Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
File:                     c4cc816d-0378-3331-bfab-29af1c51cb4e.roa (raw, json)
Hash identifier:          RjiG1VJrP0HkxGCMoXzFmTYQVqvm2snqaGxQEcYkUw0=
Subject key identifier:   CB:8A:71:4E:32:06:0C:87:51:AE:D0:8C:4E:EB:B7:0F:A9:4D:47:60
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584D80FFF2AD1332FDE4B4AA5680
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     202
IP address blocks:        199.249.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f2:ad:13:32:fd:e4:b4:aa:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=c44915cd-4554-48d9-b18f-f97c4c33d01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:98:81:fa:ec:c4:49:51:81:a9:d8:38:af:
                    8f:48:c8:c8:b9:b3:0c:59:e1:a5:df:76:f7:1d:0c:
                    43:a7:95:6a:a7:d3:0b:e5:8c:2a:ad:99:76:cd:c3:
                    06:03:ab:f9:f0:a5:f6:42:2a:c4:3e:7f:17:6e:36:
                    67:bc:7b:e3:e0:4f:c6:3e:51:34:c5:15:94:93:1e:
                    b1:a9:e2:ef:91:4d:d1:4d:20:7a:6d:f6:32:2c:44:
                    b9:01:ef:d5:b0:c5:89:3c:10:b2:2a:0c:74:5f:74:
                    40:78:8b:c6:c3:f5:ff:a1:71:dd:04:f9:bc:3d:17:
                    ee:16:80:6a:2f:8f:61:47:6f:0c:41:22:75:9d:be:
                    82:e6:90:fe:5a:8a:e7:97:b2:83:72:31:13:77:c1:
                    c0:9c:53:bb:09:c5:92:49:22:c4:80:2c:cb:db:7d:
                    1f:7e:d9:85:cc:b3:2f:3c:82:11:50:ff:d6:cb:75:
                    a9:11:39:07:d4:dd:68:fe:34:aa:f6:85:80:30:03:
                    e2:07:83:c7:d7:60:b5:5b:19:db:88:a1:79:1e:73:
                    e2:47:10:7a:70:94:4c:fb:ff:bc:2d:06:a5:bb:db:
                    a7:76:89:35:1d:ce:6c:f1:c9:a1:9d:c3:eb:f6:f6:
                    d5:f7:10:26:86:dc:e6:56:98:3c:d0:8b:15:0f:3b:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8A:71:4E:32:06:0C:87:51:AE:D0:8C:4E:EB:B7:0F:A9:4D:47:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:4d:a6:06:7f:43:65:ca:5c:5e:51:bd:8c:db:05:2f:72:
         8e:34:1b:63:15:92:6d:4c:ce:f9:61:88:19:db:80:07:49:b7:
         ea:19:69:6d:47:b0:d7:11:e0:1b:a8:d4:7c:b7:84:a9:e4:6c:
         34:57:79:d4:87:de:63:73:6a:19:a8:0a:d2:04:e4:78:b4:3c:
         39:84:5d:0e:62:e3:68:6d:75:c8:c4:da:f4:35:f5:fc:24:cf:
         db:e9:6e:73:1e:1a:14:67:26:3d:47:ef:48:3b:78:bb:e5:bd:
         c8:42:02:a4:ac:54:7d:fe:24:86:c5:e4:9b:80:dc:d4:8a:b2:
         37:89:6d:26:9f:ca:45:2b:8b:0a:1c:c8:02:e8:ec:5d:17:d7:
         fb:aa:28:b4:83:fb:57:1c:b7:c5:5f:f5:7e:65:e7:b2:b7:34:
         1d:16:5d:7c:cc:30:f3:4b:57:2e:f2:c5:6a:d4:e7:51:d2:f1:
         47:91:2a:5b:5d:3f:fb:c9:86:59:0d:88:28:d8:5e:9a:10:2e:
         22:e0:54:b5:cc:62:d5:3a:ed:83:c3:17:64:bd:b7:7b:34:d7:
         f5:d4:95:0d:ea:fb:e9:c5:95:bd:3a:7b:9a:12:ee:26:2d:59:
         be:cb:d6:51:72:51:3c:e3:60:8b:b0:1f:3d:96:ff:cd:72:d7:
         ad:4d:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:07:59 2026 by rpki-client