Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/19f169ac-4d44-31d4-9e68-73ac833a5b93.roa
File:                     19f169ac-4d44-31d4-9e68-73ac833a5b93.roa (raw, json)
Hash identifier:          cTtlMwDGMrDHKPiYmrCKdxA3LtAfzY5fnohspUxPk/Y=
Subject key identifier:   F9:B9:EE:94:79:02:EB:39:B6:6A:36:A3:9E:E8:93:BE:DC:6C:A7:EF
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584CB0D9247CE8D0717E06FFCF20
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/19f169ac-4d44-31d4-9e68-73ac833a5b93.roa
Signing time:             Thu 29 Jan 2026 23:34:25 +0000
ROA not before:           Thu 29 Jan 2026 23:34:25 +0000
ROA not after:            Wed 29 Apr 2026 22:34:25 +0000
asID:                     15296
IP address blocks:        199.216.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:d9:24:7c:e8:d0:71:7e:06:ff:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jan 29 23:34:25 2026 GMT
            Not After : Apr 29 22:34:25 2026 GMT
        Subject: CN=976d9e1e-4d81-46aa-aeec-3e7265fc9f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:a4:1f:6b:cf:73:dd:16:5c:a2:4d:5a:7f:
                    b4:f4:74:d9:fb:5f:14:b5:33:27:92:47:23:52:c0:
                    6e:0d:0d:4d:2f:48:fe:3e:eb:3c:26:ca:ca:d6:fd:
                    09:83:d4:a3:18:17:80:22:ed:a9:17:f2:11:e3:d3:
                    de:b0:0f:f1:be:f8:38:11:8c:c5:95:65:bc:38:a3:
                    b4:26:5d:33:33:f4:fe:17:33:a6:e2:6d:91:da:cf:
                    bf:ca:ca:ed:c0:ff:f2:78:66:a6:bb:0f:65:33:5c:
                    27:a6:a2:bb:85:bd:69:46:ea:6f:da:98:c7:04:6e:
                    16:1a:a8:1d:62:e8:24:4f:29:d9:46:51:6b:7a:96:
                    98:ca:65:f9:e2:23:80:00:21:eb:9e:b7:b2:4c:5c:
                    bf:dc:57:c1:78:44:df:16:3a:9a:4a:da:c5:f6:97:
                    b1:c5:22:01:9d:51:71:e5:2b:88:7a:cb:3c:49:47:
                    6e:fd:b9:b6:4a:7a:a3:ec:73:2c:c9:61:67:36:6d:
                    29:53:31:46:2a:e9:a8:55:53:30:82:a9:79:49:8f:
                    1b:86:4b:ea:ef:2b:cf:d9:ab:cc:82:5f:43:83:e5:
                    fd:2a:a0:0f:e2:33:4a:44:03:31:c7:9b:f5:6c:f3:
                    37:5f:b5:4b:9e:17:bb:c3:d8:d5:d2:d3:80:d1:17:
                    d5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:EE:94:79:02:EB:39:B6:6A:36:A3:9E:E8:93:BE:DC:6C:A7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/19f169ac-4d44-31d4-9e68-73ac833a5b93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:1d:71:59:2a:9e:bc:3c:7b:d5:12:27:bb:57:d0:b0:72:
         6c:dd:62:48:ea:c6:14:75:90:b2:72:42:f9:ef:69:46:3d:0b:
         cb:83:00:7c:c4:15:ae:1b:b7:2f:dc:c8:bd:ed:7a:e0:c4:91:
         4c:ff:f5:c2:df:61:3c:03:c1:a7:6d:9e:18:51:9b:79:ec:e6:
         1a:a6:3c:81:66:e4:69:e2:9e:21:67:0c:b5:d1:1c:fd:a6:9a:
         b6:9e:92:c1:ee:b1:b0:4e:44:6d:99:0c:a6:26:8b:3c:aa:c9:
         17:99:41:6b:af:46:f0:ec:33:78:45:a4:97:aa:a0:b8:71:90:
         31:fd:1d:32:a6:69:48:ac:9d:43:c5:07:10:7e:b8:e4:70:90:
         c4:e4:ca:fd:55:2e:41:4c:83:7e:1e:71:27:1b:1f:78:ad:36:
         9f:18:f9:55:3f:c5:4f:05:e5:63:e7:d3:4d:42:3d:d9:19:30:
         d1:36:1a:57:6f:6c:45:c4:dc:a8:3b:0b:87:80:41:ea:98:62:
         10:ff:eb:af:7d:6d:90:25:0d:d9:68:5d:9f:dc:9f:a2:72:e0:
         cd:e0:d0:9d:b0:81:b7:a1:3c:bc:a7:10:73:89:c2:6b:af:9c:
         1e:e5:7f:37:e1:18:9e:a7:4c:5a:aa:90:e0:ec:93:45:13:48:
         a8:37:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:56 2026 by rpki-client