Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
File:                     e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (raw, json)
Hash identifier:          pOiN1UaojXzpm5yrVz7QxGcns0fBTNXL13kxS/RR5Xs=
Subject key identifier:   83:4F:75:47:50:83:8A:69:55:10:0E:EE:1A:49:05:CD:4A:86:09:3F
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F4328584F698D845210C23CDAD964BC00
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     65104
IP address blocks:        199.212.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:84:52:10:c2:3c:da:d9:64:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=31e64e3f-71da-4c37-9ae0-96746d1773d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:4f:39:82:81:4e:73:3d:7a:14:2c:7c:f1:
                    79:e0:44:53:77:d7:84:1f:07:6a:2f:79:c8:f0:f1:
                    52:86:c0:5b:59:f0:c9:8d:8b:16:6d:8d:3d:e6:99:
                    b1:9d:b8:44:24:10:15:15:86:fb:62:11:c1:2d:99:
                    6a:ca:82:a0:c3:0f:bf:fa:af:36:67:7d:2b:c7:9c:
                    57:8b:c9:c9:dd:64:b0:ce:79:3c:d8:17:ed:98:50:
                    e7:99:ad:e4:2b:08:26:c8:4e:90:8f:e8:65:09:d6:
                    74:aa:87:32:3f:e9:15:aa:80:25:5c:75:be:9d:f0:
                    f3:ae:51:ea:ff:c4:01:05:2c:99:1a:93:20:55:ac:
                    93:eb:a6:6e:45:52:df:82:c0:cf:4c:16:10:a7:07:
                    45:91:e1:38:0b:8f:72:31:7c:f5:51:c8:8e:5d:92:
                    26:94:60:2c:10:1a:79:07:9d:5c:13:a2:f0:04:50:
                    d1:7c:db:85:20:6f:2a:b4:05:ec:5d:2e:94:52:9d:
                    89:d9:cc:04:92:11:05:48:06:2d:bd:21:df:99:48:
                    00:3c:9c:d0:04:f1:ee:21:eb:34:a9:03:2e:92:56:
                    a5:1b:b8:27:67:df:ea:c0:23:1c:f0:7b:76:6f:97:
                    4c:00:cc:de:65:d9:65:07:06:f9:74:49:40:16:8b:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4F:75:47:50:83:8A:69:55:10:0E:EE:1A:49:05:CD:4A:86:09:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:ed:13:bf:9e:f6:73:cc:ed:cd:16:5e:52:c1:9e:55:f5:
         9b:63:42:6d:b2:20:cc:c2:a8:9d:46:cf:55:8d:d7:34:62:62:
         c0:e7:a0:2e:16:8a:c9:d5:62:ae:f9:71:25:18:f2:2f:5a:62:
         fa:b8:14:e4:cd:66:9f:51:34:3f:2d:0f:e1:58:47:86:e6:57:
         2d:eb:ba:21:b5:0c:df:00:b9:fb:d7:46:de:80:d2:05:81:51:
         33:ba:98:08:9e:9f:42:93:f7:d6:2b:86:8e:6a:e8:ae:f5:ac:
         e2:69:22:93:31:0b:a2:c4:3f:3b:8f:97:ec:7c:4f:a5:d3:e2:
         96:11:71:55:d2:3b:ca:0a:3d:3a:6e:7c:ca:1f:76:4d:b2:b1:
         9d:f0:dd:bb:f6:da:2f:9b:8d:9d:27:b8:ac:92:b3:d2:3e:f2:
         95:85:3f:19:ad:96:46:84:55:bf:76:6b:ab:0c:3e:11:a8:ea:
         ac:85:43:b9:b1:4f:67:1a:b7:88:42:85:fb:62:41:f4:ae:e2:
         70:ea:3c:3e:9d:86:c9:17:21:95:94:d1:ce:0a:f3:6c:51:83:
         20:e7:dd:f5:af:3f:58:06:5f:be:50:19:df:89:5f:f3:e1:7f:
         66:c9:ff:6f:81:1a:df:55:fb:8e:38:66:c0:a5:b6:d2:ca:67:
         c7:d8:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:56:16 2026 by rpki-client