Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa
File:                     4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa (raw, json)
Hash identifier:          cv8OqcZ9x1gOZ8daUFwChlgB7JoJrAC4Bo85eJ/6B7A=
Subject key identifier:   F0:3C:2A:C3:E9:25:0A:06:94:9F:3F:32:FF:36:99:A2:4E:E9:6A:1B
Certificate issuer:       /CN=339ec033-73b6-4268-bb2b-7188aedd736e
Certificate serial:       010D0C9F4328584D59EA5D079CCA493CADDA0460
Authority key identifier: 13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        199.242.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:5d:07:9c:ca:49:3c:ad:da:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339ec033-73b6-4268-bb2b-7188aedd736e
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=459656fa-6ce1-4fd4-a31f-91f4af0e6deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:33:3e:b6:ae:e6:5e:8a:be:4b:25:ff:88:
                    6d:fa:fe:16:a0:51:13:17:19:50:09:82:5c:59:07:
                    6d:dc:15:b6:f0:cb:15:12:6b:6b:6e:6d:2b:f0:46:
                    75:5e:57:49:29:45:d7:09:a7:7a:21:05:f9:c7:9c:
                    fa:66:cb:ee:68:b5:33:d4:c7:04:61:c2:2b:dd:53:
                    9a:20:4a:84:a0:15:75:04:5e:0e:41:4e:9a:7d:f4:
                    f0:e8:bb:e1:a9:0d:85:fa:31:63:c8:e8:64:ed:f2:
                    16:a8:99:6a:4a:ec:5a:58:10:e0:8d:49:ba:38:95:
                    f2:77:8a:1a:ac:26:64:b3:de:f1:76:0b:2f:53:bb:
                    d7:73:01:93:36:15:0f:e5:29:23:08:57:47:43:7d:
                    c8:88:f2:6c:4f:d6:bb:4f:ed:ee:5f:77:b6:df:23:
                    9b:e7:aa:9f:d4:ec:c7:d5:19:f9:2d:6a:76:9c:f3:
                    75:eb:b6:4a:dd:e3:71:48:bd:db:fb:ba:05:93:2d:
                    47:9c:fd:ad:72:4c:8b:f0:d8:8e:bc:4b:28:89:d7:
                    2b:32:be:c9:5d:66:46:c8:f4:1c:2b:bd:6a:ec:4c:
                    0a:3d:cd:c3:43:79:38:de:78:6d:91:92:24:f0:52:
                    b8:88:65:65:8a:33:6d:70:a6:8d:d3:44:d5:c7:0f:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:2A:C3:E9:25:0A:06:94:9F:3F:32:FF:36:99:A2:4E:E9:6A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/4a56149b-2711-3bec-beb2-9ba79de9e5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.crl

            X509v3 Authority Key Identifier:
                keyid:13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:14:d9:ce:14:24:de:61:2f:3f:97:96:74:16:df:da:3a:
         12:c8:57:43:c2:2e:46:aa:12:8d:5f:8e:b1:e4:b3:d7:fb:8d:
         1f:8a:d6:ee:65:d6:b2:6b:c1:19:56:09:6a:6d:02:68:46:59:
         61:b4:fc:e5:09:fc:b4:65:06:77:de:19:6f:6e:96:0c:d9:ad:
         86:79:de:08:49:a6:86:29:d8:0a:69:58:44:ce:68:7d:43:61:
         1e:9c:16:ef:70:c8:72:c1:4a:c2:2f:d3:8c:c1:70:15:4c:78:
         64:8a:b4:60:c4:82:f9:c3:e3:83:49:fc:0d:d9:d3:07:fa:6c:
         38:36:e1:08:d4:6f:ce:6d:d2:0d:c4:89:18:49:c6:de:33:1a:
         c6:77:3a:6f:bf:70:7a:e9:a7:77:01:75:c1:e5:3c:70:cb:3a:
         2f:b5:a8:80:98:40:ec:ef:f2:72:57:18:88:e0:9b:20:9e:ec:
         eb:77:df:09:b8:5d:f4:eb:bc:96:27:bc:f3:79:11:b7:89:f2:
         ef:ba:b4:1f:0d:d1:a2:88:7b:25:92:f7:8c:43:81:71:8e:09:
         46:8f:58:a1:b7:42:f7:c3:50:7d:18:bd:31:30:82:be:b3:5a:
         f3:ea:cd:41:11:a7:c0:88:7a:9f:e3:f4:94:cd:f8:43:34:d0:
         bb:61:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:26 2026 by rpki-client