Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/cc488f40-0a71-32b3-8c94-5b5f4f829d07.roa
File:                     cc488f40-0a71-32b3-8c94-5b5f4f829d07.roa (raw, json)
Hash identifier:          qTy4DDYUhKw2q5F1D/4l53YTjE9+ITLujxCpZX/CEgU=
Subject key identifier:   8E:2D:63:5F:AF:EB:95:EF:C8:20:09:58:5E:33:4F:E1:9E:B3:6D:DC
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584EA44510D1F1B959B110028C00
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/cc488f40-0a71-32b3-8c94-5b5f4f829d07.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     15296
IP address blocks:        199.216.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:10:d1:f1:b9:59:b1:10:02:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=5632c270-446d-4aa9-919b-2b017b284f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:00:e4:4e:1a:f1:25:d3:06:24:10:1c:db:
                    d0:db:0c:5a:0b:a5:b4:29:b1:ea:d9:00:42:43:c2:
                    95:c7:d5:b8:d9:f5:e9:e5:82:02:88:3e:eb:fe:98:
                    50:16:d1:2c:5e:ef:3a:0a:46:c4:73:d4:ba:82:6d:
                    f4:12:46:6f:51:89:fa:d7:a5:ab:da:86:5a:6f:7a:
                    02:52:00:af:d9:e2:5c:62:ac:b1:e2:89:94:7e:bb:
                    28:b7:98:83:81:b6:c9:77:18:f9:34:d2:ab:88:71:
                    89:c7:6a:c3:8a:bb:fd:f7:9c:38:52:b7:ac:fb:20:
                    5e:11:f5:d9:d6:7b:87:01:fb:32:07:26:f2:ab:22:
                    6d:82:98:97:0e:2c:ba:3d:25:ca:e4:cb:50:77:0a:
                    8a:2a:54:f0:df:05:4e:09:44:87:97:81:f9:2e:59:
                    8e:4f:d2:e4:43:33:0c:70:59:ac:e0:41:82:6b:c0:
                    cf:a1:c7:f3:0d:67:23:1f:0b:40:71:09:b9:f0:42:
                    9c:ed:b2:0b:ff:ce:d6:91:b4:ba:f5:e2:2c:d6:be:
                    26:fd:e6:fd:8c:08:2e:fc:55:8f:75:82:c2:6b:1b:
                    3c:8b:04:44:4c:0e:c0:ad:b4:48:cf:14:e3:e6:61:
                    8f:18:db:89:0d:72:78:7b:3c:59:dc:3d:2d:5a:c7:
                    74:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2D:63:5F:AF:EB:95:EF:C8:20:09:58:5E:33:4F:E1:9E:B3:6D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/cc488f40-0a71-32b3-8c94-5b5f4f829d07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:99:ce:96:f4:e4:a0:31:cd:9d:4c:15:cf:08:e2:b2:a7:d3:
         e6:5f:4a:5d:c8:b0:82:d8:7c:25:34:03:a6:34:20:00:b7:d8:
         8a:2f:93:1d:8c:2b:e4:4e:98:95:59:65:1e:b6:56:7b:6c:d3:
         1a:e1:8d:ea:3e:f0:ff:3a:d3:a0:0f:84:cb:03:cd:9d:24:61:
         c1:2c:73:e9:bc:24:31:f3:73:81:26:98:96:b5:fa:78:0f:76:
         eb:74:b3:34:dd:67:7c:a7:c2:21:00:fc:55:dd:27:68:26:6e:
         a1:a1:49:2a:e1:05:20:b7:f9:41:be:87:cf:22:bc:71:c3:51:
         19:32:b2:31:fe:ad:3c:b6:ab:fe:2c:cb:33:4f:05:df:ba:bc:
         b5:6f:78:76:79:cd:94:64:12:bb:cb:a2:4b:e2:05:a6:80:17:
         8a:5c:d2:f6:28:d9:b9:03:87:52:33:2e:05:0c:8b:17:8e:b6:
         9b:db:ce:3b:c3:a4:00:4a:00:af:46:66:ae:79:49:53:d3:4d:
         a6:e2:10:17:bc:6e:0d:5d:ed:5b:a9:c9:b1:ba:63:9d:6c:d7:
         39:0d:3a:5a:b0:89:e3:5f:f2:e6:c0:64:57:5f:60:a1:a2:ef:
         af:84:d0:76:d6:a1:65:dc:94:92:61:66:63:21:40:af:2f:85:
         f1:62:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:30 2026 by rpki-client