Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa
File:                     72ff3015-9382-36f0-b469-eaf2cf7cea67.roa (raw, json)
Hash identifier:          XP5e/SsSb/wmFUjhvUqFZ6OQJuNKv748DRJsvJSdBFw=
Subject key identifier:   8C:09:F9:59:57:B6:B0:5F:B4:C0:6F:DB:C6:6E:1C:F8:D4:EB:C6:28
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584D80FFFACB7CEB385462221660
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16839
IP address blocks:        199.91.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:fa:cb:7c:eb:38:54:62:22:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=2ead7b17-5d88-40fe-9c37-cb924a0ea021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:db:c1:45:4c:72:2d:96:d3:0c:79:56:95:
                    c3:50:f1:47:d0:b7:0f:e4:45:bd:0d:0f:e0:a5:f1:
                    83:c2:8b:13:e9:6f:dd:66:b0:08:a0:da:ca:f7:eb:
                    99:c7:15:7f:d9:cc:ff:b0:1f:d5:5e:d9:fb:c9:cf:
                    0e:bb:1d:2a:3b:d1:4f:25:86:4c:49:9a:70:b8:88:
                    37:46:72:6b:09:48:c8:99:c3:7a:76:55:99:a3:22:
                    a5:ae:31:6e:d4:c7:71:8c:e1:cf:89:56:11:ee:ce:
                    2e:05:17:56:a5:13:e2:2a:c8:c8:b0:35:63:e6:62:
                    b3:cd:29:57:90:b3:54:41:fd:0c:79:13:b3:71:a0:
                    d5:40:c8:ac:ea:f5:c6:83:e7:03:18:a1:2c:3b:37:
                    fc:45:d2:f2:f2:41:cb:7f:72:4c:65:d9:bd:24:6a:
                    be:1d:0d:31:59:2a:3b:d9:55:78:36:4e:45:dd:72:
                    6b:94:63:19:21:cf:5c:63:e9:68:9a:44:e3:b2:65:
                    88:82:b6:d2:e1:1e:86:4e:2d:74:05:7c:76:da:b6:
                    2a:42:54:ab:43:3b:42:f1:59:cd:4d:92:23:97:1c:
                    3b:73:a1:d9:74:0c:30:01:d9:14:e0:84:b8:db:08:
                    e6:40:df:df:61:37:60:17:1e:7a:58:a5:4a:77:2d:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:F9:59:57:B6:B0:5F:B4:C0:6F:DB:C6:6E:1C:F8:D4:EB:C6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/72ff3015-9382-36f0-b469-eaf2cf7cea67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:9b:96:2d:6c:bc:ac:7e:9f:17:8d:42:46:77:57:42:19:73:
         f8:66:69:f0:d8:ad:37:5d:e3:9b:18:3a:9e:0e:86:2b:42:7d:
         51:2e:bd:73:86:3b:50:fa:35:be:eb:62:e4:8c:e6:fc:43:f5:
         5f:17:57:9b:8a:a6:47:a1:0c:a6:3e:a3:56:41:55:60:1e:e7:
         3b:77:88:06:a1:8a:19:95:27:7d:cb:0c:e4:4b:27:65:e2:06:
         76:c1:31:71:ef:4b:ac:3c:aa:fe:e4:e0:01:52:00:99:aa:ab:
         1b:65:0f:b6:1b:b8:d8:86:12:33:89:4a:37:9d:12:e2:5c:b0:
         66:77:5f:32:2b:aa:89:51:ca:e5:33:f3:3f:4d:7e:c7:0e:0d:
         d9:49:66:e5:eb:57:c7:be:30:b2:ff:44:1a:1f:62:6d:23:11:
         af:9d:1c:54:bb:29:58:d9:bb:99:8c:b4:27:91:29:fc:d3:94:
         7d:8a:f3:93:04:4d:3c:da:17:bc:6b:d0:6f:76:73:3c:63:15:
         9e:f4:85:6f:3e:d3:6e:c9:d3:ec:c3:c1:20:9a:ab:37:c8:63:
         2c:e3:61:3a:42:4e:6a:a4:fe:6f:de:bd:23:4f:fb:aa:e8:1e:
         54:e5:c7:6e:57:e8:3a:9f:55:ef:11:8a:00:bd:1d:16:75:be:
         91:4b:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:25:23 2026 by rpki-client