Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/32de8776-7da6-39ab-8c75-af0061da0ba0.roa
File:                     32de8776-7da6-39ab-8c75-af0061da0ba0.roa (raw, json)
Hash identifier:          58fOIJuUGR0juYyRFKX+hhIdQ1TUP5sdOx8bTzSSdFM=
Subject key identifier:   5D:77:6C:91:5D:BB:27:B2:8B:86:CA:61:57:6F:67:36:33:F9:9A:7C
Certificate issuer:       /CN=cce65795-3b77-4225-98f0-89e8bfcf275c
Certificate serial:       010D0C9F4328584E3CF9C8FB0C166F03A00CB500
Authority key identifier: 3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/32de8776-7da6-39ab-8c75-af0061da0ba0.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     11826
IP address blocks:        199.15.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c8:fb:0c:16:6f:03:a0:0c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cce65795-3b77-4225-98f0-89e8bfcf275c
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=fc188db9-ddd7-414c-81d2-64977ea53699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:58:74:b6:d9:6d:c6:48:74:92:87:af:ea:
                    ae:38:e1:25:00:01:f5:f8:15:12:48:f8:b8:5f:1c:
                    60:66:40:5e:ab:08:25:66:46:00:ea:93:18:1c:08:
                    fd:5c:de:58:02:ea:84:2b:6d:3a:56:57:81:6f:2f:
                    5d:5e:87:c6:87:bd:32:70:c1:32:b5:0a:31:af:9e:
                    23:05:54:60:20:bf:37:b4:bc:fe:be:82:bd:fe:2c:
                    82:8d:00:de:52:fd:69:c1:2a:8f:f6:a7:a0:3b:4e:
                    91:56:1a:00:df:0a:50:17:96:98:3f:a2:e8:be:4b:
                    95:63:94:59:d4:0c:db:c4:40:c1:5f:2d:c2:e0:20:
                    2c:20:d2:05:b8:83:c5:85:05:9a:65:52:a2:cb:7b:
                    60:9f:b4:36:eb:a3:a3:5c:7c:03:62:3c:98:9a:fa:
                    76:c1:cb:d3:c2:a6:ba:df:cd:2d:aa:25:fb:e1:d2:
                    81:60:7e:db:4e:f1:89:b3:47:f6:68:e0:3f:26:a8:
                    8b:15:7a:04:fa:9d:c8:3f:fb:f1:3f:99:41:47:a4:
                    a2:3b:2b:24:fa:66:28:18:36:84:79:53:8a:22:48:
                    f5:50:db:bf:8e:b6:e8:ec:aa:5e:94:bb:99:a6:6d:
                    cd:95:3c:14:f6:51:23:6d:38:af:00:83:09:b0:97:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:6C:91:5D:BB:27:B2:8B:86:CA:61:57:6F:67:36:33:F9:9A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/32de8776-7da6-39ab-8c75-af0061da0ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c/cce65795-3b77-4225-98f0-89e8bfcf275c.crl

            X509v3 Authority Key Identifier:
                keyid:3D:C6:5C:AD:F9:44:55:92:95:C0:A5:6C:92:74:3F:00:6A:72:8B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cce65795-3b77-4225-98f0-89e8bfcf275c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:65:30:8c:9c:45:f3:43:4e:62:22:6f:56:f0:0c:c2:5c:17:
         a2:c5:ec:cb:b8:1e:f5:e3:ee:59:d2:55:61:75:7c:62:56:50:
         fb:90:ac:bb:6f:d3:97:38:d5:81:3a:a3:f9:7f:56:eb:0f:fd:
         70:00:09:f0:3d:4e:28:b6:36:de:44:e3:b9:2a:d4:88:22:7e:
         c9:7a:7a:c9:db:78:be:b2:a2:66:f9:0c:7a:a4:4c:cf:1c:d8:
         1f:62:be:35:3e:6c:5f:7e:c5:63:a4:99:46:39:79:4e:83:1a:
         b7:e0:76:6c:bd:8c:74:88:98:14:d2:fd:b2:6b:3c:b8:e0:b4:
         a2:0f:ae:55:ac:4d:ff:2a:d3:97:e5:97:00:9f:1b:a3:da:f8:
         3a:a5:92:da:5b:15:3c:4e:18:ba:22:b7:19:94:60:c8:62:7b:
         72:ae:94:e5:da:02:e5:fe:10:4e:20:c4:d7:da:71:87:e7:70:
         00:f1:95:04:42:68:4d:06:c6:b5:e2:73:60:4c:8a:4b:75:f6:
         da:2e:fe:f0:99:88:f3:1a:21:3d:aa:8e:1e:59:88:2e:3d:53:
         d4:89:22:3e:79:be:f4:67:cd:0f:5d:4e:4b:e5:63:a3:28:19:
         5d:f6:17:b9:57:fe:08:52:30:90:05:ba:76:c6:45:70:05:b4:
         43:72:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:08 2026 by rpki-client