Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/661956a6-acd2-39bc-8f1b-cca7a2d0e90a.roa
File:                     661956a6-acd2-39bc-8f1b-cca7a2d0e90a.roa (raw, json)
Hash identifier:          AJ4yny0UOnIgdZMcUsfWLWxKV1pY5Mj/5na95fyuxUE=
Subject key identifier:   16:02:63:E3:83:14:6D:6B:C9:BD:1F:4F:CE:67:5B:20:A7:66:0F:74
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E0700A685616ACE6DF0BE2D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/661956a6-acd2-39bc-8f1b-cca7a2d0e90a.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     577
IP address blocks:        99.192.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a6:85:61:6a:ce:6d:f0:be:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=6667968d-6105-4f83-b1ea-a3166e77e235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:ee:35:49:0b:b4:06:d0:aa:63:98:3e:9c:
                    78:da:24:b4:35:e8:9c:04:71:f1:9a:89:59:5a:99:
                    33:95:14:50:33:b1:ff:de:2d:02:57:c4:ff:40:29:
                    14:c6:7d:54:72:a9:e9:09:08:df:9c:4c:29:79:70:
                    fe:99:32:96:45:77:6d:10:54:b9:d3:57:8b:c0:13:
                    f5:78:42:3a:84:7a:ff:26:56:7b:d8:5d:b0:6e:13:
                    62:1e:af:ca:d7:ef:e4:f1:a8:57:1b:b4:1c:8f:ae:
                    53:2a:84:22:e2:32:b7:a0:dd:bb:d0:21:1c:34:13:
                    2f:29:85:ba:2e:ed:c0:6f:11:56:ab:8c:14:6a:2b:
                    40:34:43:49:a9:37:87:44:1c:29:35:75:3a:84:1a:
                    7a:64:87:9f:26:5e:d6:9d:9b:41:39:88:b2:87:2a:
                    26:dd:c8:fe:a0:f7:ed:79:3b:82:36:41:49:32:e5:
                    c3:a4:62:24:62:55:ed:8a:1b:d0:e9:42:9b:bc:b9:
                    61:0b:0e:5d:c8:13:ef:26:71:0b:c6:ed:d8:f8:e2:
                    6e:43:98:0e:1c:82:61:88:e8:7e:d4:18:cb:06:d8:
                    58:93:1f:ef:86:01:d4:cb:de:a8:05:5d:2a:44:12:
                    75:85:8e:4d:c2:8d:82:15:64:9f:fd:20:01:64:48:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:02:63:E3:83:14:6D:6B:C9:BD:1F:4F:CE:67:5B:20:A7:66:0F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/661956a6-acd2-39bc-8f1b-cca7a2d0e90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.192.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:10:d8:bd:7e:04:f3:46:78:fb:a6:b2:40:e5:f5:82:df:e1:
         d6:56:ed:a3:30:f6:66:4d:e9:5e:da:f0:ac:2a:7a:b8:40:39:
         37:24:01:54:ba:f2:d6:d0:d3:f0:d6:39:65:01:38:95:50:b6:
         ab:00:42:36:21:0e:b1:d4:eb:29:29:86:a5:0f:b4:60:25:d8:
         0f:a5:04:09:86:a5:b6:ba:b1:1b:16:89:e3:08:8a:c2:da:b9:
         ea:1d:05:3e:a3:07:0e:8e:e4:06:c2:e4:a7:99:ee:49:39:c9:
         c4:7e:4d:a2:f1:3a:36:a7:e0:0b:6f:f0:f8:66:25:b6:8a:40:
         42:fb:3c:e4:42:a0:fd:ac:3b:df:cf:2d:68:d4:71:a8:fc:b9:
         7d:21:6e:4f:26:43:6a:8f:68:5d:19:1a:06:b1:59:76:05:c7:
         26:cf:01:73:fa:bb:b7:99:0e:f6:a4:3b:76:ff:dc:4e:05:7e:
         ab:ae:67:42:e4:70:e4:a1:9a:cb:fa:20:aa:ad:83:ae:a4:6a:
         17:9b:45:b0:e7:eb:a6:af:8d:c5:75:7f:d4:38:d6:a2:e5:81:
         e5:55:e7:39:bc:54:3e:f5:36:02:32:86:bc:5a:4f:7f:40:22:
         f1:96:c0:b6:fd:87:82:74:8a:a6:59:c5:7a:c0:e1:61:a8:5e:
         06:61:8a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:18 2026 by rpki-client