Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa
File:                     32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa (raw, json)
Hash identifier:          W0Nf9vnv0fGLh8GDvhhqz0etteW89k3zzNvWn5zw1hM=
Subject key identifier:   46:E7:F0:E8:81:AF:E2:62:13:4F:F2:5E:95:02:BB:F4:BD:30:FE:0E
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584D80FFDF1258260FDA8E8A9400
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        199.187.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:df:12:58:26:0f:da:8e:8a:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=002fb711-5825-4ff9-b5e8-bf86a2880194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:9e:00:2a:6c:ba:4d:66:da:29:0d:0f:cf:
                    b4:e7:fd:95:aa:b7:c2:69:d1:c3:37:b6:0e:8d:d0:
                    22:b3:89:ca:ca:b1:30:01:20:28:c3:5b:01:00:09:
                    a1:cf:9d:8a:53:98:70:f5:1d:f5:b9:9d:e4:7f:f0:
                    b6:dd:5b:51:22:d3:f3:c0:1f:5a:ab:96:e3:1c:a1:
                    54:68:d3:8a:5b:15:47:bd:06:b6:1a:b7:64:40:da:
                    45:8e:5c:c8:71:7c:20:29:1f:1a:6a:80:5a:f6:92:
                    d1:72:cc:05:8b:f2:a9:95:14:f1:06:8f:21:98:21:
                    96:c8:29:3a:c8:57:bd:29:55:c3:a6:36:f6:92:b1:
                    df:15:fe:01:f6:fc:fc:8c:74:32:e0:85:b1:c4:b5:
                    4f:79:55:75:ef:da:dc:70:a4:de:99:31:53:dd:4a:
                    d6:a7:41:96:a3:4d:56:a0:e2:f5:f0:4b:1c:80:e4:
                    4e:b7:a7:9f:ec:ad:82:13:02:cb:f8:9f:21:3f:b6:
                    b5:8f:26:c6:ef:73:82:47:ff:78:d4:a1:7d:88:2f:
                    21:4e:0b:8d:4f:ca:17:56:97:00:3c:92:11:4a:0c:
                    d3:c6:4a:79:6b:61:12:b7:57:72:0f:b3:90:9a:55:
                    9c:77:5b:ef:01:f7:0c:91:2b:aa:ca:c5:fa:be:47:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:F0:E8:81:AF:E2:62:13:4F:F2:5E:95:02:BB:F4:BD:30:FE:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/32e8d482-50d0-35ca-85bf-46bcd85dddd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:9b:f9:47:a3:1b:e5:63:d9:b4:f1:0f:46:b3:de:a0:ae:
         58:b3:66:47:95:c5:47:5d:25:9b:79:3e:73:74:2b:5c:15:62:
         af:21:33:9a:ef:c9:7f:70:af:ed:7a:f1:a7:8b:eb:42:b7:b6:
         6f:1f:80:38:45:09:35:f5:28:ca:ba:09:48:1c:db:8b:7c:5f:
         52:fb:7e:ce:46:46:e7:fc:95:06:1d:02:5f:30:a5:4d:d5:ad:
         4f:ef:47:78:43:b3:83:1d:ef:e4:98:63:0c:05:41:97:32:4f:
         0a:91:2c:e4:c4:d6:9b:c2:48:fb:19:95:5e:4d:89:e1:3b:d7:
         d9:0c:a5:30:e0:94:6c:32:ba:d9:88:03:6d:12:8b:6f:67:48:
         82:74:30:31:b2:20:af:30:70:35:90:8c:5a:b3:e2:3b:c4:1e:
         d7:20:17:12:38:2b:28:31:b7:72:71:5f:a5:ea:8d:57:c8:a2:
         01:bd:ea:43:f1:13:17:bb:a2:f2:07:cd:33:f1:99:91:f5:90:
         64:19:dd:b1:c9:45:e6:e1:eb:5b:f7:cd:04:70:2f:87:96:88:
         c2:07:00:4f:b0:b8:af:38:69:8c:81:ad:16:38:45:a8:d3:2e:
         88:9c:a6:fb:80:df:56:43:2b:12:72:c8:7a:ff:95:7c:07:b0:
         23:14:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:08 2026 by rpki-client