Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa
File:                     7d2b49f2-50db-3b34-86b9-b831e6782c65.roa (raw, json)
Hash identifier:          hDdbZoxEzQXpehtGPaVQSSpB1z7wSBbOSXsuFvbKiKM=
Subject key identifier:   2E:93:60:FD:9D:38:5B:E4:92:F9:D4:38:4C:CB:24:9D:E0:6E:09:40
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584D4D5A729710DEFEFC098DBC80
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     13638
IP address blocks:        199.38.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:72:97:10:de:fe:fc:09:8d:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=14aeb80d-5b41-46c4-af76-e2cd4f2e1eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:3a:94:aa:bb:b4:30:db:7b:4d:23:c2:4c:
                    db:c9:d6:1e:e0:a5:55:97:9b:cf:bf:29:d4:8d:dd:
                    1b:df:d5:b6:c1:d5:c2:66:38:7b:27:8e:73:7b:2e:
                    9e:f2:a0:58:2b:a5:d3:71:09:67:ac:e1:9d:88:a3:
                    53:35:d5:be:2d:a0:6f:cd:6e:6f:40:34:d6:55:71:
                    35:06:63:4d:4f:a0:6c:9b:bc:21:6c:8b:4d:34:35:
                    a8:d9:7c:fa:fb:c3:d4:c7:bf:47:68:89:b0:e6:bb:
                    7a:17:dd:b7:7d:75:f3:2b:36:48:35:55:28:f6:61:
                    a8:0a:f8:12:d1:4c:52:35:24:5d:e2:88:2d:0c:9c:
                    7b:b1:9d:e1:24:8b:48:ec:a6:70:ce:5e:3d:14:9e:
                    8a:cc:23:dd:95:87:39:bd:20:42:9a:81:05:c1:9f:
                    ac:66:91:9c:c3:14:30:c2:4c:9e:2c:ef:35:d2:c0:
                    b2:03:4d:58:8c:66:84:f5:50:f4:82:6a:d0:41:a0:
                    64:e6:cf:93:6c:79:84:1b:c6:d0:e5:f5:13:e3:1e:
                    78:9c:d3:cf:86:3d:9d:5d:89:9e:26:49:cd:7a:11:
                    0a:a0:12:3e:13:4b:dd:63:b7:e9:72:13:3d:7a:23:
                    8b:97:eb:ee:7d:d1:bf:82:50:b5:86:64:ae:6e:76:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:60:FD:9D:38:5B:E4:92:F9:D4:38:4C:CB:24:9D:E0:6E:09:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:2d:aa:fa:24:d0:28:b5:49:8c:19:e1:68:43:3c:da:63:
         41:a3:20:21:28:44:fd:33:ca:32:79:27:b8:26:dd:fa:5b:2d:
         d6:a9:ac:ba:d2:6e:24:3d:95:a5:db:81:35:d5:f7:6a:0e:d8:
         d3:9b:37:c7:20:94:b1:39:b7:f4:a6:10:53:f2:b1:4b:81:af:
         aa:6b:d0:96:fd:ed:7b:a7:e1:76:b2:d9:46:95:17:4f:ca:44:
         22:b1:51:1d:7a:27:8f:21:e0:78:a9:09:65:ee:6d:a7:97:3d:
         b5:80:03:5c:74:29:f3:3e:0b:18:ec:30:94:23:85:cc:db:34:
         b1:3e:e6:a1:6b:53:44:e0:47:e5:3d:a2:fe:73:93:a5:b0:d2:
         b8:03:8c:b2:fa:3a:89:d9:92:c7:98:86:ac:12:81:25:7c:ee:
         99:3b:38:dc:60:68:a9:39:64:e3:63:ef:53:28:ba:f0:49:b8:
         1e:18:ba:5c:f3:9e:76:34:06:2a:d0:84:4c:1b:c2:c6:1b:af:
         17:30:20:64:bd:90:cb:76:ef:14:c1:e0:f7:a5:84:f8:e6:d8:
         87:e3:29:48:c1:c8:03:eb:1b:c4:3c:69:75:b5:6a:81:70:9b:
         c5:fc:4f:32:0e:8e:0c:20:87:a0:e2:9a:97:e6:29:8c:56:a0:
         2b:46:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:18 2026 by rpki-client