Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa
File:                     30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa (raw, json)
Hash identifier:          zIPWte2xkE0phX2hmRaOO3E9Ma6UXzxwzYiMq8SdMzQ=
Subject key identifier:   CD:05:20:A4:A6:50:1C:BB:D7:B6:65:64:24:43:86:37:CB:6F:77:FF
Certificate issuer:       /CN=a54174a7-95e9-428c-8a48-46da270ae20d
Certificate serial:       010D0C9F4328584D60E4FD39EE8F828876465B80
Authority key identifier: 19:DD:95:69:3F:8E:59:9B:FE:33:1B:79:77:8E:01:3E:D1:32:24:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     399211
IP address blocks:        199.83.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/a54174a7-95e9-428c-8a48-46da270ae20d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/a54174a7-95e9-428c-8a48-46da270ae20d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fd:39:ee:8f:82:88:76:46:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54174a7-95e9-428c-8a48-46da270ae20d
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=d35e224b-811e-474f-9742-ed8fed0eb784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:28:ef:bc:4a:6a:51:87:55:3e:75:d9:96:
                    db:8d:34:3b:e8:98:75:e7:35:5b:31:d0:90:35:7f:
                    69:e9:0c:16:75:e7:f8:80:b9:75:80:f9:f1:9d:75:
                    84:a3:02:0a:bf:2d:22:dc:b2:dd:e5:c6:de:e1:ca:
                    59:31:4c:7d:1e:1b:c4:4e:22:d5:4f:dd:a4:9e:9e:
                    5a:b0:dd:29:e6:53:8a:4e:a2:be:bc:96:21:f7:5a:
                    7d:97:33:23:d9:4b:c6:5e:1b:21:c2:b5:75:be:98:
                    05:51:67:ed:7f:d9:01:ca:9d:85:f8:bb:49:bc:f8:
                    7e:50:02:7f:e8:97:49:5b:35:3a:6b:33:f4:b2:c2:
                    e8:06:24:e4:84:69:dc:2c:f3:9d:4a:c1:44:35:e9:
                    09:b8:4f:f4:5f:a8:41:e5:df:d6:ed:9c:4a:41:7a:
                    ca:83:0a:22:75:58:bb:b6:b2:a4:2e:69:11:b9:4d:
                    a4:15:8a:8b:57:0c:5c:c3:3d:fd:e2:3a:f5:f1:b7:
                    e2:6a:7d:68:8b:a8:90:1c:c8:73:de:ba:30:7b:fc:
                    b9:7d:e3:de:20:3a:15:eb:fb:09:d8:60:8e:24:a8:
                    13:eb:b2:d9:5c:61:e8:2c:e1:05:da:30:b5:4a:0e:
                    39:91:d7:e9:44:57:03:12:6f:20:9c:2e:cf:40:90:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:05:20:A4:A6:50:1C:BB:D7:B6:65:64:24:43:86:37:CB:6F:77:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/30e83002-8a0a-3c06-a7ba-7c04ffcc068a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d/a54174a7-95e9-428c-8a48-46da270ae20d.crl

            X509v3 Authority Key Identifier:
                keyid:19:DD:95:69:3F:8E:59:9B:FE:33:1B:79:77:8E:01:3E:D1:32:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a54174a7-95e9-428c-8a48-46da270ae20d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:90:44:af:0a:55:ce:90:09:d5:85:d8:10:43:ee:ba:d4:2a:
         31:b9:d7:6e:e8:57:59:2f:94:6e:d4:4a:87:95:ed:7f:dd:0a:
         3b:6d:98:69:68:bf:dc:45:f6:db:1c:03:fa:65:78:f7:27:21:
         9e:f7:dc:99:02:59:62:23:cd:f5:72:8e:23:d3:30:3a:15:8a:
         2f:7c:8c:44:5a:10:72:b1:0a:09:10:f4:dc:e4:f7:29:f0:ff:
         16:21:56:13:92:8d:eb:cd:b8:c3:6f:21:dc:d2:bb:14:1c:f8:
         ec:ea:9d:24:03:dd:64:ac:80:03:53:96:60:18:38:1f:cd:fd:
         1e:9b:90:d8:b9:d4:7b:a9:97:0a:8d:dd:1e:5c:40:87:20:41:
         89:de:95:d2:c4:fd:f3:c7:0b:63:36:33:fe:ac:1f:39:5f:42:
         d1:f0:d5:33:fa:0f:a6:27:1c:7c:a4:db:ab:73:06:81:84:dd:
         9c:0b:1b:e6:4d:59:89:e9:76:59:c8:5b:49:79:15:26:d3:4f:
         76:f6:9c:6d:8d:5f:1d:5b:fa:79:f8:67:d9:ac:0f:c0:a3:8f:
         fe:37:dd:33:41:ab:1d:29:a8:f3:08:c1:c7:e6:27:54:a2:91:
         67:b3:71:f2:6b:3f:db:ae:85:26:2c:e5:bb:7e:44:b6:b4:88:
         e8:92:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:29:06 2026 by rpki-client