Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/d5032875-6fa5-38f1-ba77-8feb7acd2ddf.roa
File:                     d5032875-6fa5-38f1-ba77-8feb7acd2ddf.roa (raw, json)
Hash identifier:          L/aYynKQXakbdNBSYndv5iUUsxXWYMjH8JKlj8ZAwnk=
Subject key identifier:   C7:71:7B:DC:23:1A:97:D1:98:1E:7F:BC:66:78:01:9D:BC:8E:74:1B
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D55BA3830142AF86517D27500
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/d5032875-6fa5-38f1-ba77-8feb7acd2ddf.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33071
IP address blocks:        199.6.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:38:30:14:2a:f8:65:17:d2:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=dfefbc19-d2f2-470d-929a-f2460dbdb263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:dd:71:eb:5c:e1:19:bf:07:7c:40:c7:b7:
                    8c:b1:35:de:14:e8:e0:6e:12:c5:21:d6:0c:a4:e9:
                    3b:ad:75:de:36:cf:04:52:a5:52:f5:d7:b3:7c:cd:
                    13:e1:01:ce:06:8c:c4:3b:b1:4f:d2:99:d6:e8:82:
                    be:0d:f6:b8:19:da:43:1d:e8:82:c4:c1:3d:e8:82:
                    11:4b:ce:0f:74:30:9a:30:f2:08:8e:03:3d:fb:6c:
                    b1:7b:c3:19:27:15:b2:c3:a1:94:b6:37:1b:62:79:
                    80:cd:3b:78:af:32:6f:fd:70:22:f5:ca:2a:5a:b0:
                    5d:cf:ce:76:ee:5e:0d:f6:86:dd:cf:79:f0:38:95:
                    f3:b8:5e:c7:29:06:9f:6c:e2:2b:32:b2:5f:55:5f:
                    0b:0b:2e:ce:49:09:a7:98:98:16:08:b4:8e:2b:02:
                    1c:b0:d3:e6:f4:52:9f:8a:e0:ef:12:b8:0a:30:d4:
                    c1:6c:8b:af:38:cf:79:db:eb:f2:b5:ff:9b:2e:4c:
                    2e:4e:bf:ec:96:62:7e:3c:32:f6:db:48:1b:a2:5d:
                    95:d3:9b:37:6d:63:5f:50:01:c2:39:ad:7d:93:4e:
                    d1:f9:82:4d:d6:89:15:ae:12:ea:9d:ee:8e:0b:08:
                    d6:aa:87:fb:b0:0a:6e:1a:78:d2:f4:9e:19:cd:73:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:71:7B:DC:23:1A:97:D1:98:1E:7F:BC:66:78:01:9D:BC:8E:74:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/d5032875-6fa5-38f1-ba77-8feb7acd2ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:70:49:fc:be:64:b6:c9:02:26:0e:84:3c:e0:ff:fe:39:
         6a:2f:86:b0:69:ee:5d:e0:fb:97:7a:eb:f4:76:1f:23:51:a4:
         3c:71:0d:80:fd:93:f9:93:7e:82:22:9d:4a:a7:28:8b:c5:3e:
         fc:78:a1:67:61:22:e6:1a:61:d2:89:7e:58:a1:13:84:67:89:
         62:8e:a8:a9:29:b9:e6:a4:79:b4:07:5d:ca:91:96:64:eb:8e:
         c8:34:ed:6a:7b:e5:1a:c2:f2:e6:1b:a9:34:fa:fb:86:3f:63:
         e6:74:71:47:d7:4c:cb:7c:58:8e:40:3d:61:25:a5:3d:25:30:
         cd:58:f0:b6:23:fc:07:55:c5:69:54:44:db:97:2e:53:ed:73:
         16:c1:23:3c:cd:64:e2:ad:b1:d4:04:69:23:81:80:e2:12:59:
         50:f2:e3:f4:02:b0:b4:2e:d2:93:d7:c3:74:04:37:b4:6b:1b:
         77:65:47:53:10:c5:93:79:64:6d:7c:de:9b:1c:b1:60:a3:58:
         b6:45:ea:75:02:43:9d:04:07:18:7d:40:14:d0:0c:c1:02:a3:
         aa:4d:3f:6e:d7:14:ef:23:25:14:d7:e3:3c:20:df:2b:5d:ba:
         f9:c3:b9:c9:91:c4:bc:a8:cc:3c:e3:80:59:20:49:36:7d:2e:
         e7:ae:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:09 2026 by rpki-client