Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/18e84ae5-8226-32f3-8695-303a41046dd3.roa
File:                     18e84ae5-8226-32f3-8695-303a41046dd3.roa (raw, json)
Hash identifier:          aZzgfI5guISGkXwM09G8ltje+nCPG1qP5WNtySY8nfI=
Subject key identifier:   CF:7D:F5:D4:5A:13:FC:35:B1:30:3E:B3:13:94:D4:7C:D2:96:9C:25
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584D6AAA8C1C7A09EBE7B9C22A80
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/18e84ae5-8226-32f3-8695-303a41046dd3.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        199.167.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:8c:1c:7a:09:eb:e7:b9:c2:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a8bc9601-6255-4014-b1b2-a2ca1d9204c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:87:6a:ef:a0:66:5a:d3:8a:cf:94:c8:ff:
                    84:c3:c0:7b:a8:48:97:d5:43:e0:65:b6:ca:cf:5e:
                    d5:16:26:c5:26:ee:fa:51:55:bc:1e:d3:c3:24:f4:
                    97:50:af:f6:45:f9:89:d0:56:f8:79:5c:b2:eb:fc:
                    b1:e9:65:d7:63:d3:4b:10:3b:0b:9f:36:88:b8:14:
                    06:63:d6:de:ed:5a:32:09:c6:28:93:00:03:5b:2e:
                    87:86:c3:ad:1c:70:5d:0d:3f:d9:d5:d7:ef:e2:c3:
                    17:e5:84:30:c8:7b:b5:c4:2f:b4:23:bb:47:05:9f:
                    1c:49:d6:36:0b:37:1a:25:b0:e0:99:0f:34:ba:84:
                    59:e4:ac:a2:bd:f4:56:c2:41:03:6c:e3:38:a6:08:
                    19:42:7a:a5:dc:d1:0c:be:9b:81:b3:d8:bc:11:b9:
                    53:62:8f:55:20:dc:c5:a2:93:70:ac:16:c8:72:2f:
                    61:e3:b2:76:a1:1a:91:d0:30:7b:39:ff:70:a5:62:
                    81:58:81:ba:8d:72:e8:f9:7f:d4:f0:e2:3b:41:db:
                    1e:6c:e8:56:ac:19:4c:d1:33:95:55:f5:e5:f6:ae:
                    13:8d:04:12:15:4b:91:2e:6c:f5:0e:f5:37:f5:61:
                    07:d2:eb:04:0f:c1:9d:d9:af:66:92:46:fd:03:11:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7D:F5:D4:5A:13:FC:35:B1:30:3E:B3:13:94:D4:7C:D2:96:9C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/18e84ae5-8226-32f3-8695-303a41046dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:35:d5:df:9b:4a:48:b0:5a:6f:60:3a:3d:4d:46:cc:6c:83:
         7e:6d:97:44:62:89:fc:96:46:5e:4b:f1:a5:cd:48:5b:e5:f2:
         34:d1:a3:15:67:26:11:1a:d4:b0:a5:1d:dd:76:66:11:42:a9:
         e9:05:2a:2d:af:c7:ce:61:18:e9:09:1d:f2:fb:7d:90:d6:d5:
         fe:04:ed:1c:fd:a3:97:bd:cd:e9:3f:b9:d6:bb:6c:61:8f:f6:
         72:16:52:d2:eb:2e:7b:2d:b6:2b:9b:50:2a:5e:1a:c8:3c:ad:
         4a:ee:e3:20:13:18:64:0b:db:1e:be:86:63:ea:f6:8a:71:76:
         ca:8e:c8:34:21:b0:4f:fb:30:f7:fb:13:93:24:33:04:b6:63:
         de:1a:33:7e:0b:04:d7:33:a3:b4:d6:f5:f3:86:3d:19:05:05:
         13:cd:ae:3b:cb:d2:c1:ad:c5:74:43:ac:1b:10:89:1a:ad:3d:
         ba:17:8e:0d:f5:09:7c:e1:ef:31:a7:d0:3d:22:10:8a:9b:99:
         b9:5e:4f:6b:aa:37:2e:7d:cc:73:89:85:ef:e2:d6:1b:b6:78:
         85:5d:b9:34:78:c8:d2:4a:ca:36:20:f7:1b:4d:ec:de:27:49:
         8b:04:39:69:c4:c4:46:66:40:e6:c0:ab:21:24:13:c8:7e:d3:
         bf:d6:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:30 2026 by rpki-client