Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/e5159de2-ee4c-3dee-9a4c-745f9d791ec5.roa
File:                     e5159de2-ee4c-3dee-9a4c-745f9d791ec5.roa (raw, json)
Hash identifier:          ie6PCAQ6ijprU0KbnCdNdaOfQi30tYCJDf/r8COrGBU=
Subject key identifier:   5B:D6:29:75:61:A6:9D:E3:10:3A:17:7F:DE:DA:A1:05:9D:AB:79:9D
Certificate issuer:       /CN=a8e92fcb-845a-4526-b1f5-8d456add74c4
Certificate serial:       010D0C9F4328584E35FF15B4F1DF8EB1AAD00490
Authority key identifier: F0:BA:EC:D0:86:48:1E:FC:C5:89:BA:7D:B9:55:A9:10:8E:D6:BF:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/e5159de2-ee4c-3dee-9a4c-745f9d791ec5.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     394729
IP address blocks:        199.167.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:15:b4:f1:df:8e:b1:aa:d0:04:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e92fcb-845a-4526-b1f5-8d456add74c4
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=8f10c7ac-ab79-48c1-b383-b34bbe1da522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:ec:b1:bb:e7:96:f3:f0:c8:f3:36:30:60:
                    df:29:5f:0a:5a:3c:75:99:f7:7f:2d:7c:01:1e:48:
                    2d:68:77:dd:8b:6e:53:ad:56:bb:ce:05:27:f2:37:
                    06:a7:ae:82:fa:35:ea:f0:37:e1:10:a2:23:88:d7:
                    ef:6c:cc:7b:72:2c:00:ca:03:ce:2a:ac:27:1a:2b:
                    dc:bb:e4:d3:55:c3:bd:de:8c:07:b1:6f:19:2c:40:
                    fb:27:bf:8d:0e:4c:2a:e6:05:32:ff:4a:72:c5:c8:
                    41:80:d9:ef:69:c6:c5:ad:f0:c4:43:31:c5:0f:8a:
                    9a:9c:45:89:a3:55:45:cf:95:2d:24:d1:b6:c9:72:
                    c5:9d:45:38:99:9b:d6:53:7e:e9:e7:7e:6b:c2:3a:
                    e8:5d:ee:fd:67:2b:8a:ba:3e:39:df:11:3b:1e:42:
                    a8:d1:39:09:0b:98:29:4f:ce:66:16:88:53:e4:e1:
                    37:0c:3d:96:96:b8:d1:73:2d:8a:9d:ef:28:eb:fa:
                    87:48:8e:f0:01:07:ef:af:54:f1:9f:eb:7f:3b:26:
                    75:58:c7:d5:f8:e2:55:af:ef:e3:4f:1a:78:fa:97:
                    3b:e7:79:be:64:ce:2e:6a:1d:27:94:e4:b3:7b:78:
                    0e:c9:62:b5:05:89:30:ab:79:a4:6f:d5:4d:b0:aa:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:29:75:61:A6:9D:E3:10:3A:17:7F:DE:DA:A1:05:9D:AB:79:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/e5159de2-ee4c-3dee-9a4c-745f9d791ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4/a8e92fcb-845a-4526-b1f5-8d456add74c4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:BA:EC:D0:86:48:1E:FC:C5:89:BA:7D:B9:55:A9:10:8E:D6:BF:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a8e92fcb-845a-4526-b1f5-8d456add74c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:0d:21:52:15:8d:4b:b5:11:0e:bc:8f:6f:9e:c3:7e:ea:59:
         70:d9:c2:d3:48:6f:1a:c8:33:54:e1:85:2b:a1:c8:34:f7:6f:
         ea:64:63:7f:43:4d:fa:f4:9a:07:4c:0b:ab:e2:f3:87:0c:c1:
         9b:96:b5:e0:ae:50:01:e3:4f:99:09:57:d2:83:4a:df:9f:d3:
         34:22:84:ed:56:42:c9:06:8d:ec:b3:dd:d0:f3:da:68:65:25:
         1c:85:6d:9e:7b:ab:04:45:15:28:2d:6f:47:97:88:91:f6:5d:
         e8:8b:3c:d2:52:d4:0f:8e:df:c9:cd:87:a4:df:86:f5:f4:3d:
         7a:93:92:97:4d:f0:c5:7b:d8:bc:72:49:f1:68:d5:cf:05:6c:
         2f:10:52:5c:01:6c:84:04:b7:6f:cf:b9:7c:8d:88:bd:94:90:
         32:a3:86:9a:e9:b3:bf:93:f3:64:68:18:55:ae:f2:38:26:0d:
         67:76:f2:3e:85:79:db:88:dd:02:af:8f:d5:9d:f0:9e:8a:78:
         f9:f4:3d:04:69:29:bc:e3:9c:1c:55:86:29:76:38:fd:15:1d:
         54:97:50:b3:e0:1b:27:ee:36:7c:2f:f1:f8:80:e3:41:90:11:
         6e:58:57:1b:dc:5f:4d:26:63:a8:b8:a5:bb:c3:6c:63:c5:a4:
         7b:e7:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:10 2026 by rpki-client