Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e089510-24f7-3a17-a4ef-54dfbebba411.roa
File:                     3e089510-24f7-3a17-a4ef-54dfbebba411.roa (raw, json)
Hash identifier:          IBWXtAlJxGE0u6NEzdLSqFTdbaFqIl/46gufI4Ona6U=
Subject key identifier:   49:72:ED:55:4F:98:47:88:27:6D:76:7A:17:71:ED:49:27:C5:E3:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584DD090641B0B682FB1CCC7C820
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e089510-24f7-3a17-a4ef-54dfbebba411.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     397232
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:64:1b:0b:68:2f:b1:cc:c7:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=b1182ecf-f6f6-473d-86cf-07b9aa370196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:24:6b:09:af:f8:c7:ea:4d:5e:73:aa:20:81:
                    85:eb:1b:56:eb:02:ef:82:64:d6:ac:43:a4:53:a3:
                    b5:f5:d5:fd:f5:00:cb:90:79:ae:2a:3a:04:95:86:
                    93:21:83:37:fa:85:b4:14:6b:8b:1d:e3:14:c8:4d:
                    10:72:3b:36:38:bf:1e:42:b8:a5:3b:a5:28:eb:25:
                    aa:ca:e5:a4:14:8e:5d:f5:9b:05:54:0a:96:b9:a5:
                    14:85:9a:18:9a:a1:38:50:11:ac:72:98:75:59:36:
                    7e:35:c6:3a:8a:8c:f3:10:6d:5c:61:43:5d:17:24:
                    81:5c:a5:f2:cd:30:03:01:0e:3e:d7:99:c9:41:52:
                    67:53:61:92:ea:4e:e9:5f:c2:f8:04:37:96:b1:01:
                    0e:bf:0f:55:fd:c9:0e:ea:48:6a:53:4f:2f:72:4f:
                    42:c7:3c:d2:77:17:07:1f:52:b1:64:d9:83:59:3b:
                    07:1b:98:a6:c5:a6:89:58:39:cc:d9:ea:cf:18:1a:
                    1f:e7:7c:6b:e0:9f:7b:e1:1b:10:bb:dc:6a:04:14:
                    ef:9c:20:3c:c1:be:ec:39:41:0f:9c:7d:74:83:d1:
                    07:45:a5:08:61:f4:f0:71:a8:67:48:1c:e6:cb:d6:
                    be:2d:e4:a5:83:71:8a:79:aa:0c:bd:2c:5b:4d:5c:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:72:ED:55:4F:98:47:88:27:6D:76:7A:17:71:ED:49:27:C5:E3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3e089510-24f7-3a17-a4ef-54dfbebba411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:c9:f3:4c:39:79:7a:97:10:19:b2:54:86:5a:2f:e3:7e:
         f7:fd:72:dd:4e:b6:b4:fb:9d:94:97:d9:d1:d0:e4:84:81:e6:
         ec:4c:6c:fd:7a:b1:16:33:3b:a4:87:88:ce:8d:c1:1b:7b:05:
         ed:6e:76:ec:91:f7:c3:27:e5:d8:0a:03:a5:73:ea:ec:20:95:
         40:b5:99:8b:38:e0:64:21:ef:60:89:8c:fa:f5:4a:0e:e3:54:
         88:3a:51:a0:e4:af:c9:79:d6:4f:7f:08:99:b3:a7:f4:56:b7:
         43:92:87:2f:45:8c:d9:92:00:16:bd:25:00:d7:7b:da:5e:02:
         85:c5:eb:60:0f:a1:61:88:bc:de:0d:18:2c:f8:b0:7b:e9:6b:
         45:f3:59:3d:b3:cd:40:6b:e7:99:7c:6a:5c:48:ee:e0:a1:78:
         bf:84:db:5b:b9:47:8e:4a:0c:2f:71:ad:e9:84:6e:17:02:68:
         03:4b:ad:f4:b8:4b:dc:f4:d9:47:0a:5f:8c:2d:1d:62:97:f1:
         4f:e4:97:fa:1d:4b:60:4f:76:29:fa:30:e7:02:61:a4:c5:71:
         13:f5:3d:72:e8:4d:88:63:78:64:1d:ec:73:49:00:c9:9b:b5:
         15:ae:28:03:c9:41:a4:67:01:4c:05:44:48:06:aa:83:b6:be:
         56:81:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:28 2026 by rpki-client