Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f4a225dc-ad2e-3523-b58f-8715b3e0c77c.roa
File:                     f4a225dc-ad2e-3523-b58f-8715b3e0c77c.roa (raw, json)
Hash identifier:          tJI2uTaXVQm+yllTrzrxA5yjdX3Rz8llmvhigIMyLoA=
Subject key identifier:   86:3F:3E:98:C6:CA:70:5C:80:57:B0:7D:04:95:54:F5:2D:B5:2D:47
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584D6AAA832281DD216E31788D00
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f4a225dc-ad2e-3523-b58f-8715b3e0c77c.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        199.167.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:83:22:81:dd:21:6e:31:78:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=0b598262-1e97-4ddd-a993-b56f894598d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:6c:c6:2b:57:e1:9c:fd:c9:5d:d5:f2:5d:
                    88:fb:4f:d1:1b:b6:1c:9a:35:20:76:b6:52:a8:9a:
                    fb:ce:c6:d4:4e:5c:13:7d:e0:3c:dc:3a:78:8a:98:
                    e7:53:95:52:a5:29:8c:25:33:8a:51:ba:ce:b4:62:
                    8d:63:5f:b8:30:3f:b5:24:fb:62:dd:b2:22:1c:47:
                    16:e6:40:3b:0d:ef:b7:98:66:ac:65:83:ae:de:00:
                    9c:cc:24:a2:35:08:5b:d9:dd:7d:20:4f:25:50:6b:
                    2e:39:dc:21:dc:45:fb:a2:dd:13:12:5d:95:3f:42:
                    48:e5:79:3a:92:c8:3e:90:5d:18:24:56:03:8f:18:
                    07:cb:5a:3c:59:35:71:3b:5e:1f:a8:81:20:5e:6a:
                    3e:4d:3e:fa:4d:6c:79:c4:b1:81:98:94:28:60:7f:
                    e0:ea:32:fc:cd:68:b3:3b:1a:c6:21:7a:dc:20:5c:
                    d1:db:2f:0d:e3:3b:27:cb:8e:59:bd:fd:82:d1:56:
                    e3:25:ca:00:fe:fa:9c:fe:9a:80:01:19:ee:73:07:
                    2e:19:da:3f:6c:44:e2:bf:8f:15:15:e5:6b:34:0f:
                    27:5f:1a:04:be:12:7f:83:75:8c:53:a5:b9:ee:6a:
                    14:1c:47:13:98:94:6b:fa:bb:d0:79:e2:1e:21:1c:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3F:3E:98:C6:CA:70:5C:80:57:B0:7D:04:95:54:F5:2D:B5:2D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f4a225dc-ad2e-3523-b58f-8715b3e0c77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:1b:73:1c:23:cc:99:3c:64:d4:ca:59:c2:11:6f:5d:f0:
         dc:b3:e8:bb:61:f7:b9:b0:f1:59:d3:86:f2:05:86:e0:b6:9b:
         f7:ad:81:3d:54:28:e1:cf:de:18:e8:d1:97:e4:7d:e0:dc:fe:
         4a:72:fc:77:dc:f2:ff:90:25:4e:b3:27:eb:57:e4:7e:cd:87:
         52:f2:98:60:c7:f1:f6:9c:2c:5c:67:79:1b:aa:75:7d:d4:da:
         41:ab:2d:6e:39:e1:77:f9:a3:a7:74:c7:2c:bb:7c:8a:e0:29:
         34:67:11:44:51:86:f4:fd:c3:7a:89:ad:96:02:85:e8:7d:a8:
         80:76:64:54:40:12:9d:6d:20:cc:3f:47:f8:bc:8d:e7:a4:c0:
         88:62:f2:e7:13:8b:70:68:85:fd:f3:f0:cb:ba:fd:77:43:cd:
         4a:b7:0d:cf:3e:86:8c:2e:3f:c3:bf:dd:78:b1:57:54:f2:3e:
         f4:86:68:ae:33:e6:3a:1d:27:b9:9f:fd:89:0f:60:19:69:3e:
         37:26:0b:17:9f:36:d4:7b:ad:7a:cf:17:92:8f:4b:b8:c3:4e:
         90:79:b4:72:62:11:99:e4:1a:a8:dc:5e:7f:98:68:e6:99:e3:
         71:d1:76:b3:f3:a0:28:61:22:71:ef:27:fa:c3:34:a2:7d:dc:
         d8:86:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:52 2026 by rpki-client