Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
File:                     2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa (raw, json)
Hash identifier:          tErJhYWkPMXFsTS6TL9y3Sp7DOGwyNnqIXqYt/0Ztmo=
Subject key identifier:   7F:F0:69:00:21:12:E2:FF:97:4D:D8:05:7A:B6:8A:52:F8:A6:DB:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA81F7DC318FE792018160
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     397202
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:81:f7:dc:31:8f:e7:92:01:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=f493d7ed-b9b9-47d1-839b-71cc98403793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:bc:7e:b6:de:0c:44:79:98:3d:d3:09:ef:
                    5b:5c:b4:7c:33:7a:8f:b0:71:fe:bd:c5:fc:68:90:
                    5f:a1:5e:09:f6:10:89:75:fc:ad:ae:17:fd:3b:c4:
                    01:fa:b6:a5:a7:f9:41:86:f2:b3:d2:bb:ca:07:62:
                    30:c3:a1:8a:90:0a:ea:4c:8f:a2:2f:3b:73:88:50:
                    82:c1:d6:52:43:e8:b7:7f:82:b0:00:1a:cb:df:9b:
                    9c:ca:96:26:0a:6f:e9:d5:25:ab:5c:52:aa:1b:34:
                    e0:fc:58:bd:b7:65:6f:8e:19:65:f5:ec:90:a4:c2:
                    42:16:7c:7f:9d:be:c9:23:c4:6f:bb:89:af:f0:4c:
                    f7:7e:56:04:a5:03:cf:46:93:5e:36:c0:91:98:81:
                    be:2d:a2:be:f0:db:27:ad:92:25:2e:a0:a4:b6:1e:
                    e7:ad:03:86:21:9d:bb:b8:3a:2a:54:ac:c0:51:af:
                    80:4d:8c:2b:ce:ea:dd:17:85:6a:b3:fd:fc:18:bc:
                    1b:81:fa:bc:e5:b9:26:e5:e0:8f:a6:a6:2d:a7:f4:
                    ce:87:98:f7:af:11:29:b2:2f:7c:0a:d6:07:05:b1:
                    b2:98:0c:f9:b0:88:e9:da:93:58:e1:a5:26:40:3c:
                    52:48:eb:bb:30:e0:d1:3b:e5:0b:aa:d3:b3:7f:85:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:69:00:21:12:E2:FF:97:4D:D8:05:7A:B6:8A:52:F8:A6:DB:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:63:14:d2:fa:2f:97:34:f5:b5:b1:da:8d:d5:fa:f1:65:7c:
         e1:c5:eb:59:a5:93:69:b8:8c:79:67:34:30:ce:ce:95:d1:e0:
         d8:a6:d1:72:2c:3d:60:ba:32:08:1d:7a:7e:ee:9e:8b:cd:3e:
         3e:33:53:9e:04:af:8d:a3:0a:53:6c:32:41:5b:ec:34:34:e6:
         b8:22:14:b8:93:fc:2f:b8:89:f5:d2:e1:3a:2f:24:18:ce:92:
         09:2e:26:4d:07:5d:1e:2c:7c:37:69:ee:2b:f2:ec:db:74:9f:
         68:88:c2:67:f0:94:5f:cb:b8:ed:a5:b1:f6:71:21:f7:c7:52:
         18:bb:65:7f:0f:6e:68:b3:23:a4:e5:19:af:00:ce:1c:58:8a:
         05:62:2e:90:d8:7b:e8:c4:8d:cc:c6:9f:ed:d1:2e:4d:b0:a2:
         a5:f3:6f:a8:d0:ad:be:1e:86:c3:f2:e5:ed:d9:91:27:9b:ed:
         dd:2e:c9:51:e6:51:d0:b6:5d:c4:15:c7:27:90:c0:87:21:c1:
         30:fc:f5:5b:dc:50:13:0b:9a:e3:c7:7b:e7:a8:b8:27:8e:99:
         81:b9:ba:09:34:ae:e4:a9:97:e0:91:86:e8:97:a9:ec:88:06:
         45:39:0d:f8:2b:af:68:0a:c5:68:10:d8:b3:25:6e:0b:43:f4:
         7c:57:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:52 2026 by rpki-client