Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa
File:                     295fda47-ec78-359b-8a00-77909cf1ddfb.roa (raw, json)
Hash identifier:          3U3L5XmhEEkPV6Beayue5uGFbAbaPVC3YFxsIHDRGns=
Subject key identifier:   83:18:7F:7F:27:91:91:56:16:77:AD:7E:13:73:70:58:1B:3D:9F:BC
Certificate issuer:       /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3
Certificate serial:       010D0C9F4328584D9E5028496B9B3994C6186490
Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        199.7.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:28:49:6b:9b:39:94:c6:18:64:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=6d2ddec0-f03c-403f-a1aa-f3bc4ee5223c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:b8:8e:d1:74:fb:3f:2c:0a:d2:69:30:98:
                    d4:6a:dc:f4:b5:f8:e5:af:65:e9:e2:40:40:50:5c:
                    2e:9a:53:6e:4a:5c:6b:7c:73:8b:7c:dd:85:d2:9b:
                    7d:d7:a2:75:fe:56:e9:cb:f7:8c:83:e6:90:ef:39:
                    78:2f:02:58:da:a1:a8:e8:7a:6d:9a:65:59:4e:82:
                    8b:51:1b:ec:c4:ee:73:5b:2c:bc:4b:54:b0:c6:6c:
                    ee:61:10:0c:8f:14:25:15:de:6a:56:3e:02:bf:98:
                    6e:3b:54:3b:87:5d:63:bf:df:f2:88:09:03:2c:91:
                    02:0c:0a:5a:1c:50:18:d8:58:e4:79:da:6d:75:5b:
                    b1:cc:ba:a6:de:0f:6e:60:74:21:85:5b:1c:ed:cf:
                    b6:4c:e9:a6:6a:74:ef:3e:8b:b9:87:de:f4:06:90:
                    85:63:3e:c4:0b:a1:ad:4b:08:d3:e8:eb:5e:eb:06:
                    bb:35:a2:75:c1:fb:ad:ec:85:bb:a9:27:e4:6f:32:
                    3c:d9:7a:25:db:6f:de:f0:fc:e4:7b:b2:0f:d8:f6:
                    88:4a:58:34:6c:5a:32:95:26:9e:3b:e0:fc:f1:3e:
                    14:8b:67:e7:0b:16:8b:78:72:02:1a:0b:02:3d:8f:
                    2b:b3:eb:60:fb:59:fe:d0:ab:53:e6:88:7b:31:a9:
                    71:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:7F:7F:27:91:91:56:16:77:AD:7E:13:73:70:58:1B:3D:9F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/295fda47-ec78-359b-8a00-77909cf1ddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:31:a9:71:4f:a1:dc:3d:6f:05:41:a4:3b:6f:79:3b:af:
         fe:88:cf:8f:90:4f:cd:b0:b5:6d:74:e0:e3:5a:ca:f9:12:10:
         ef:5e:2c:82:68:b3:45:90:20:7a:f7:1c:c9:6b:c3:bb:31:df:
         26:59:82:0a:37:d3:7c:d5:bb:a6:a9:40:59:db:91:a1:bf:b6:
         40:46:b8:16:28:5b:b1:e4:7a:5a:48:f4:28:85:3f:02:22:86:
         b5:8a:3d:13:46:f7:85:6d:3b:1a:ca:e0:e7:e3:d6:74:cc:2d:
         ea:90:3a:50:84:39:6d:bd:cd:65:01:65:d0:6e:aa:bc:34:4a:
         86:69:04:50:e1:24:7f:f1:5a:ba:89:5e:f8:40:48:fa:85:fe:
         1c:a3:f3:da:82:b8:96:fe:ed:b2:b4:33:f2:4d:d6:bb:7d:bc:
         7f:b6:4c:ad:e9:c0:bb:3c:e3:ca:4f:0e:b7:d3:ac:c1:fb:d0:
         fa:da:4a:5d:83:68:e2:17:05:6e:42:c1:be:8e:ab:a8:63:91:
         25:99:e2:73:6c:bd:ca:d4:30:ca:cf:61:cf:c3:4a:26:44:55:
         99:02:f2:26:a5:36:23:2b:c1:7c:66:a5:35:5c:31:a5:28:96:
         59:35:3b:9f:2c:ff:80:b0:d8:39:bc:54:af:74:f1:b5:78:24:
         d6:c3:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:46 2026 by rpki-client