Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f1fdd574-8e97-3f4d-9572-1a89d03fc3dc.roa
File:                     f1fdd574-8e97-3f4d-9572-1a89d03fc3dc.roa (raw, json)
Hash identifier:          Efcz7plxKZ3TFxGtrUo7L4VtW94Rpxpi7mQcU84gQsg=
Subject key identifier:   10:27:1A:F0:27:2A:F6:77:4F:15:CB:C8:60:0C:67:E7:CA:70:85:64
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584F28D5C147823EDA871D2FF080
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f1fdd574-8e97-3f4d-9572-1a89d03fc3dc.roa
Signing time:             Sun 13 Sep 2026 08:38:28 +0000
ROA not before:           Sun 13 Sep 2026 08:38:28 +0000
ROA not after:            Sat 12 Dec 2026 09:38:28 +0000
asID:                     11179
IP address blocks:        199.59.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:28:d5:c1:47:82:3e:da:87:1d:2f:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Sep 13 08:38:28 2026 GMT
            Not After : Dec 12 09:38:28 2026 GMT
        Subject: CN=2526892e-12f9-4b56-ba91-2955e1f7eaf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:c1:03:81:94:72:a1:dc:27:de:b8:c4:6b:
                    e7:f4:3f:c9:86:46:17:7a:0d:67:e9:1a:f2:43:cf:
                    94:a8:f5:79:fd:5c:8d:d6:06:b1:fc:9c:d5:41:25:
                    a8:2c:15:1c:d1:a0:4c:b8:82:9c:2a:f6:61:40:32:
                    3f:c1:68:19:09:cb:e1:b8:e3:ad:65:a2:61:b3:6d:
                    e0:18:cb:4e:52:b6:e4:c3:80:b5:75:b7:ad:c8:9b:
                    0c:80:0a:b4:64:60:67:e0:58:ec:53:1a:cb:7a:3a:
                    c7:9a:5e:0e:3e:42:19:29:ce:39:a1:fa:8e:63:df:
                    34:20:0f:0f:b6:52:6c:82:f0:6c:58:a0:91:32:5e:
                    e5:48:ef:22:16:60:af:cc:13:88:ff:9d:23:cd:8f:
                    3b:95:09:d3:c5:03:b8:b6:5f:f3:f0:31:42:9c:cb:
                    f9:26:4a:aa:bf:08:f8:10:fc:5b:43:61:c9:d7:02:
                    38:91:6e:4e:94:a5:3b:ea:04:07:03:59:ba:1b:3e:
                    70:8b:19:c1:67:16:56:3f:8e:b3:ce:a9:aa:41:46:
                    83:bf:0f:63:43:b9:37:84:00:73:c4:c5:c3:f3:51:
                    f6:02:73:5a:b9:17:66:5f:b2:c4:8f:47:17:ae:58:
                    d0:88:7d:63:57:f3:92:6b:82:6e:a4:c0:35:16:e7:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:1A:F0:27:2A:F6:77:4F:15:CB:C8:60:0C:67:E7:CA:70:85:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/f1fdd574-8e97-3f4d-9572-1a89d03fc3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:8f:d4:ba:af:8d:4d:2d:8a:b6:24:61:7a:c8:d8:4c:93:
         8b:2f:f4:e8:6a:a5:41:0e:70:97:6a:e3:fe:d1:16:39:c6:91:
         5f:9f:28:23:1e:b8:55:fe:22:5b:53:64:c0:9f:74:ef:a6:12:
         12:cc:c9:22:7b:4d:c5:84:fe:80:77:32:ad:69:f7:94:62:c5:
         9f:d0:cb:00:8a:5d:7a:eb:e7:3a:67:af:7e:14:83:69:72:40:
         49:0a:26:2c:a7:e2:17:2b:fe:7f:56:72:75:66:ce:f0:1b:29:
         4f:1e:30:69:4d:1a:3a:14:6a:65:cd:e3:66:33:7f:be:f6:4b:
         81:87:79:26:98:37:8a:65:88:d9:aa:b9:85:20:b1:7f:e6:3e:
         7f:fc:8f:2d:c4:f4:6c:38:47:a2:29:c8:a1:f4:57:28:62:d8:
         47:30:bb:bc:a5:5b:35:cf:78:4d:3e:7f:a9:35:6c:b8:a1:a8:
         5d:0a:2b:31:af:86:6a:c8:17:57:15:8d:c7:8c:91:65:6d:6a:
         2e:e9:40:ef:57:78:8f:7f:b4:50:6c:a1:08:1d:2f:9d:83:2a:
         34:d5:50:04:03:66:3c:64:fb:cf:30:e8:f5:7b:24:91:40:3e:
         ed:00:cd:ec:9a:ec:8c:52:db:a5:51:9e:36:cb:65:95:3d:70:
         7e:f3:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:36 2026 by rpki-client