Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b61a3993-a7b5-3c0e-b24b-d85b280bb07e.roa
File:                     b61a3993-a7b5-3c0e-b24b-d85b280bb07e.roa (raw, json)
Hash identifier:          a/pTfYlZlgAXPHVjz2F78oD253klTHhPtkQpNcD/rkE=
Subject key identifier:   F1:7D:C8:58:75:2F:71:95:79:0A:B2:06:B3:1F:26:36:A0:60:85:32
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584CB0DEAF3462D5DBFC36D8A4C0
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b61a3993-a7b5-3c0e-b24b-d85b280bb07e.roa
Signing time:             Thu 29 Jan 2026 23:45:35 +0000
ROA not before:           Thu 29 Jan 2026 23:45:35 +0000
ROA not after:            Wed 29 Apr 2026 22:45:35 +0000
asID:                     15296
IP address blocks:        199.216.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:de:af:34:62:d5:db:fc:36:d8:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jan 29 23:45:35 2026 GMT
            Not After : Apr 29 22:45:35 2026 GMT
        Subject: CN=6d507015-4baa-4ed6-b9a2-acf06b3f644e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:85:25:a4:18:c7:48:49:57:d3:2a:aa:49:
                    2e:bb:14:11:55:81:01:28:2d:3d:db:93:cc:dc:a9:
                    7f:4d:86:d8:fe:d7:a7:d8:4a:e5:fd:df:64:d6:58:
                    97:9f:aa:55:0c:4a:d4:12:ea:86:d1:0d:c9:af:e0:
                    95:52:78:7e:6f:52:b3:4f:3e:53:93:c0:0d:53:3e:
                    a7:42:29:57:b0:c5:9d:35:37:d8:ed:6c:d6:e0:75:
                    31:76:af:a5:e7:c8:b3:fa:ab:f3:77:b9:ca:bd:81:
                    dc:b6:6b:39:72:17:04:e2:ca:69:98:2c:3b:50:8f:
                    74:9b:b2:60:87:2e:55:96:df:f5:a8:90:19:1d:e1:
                    f2:f7:e3:08:6e:52:af:ec:e8:0c:47:6a:b8:6b:50:
                    8b:c7:97:c2:1f:71:14:3e:34:55:aa:aa:93:43:c8:
                    eb:7a:88:38:33:77:53:ab:f4:6d:a7:3a:67:86:d8:
                    27:a1:fc:53:af:74:79:19:a1:5b:d4:42:81:03:14:
                    3a:bc:31:26:95:37:72:c1:bb:84:49:93:bd:81:5b:
                    60:88:74:7b:f9:d9:34:d3:22:62:69:cc:3e:0a:d5:
                    33:e4:c8:d5:11:68:cb:01:ab:50:43:d1:3b:33:0d:
                    3c:89:ad:08:2e:93:3a:e0:ae:bd:5b:26:08:f3:2b:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:C8:58:75:2F:71:95:79:0A:B2:06:B3:1F:26:36:A0:60:85:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/b61a3993-a7b5-3c0e-b24b-d85b280bb07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:b9:4d:21:29:42:7f:1e:c5:36:6c:c5:4c:88:9a:6e:1a:
         1a:02:b1:c1:5f:d4:b8:d2:90:14:df:c1:2e:fb:7c:58:fb:7a:
         47:98:d7:64:43:75:48:d7:bf:6c:5b:0f:e5:54:ac:37:ff:95:
         d4:dd:e5:15:f5:a5:0d:46:07:5e:4e:e4:f6:58:e9:b3:e3:a9:
         ad:c3:4c:0a:9d:2e:a0:46:57:dd:60:ab:b8:88:c4:0b:5c:51:
         e3:cd:9c:4c:f0:8a:2e:4a:e7:6f:08:1e:99:cc:ec:d3:94:9b:
         c1:f5:4d:64:2c:f2:2f:37:a5:49:a8:a5:aa:87:48:c1:15:fd:
         87:c5:29:5d:a8:26:3f:05:f2:b1:6d:bb:e1:18:5e:10:38:fe:
         a8:5a:b3:e1:9a:5e:e5:ce:73:bf:c5:1f:47:d3:8b:ef:a6:53:
         42:6a:ca:8b:8e:12:c4:fb:61:82:76:a0:36:c7:f7:b5:11:14:
         ef:93:23:87:19:ed:ce:fb:11:ee:bb:d5:8e:0d:e3:e9:99:df:
         56:17:5b:a4:ff:1b:ae:4f:49:ea:d9:d5:b0:bc:9c:9d:7a:59:
         1d:05:68:e6:1a:68:4c:f7:6d:45:9b:d1:c7:42:64:c1:f0:b0:
         72:b6:1b:6f:78:e1:49:ab:4e:66:a2:5d:a6:6f:94:6b:5b:81:
         11:e7:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:42 2026 by rpki-client