Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/84494c17-65d6-30e6-9183-765dfee9f3df.roa
File:                     84494c17-65d6-30e6-9183-765dfee9f3df.roa (raw, json)
Hash identifier:          25x8/jZpq2NSRS6d7SvdI/aEME2bs0djIlDIbOHzfAg=
Subject key identifier:   66:C6:B9:5B:77:F1:99:6A:24:20:2F:A5:33:E7:93:9B:1F:B3:D8:D8
Certificate issuer:       /CN=339ec033-73b6-4268-bb2b-7188aedd736e
Certificate serial:       010D0C9F4328584D59EA5CFB2BDF21E6BD9DE880
Authority key identifier: 13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/84494c17-65d6-30e6-9183-765dfee9f3df.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        199.242.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:5c:fb:2b:df:21:e6:bd:9d:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339ec033-73b6-4268-bb2b-7188aedd736e
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=03f251ab-b1f3-4e52-84a4-dcca066373ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:54:8a:73:67:ab:51:1b:ac:49:78:78:1d:
                    8e:b5:7a:68:61:8f:98:c8:ae:d6:46:58:20:47:e0:
                    cb:8f:85:09:e0:8a:25:76:17:2a:7c:26:89:24:c4:
                    7c:63:6b:72:1b:19:3b:a3:93:3c:c7:1e:ab:ba:a3:
                    c0:8c:98:4f:16:f9:b0:2a:90:d0:a3:3e:cc:87:50:
                    d5:3b:8d:0f:ff:ad:40:e4:6c:f8:5e:16:e4:40:d1:
                    d7:53:c0:cb:00:c0:92:05:2c:44:ef:5a:f5:a1:72:
                    98:49:27:50:ba:bb:96:c7:a3:23:18:09:55:4b:4a:
                    d8:b1:ae:ac:d4:06:cf:e8:43:0b:77:c5:89:a3:8d:
                    af:ca:d6:ee:aa:b5:bf:0f:20:16:72:1a:f6:ff:13:
                    d0:50:e7:84:1e:3a:19:42:59:8c:0e:e7:5e:c0:45:
                    fe:96:46:6b:10:2d:6c:71:61:cc:d1:b8:c6:2b:28:
                    76:55:d6:17:d9:f7:3b:8d:6d:b1:ab:ff:a3:56:b6:
                    b6:c2:28:68:42:d0:fe:b3:36:86:fd:ed:2e:2a:94:
                    58:cd:bd:4a:35:47:79:75:57:de:e5:aa:bc:ae:18:
                    b3:08:62:ca:d5:d7:56:e1:e7:77:5a:45:30:20:05:
                    c3:27:09:ed:0c:d3:15:1b:ea:49:79:3e:1a:39:87:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:B9:5B:77:F1:99:6A:24:20:2F:A5:33:E7:93:9B:1F:B3:D8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/84494c17-65d6-30e6-9183-765dfee9f3df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e/339ec033-73b6-4268-bb2b-7188aedd736e.crl

            X509v3 Authority Key Identifier:
                keyid:13:76:18:63:11:24:3C:AA:F8:93:71:BA:B5:02:D7:25:E5:D0:A4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/339ec033-73b6-4268-bb2b-7188aedd736e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:47:0b:e0:52:21:e1:40:2b:eb:bb:05:69:df:a6:69:d4:
         5b:37:d9:53:78:e2:d2:27:f9:b8:72:61:f6:7a:13:c7:f5:2f:
         ff:bb:f4:66:b1:24:93:44:33:08:49:82:e0:8f:c4:1d:b1:af:
         d0:82:65:49:d1:69:ec:74:6d:85:6b:b5:b4:c8:1d:60:75:4b:
         7c:5b:78:84:4e:2e:38:24:2c:d3:26:c9:2e:78:3b:46:68:6b:
         95:c6:15:1e:34:e8:0b:cd:79:1b:26:cb:5e:3e:ce:f1:79:f6:
         b1:08:12:fa:87:58:f9:42:d8:a3:52:60:47:72:08:27:ba:d5:
         63:67:96:e8:dd:68:f0:74:d3:e5:99:dc:2d:1c:21:d3:25:f3:
         4b:12:ff:6c:4b:57:65:9c:ed:30:c8:29:80:68:be:a8:f8:81:
         2c:82:81:16:4f:dd:f8:80:33:f1:7f:8a:5d:00:5b:cd:a8:c9:
         54:c3:90:c3:1f:97:ea:a1:c5:a5:31:69:1b:c4:d8:63:0e:87:
         c7:24:17:56:4f:27:18:84:56:18:06:04:19:44:52:cb:a1:4a:
         23:98:86:3e:84:19:29:46:f1:3c:3b:ae:64:13:13:a3:bc:46:
         c9:48:30:af:3f:3c:20:52:25:a4:82:91:30:44:be:84:42:e3:
         2b:59:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:32:31 2026 by rpki-client