Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/3c2ba54d-b6fd-3614-b5e2-13d696b32a79.roa
File:                     3c2ba54d-b6fd-3614-b5e2-13d696b32a79.roa (raw, json)
Hash identifier:          DF5dnBJe2jzjlViTzX8Eu47sOEt73wO7nOqNGSkl2Y0=
Subject key identifier:   66:C6:AE:34:C5:30:B6:7C:11:5A:5D:79:95:75:07:9B:EA:EF:E2:29
Certificate issuer:       /CN=919a4b9c-70ba-44da-8f00-056b3a87c761
Certificate serial:       010D0C9F4328584F451F9B2B008B425BEDDD6C40
Authority key identifier: 91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/3c2ba54d-b6fd-3614-b5e2-13d696b32a79.roa
Signing time:             Wed 23 Sep 2026 11:49:54 +0000
ROA not before:           Wed 23 Sep 2026 11:49:54 +0000
ROA not after:            Tue 22 Dec 2026 12:49:54 +0000
asID:                     30150
IP address blocks:        216.99.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:1f:9b:2b:00:8b:42:5b:ed:dd:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919a4b9c-70ba-44da-8f00-056b3a87c761
        Validity
            Not Before: Sep 23 11:49:54 2026 GMT
            Not After : Dec 22 12:49:54 2026 GMT
        Subject: CN=e7b27311-03ce-4bb6-a426-2423ac531611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:01:a4:c1:98:75:9f:35:85:b2:78:be:76:
                    32:41:51:ff:ca:06:9b:f6:2f:69:88:41:5e:88:51:
                    ce:bc:5a:c7:a0:c6:ad:ba:8a:39:49:62:99:bd:52:
                    f9:03:69:6b:18:02:f5:55:4d:26:e4:32:69:b9:07:
                    d7:e4:65:62:52:0f:d1:c7:33:10:01:9c:41:00:4b:
                    b1:6f:a9:f6:14:5b:2b:10:ed:92:13:bb:bd:b2:3f:
                    c5:5e:28:9b:49:4f:53:e9:c3:70:e0:de:20:f5:0d:
                    cc:73:19:14:be:8f:e3:f5:50:94:18:5e:52:01:27:
                    25:45:f3:bd:15:49:51:58:eb:94:55:2f:02:92:21:
                    10:0a:89:b5:a6:14:ee:15:23:44:ab:91:fc:f0:c5:
                    7b:ba:09:98:70:ac:0c:17:1d:1e:81:57:78:64:ef:
                    d5:66:e2:91:09:e7:89:c2:f9:bc:d8:3b:da:4e:2f:
                    95:58:0c:f0:fb:d1:dc:ff:8d:de:90:2c:ad:04:3d:
                    9d:a1:40:06:07:83:51:d7:88:0c:9f:72:68:28:e5:
                    fb:53:e4:71:ea:36:93:96:43:2b:af:63:8f:6a:f9:
                    d0:a3:43:42:d2:28:1a:d8:ce:47:43:de:04:60:b5:
                    a5:58:59:ee:8f:fb:cf:bd:c6:80:08:fc:e8:d2:96:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:AE:34:C5:30:B6:7C:11:5A:5D:79:95:75:07:9B:EA:EF:E2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/3c2ba54d-b6fd-3614-b5e2-13d696b32a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761/919a4b9c-70ba-44da-8f00-056b3a87c761.crl

            X509v3 Authority Key Identifier:
                keyid:91:DC:4A:9E:04:48:08:F3:54:C3:36:B8:40:6F:1C:7A:54:9B:72:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/919a4b9c-70ba-44da-8f00-056b3a87c761.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:8a:54:8a:d5:d1:97:a1:0a:30:8e:0b:dd:a9:ef:b5:66:ae:
         94:28:d1:32:e4:b6:b8:9d:e3:fa:5e:8d:e8:0b:52:a1:cd:00:
         fd:8c:45:a3:ba:0b:75:ed:de:d6:22:ed:72:06:72:1f:ab:ca:
         16:38:f2:69:ef:61:cf:e6:28:ef:c4:73:56:94:26:46:6a:58:
         92:1d:9b:69:dd:be:25:d2:76:a9:a8:97:f6:7a:1c:0e:12:ad:
         a5:6b:e2:25:3d:20:9c:b6:dd:90:29:65:fa:0e:4a:c3:52:38:
         67:e1:27:a2:dd:cb:d2:e6:3c:b9:d4:ef:10:23:c9:3e:ab:63:
         4d:ee:91:29:e7:2d:2e:7b:0f:5e:3e:ba:23:e9:9f:92:55:71:
         0f:7e:f6:67:ba:9d:9c:5a:2c:9e:b7:70:ee:d9:9a:be:b2:dc:
         35:10:76:6d:d8:b6:1a:3f:14:a3:0d:f1:61:38:c7:d9:0d:63:
         a5:ae:2d:78:00:bb:00:10:59:93:e6:48:46:36:8e:c0:87:0d:
         94:c2:1e:a3:9f:63:24:b7:47:7a:83:7c:7e:a2:b2:e6:01:3f:
         33:ee:e8:2f:75:a7:af:3d:a6:05:8f:fb:85:0b:14:02:4d:02:
         6b:cd:5e:90:9a:a8:47:6f:6d:5b:7c:7b:13:32:58:26:58:25:
         3b:b2:82:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:43:02 2026 by rpki-client