d0:cb:29:c1:6a:d3:01:
                    60:20:d6:3c:9b:22:31:a2:6e:a9:ce:a8:f2:23:75:
                    4e:f6:f2:d9:89:c3:28:9c:6b:85:e6:cc:7d:74:a9:
                    43:56:c3:49:df:64:b7:d8:4a:e6:51:45:22:ad:30:
                    e2:61:85:2a:f6:2d:d3:51:24:4f:4f:dc:c1:b0:40:
                    be:55:2d:96:8c:cc:dd:05:9d:64:bb:3d:05:18:d2:
                    48:89:73:72:d0:41:2d:af:0f:2e:33:33:2c:e4:94:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:04:7D:95:B4:34:B3:10:6F:88:1A:F5:83:AF:B7:7D:96:38:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/ad236b1b-fd5b-33a7-9438-94ea9e9556d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:8c:c0:e8:4f:74:b9:7c:ff:2f:3c:77:72:fb:74:96:76:e4:
         14:fb:37:65:69:4b:53:cb:2a:49:00:bc:ad:67:74:31:53:b0:
         e9:ba:07:c3:81:32:00:fd:c8:97:76:0a:c3:97:29:f7:8a:ef:
         91:df:5c:f1:4d:6f:f2:24:67:27:35:2d:71:da:71:bf:e4:26:
         00:d9:b1:dc:e1:e5:37:fc:3d:82:40:c5:8b:e5:9f:4d:b2:dd:
         9f:d1:27:bb:a5:b3:26:61:7c:16:bb:4c:00:a8:b5:59:20:6d:
         8d:59:d6:55:10:31:a1:fe:7f:ca:6e:0e:b1:c8:ec:02:53:4d:
         ff:7b:68:ae:9b:26:88:e0:79:07:40:9e:36:af:48:c1:64:71:
         91:7d:2d:5e:73:b7:f9:a0:89:9a:1d:9a:18:3a:b5:69:9d:32:
         e9:c1:6f:d3:cf:39:3e:7a:3b:6d:40:d3:11:26:52:dd:3d:59:
         83:b5:af:e2:ed:b4:bc:ef:67:0b:38:70:ae:2b:b7:52:36:b5:
         42:45:04:b3:14:c5:81:f9:dd:57:10:47:00:d9:a7:c0:3a:f4:
         35:8e:cf:c8:8c:56:61:bc:57:ac:69:02:3a:6b:39:79:c6:3c:
         35:b9:82:8f:38:4a:e9:1b:8f:01:ae:e0:8b:81:e8:e2:4f:8a:
         b8:13:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:54 2026 by rpki-client