Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/279657d8-5dfb-3df5-8eaa-42a19f573b14.roa
File:                     279657d8-5dfb-3df5-8eaa-42a19f573b14.roa (raw, json)
Hash identifier:          +3YvZ0q0L9lgRpx8uSJNCosmwRAFb204SBl8RfC0Tbg=
Subject key identifier:   A9:A5:DD:09:73:06:9B:02:8B:F8:3B:AD:BE:97:AD:01:17:E5:CC:10
Certificate issuer:       /CN=a4c37a54-53a7-4980-be55-6af24c04c176
Certificate serial:       010D0C9F4328584CF58786998CAF1A4D604B0A00
Authority key identifier: F7:10:32:22:F0:1B:08:D5:57:3B:08:B7:CA:A7:B8:8C:47:38:88:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/279657d8-5dfb-3df5-8eaa-42a19f573b14.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     62917
IP address blocks:        199.87.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:86:99:8c:af:1a:4d:60:4b:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c37a54-53a7-4980-be55-6af24c04c176
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=6372220e-abb7-450a-99fb-5d75d7808f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:6c:0e:41:75:36:f0:0d:98:b4:53:2c:92:
                    81:a7:45:a9:f7:a9:57:1b:1f:73:42:5e:34:df:5c:
                    fe:cf:03:c7:51:bf:82:8d:e3:63:ad:97:0f:eb:e2:
                    5c:11:2f:5b:69:0b:43:b2:f4:16:86:d3:e5:f1:a9:
                    fb:26:ab:13:70:54:e6:59:77:f4:a5:eb:ba:07:13:
                    1d:70:6f:50:89:72:92:13:04:73:2c:c4:50:20:85:
                    b7:1d:b9:a1:9f:77:89:0c:f7:3f:18:66:6c:37:01:
                    44:77:1b:47:9b:31:6c:e2:8c:11:ee:de:fe:87:c8:
                    8d:51:7f:e0:e7:22:c5:0d:13:69:a6:4b:6a:84:5a:
                    2f:3f:38:d0:8c:e1:0e:c0:a4:e8:a3:dc:4c:c4:75:
                    1c:95:d0:0a:c8:3c:3e:79:7e:e9:21:1a:c1:6f:dc:
                    be:ea:e1:0a:a4:fd:97:d3:58:95:b5:8e:7a:0e:8a:
                    0d:6e:1b:05:89:30:f0:2b:19:ca:80:d5:56:d6:54:
                    2e:9e:25:3c:ce:07:e9:dd:37:5e:be:ca:0a:85:cf:
                    9d:60:8a:bf:af:0d:93:a4:c7:a5:69:f4:8d:8a:f3:
                    60:c1:7f:75:f2:51:39:35:4b:e4:71:60:7e:3a:c0:
                    9f:13:5f:dd:58:97:f4:ab:8a:4b:5e:07:cb:37:12:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A5:DD:09:73:06:9B:02:8B:F8:3B:AD:BE:97:AD:01:17:E5:CC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/279657d8-5dfb-3df5-8eaa-42a19f573b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176/a4c37a54-53a7-4980-be55-6af24c04c176.crl

            X509v3 Authority Key Identifier:
                keyid:F7:10:32:22:F0:1B:08:D5:57:3B:08:B7:CA:A7:B8:8C:47:38:88:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4c37a54-53a7-4980-be55-6af24c04c176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:ca:9d:ac:c2:25:ec:28:05:42:89:6e:64:ff:1f:ad:01:
         b0:35:3f:8b:3c:fe:80:ba:fe:f7:d2:11:dd:a9:6b:be:47:b1:
         4c:f1:0e:71:cf:01:61:17:c1:8f:75:d3:9d:17:5b:09:92:d7:
         8e:00:35:53:82:94:84:f4:c8:af:13:ac:40:5d:40:6f:88:43:
         38:f9:99:b7:2f:87:60:04:85:2d:dd:5e:ec:7a:12:cd:eb:6d:
         44:01:e2:03:b5:7f:96:38:bd:84:d7:29:05:91:30:b0:e7:be:
         3f:a0:d3:3f:73:90:09:fa:24:60:90:08:62:d2:4c:a9:a0:89:
         7a:ce:e0:d2:77:88:06:0b:f2:69:9f:ae:9d:c5:bb:89:b9:38:
         3d:21:ef:01:3f:dd:03:1f:f7:b1:ee:6f:26:91:b2:2b:17:ba:
         70:c6:97:7c:e3:ce:15:24:b0:71:ed:3e:0b:e4:3e:45:a6:04:
         9b:98:7c:ff:a2:55:c6:a7:33:94:7e:16:5b:46:1d:1c:fd:ba:
         00:68:ea:3a:be:e3:14:b3:3a:c2:25:59:d0:73:bf:81:0d:9e:
         cc:90:fd:c4:83:b9:84:56:fe:e3:44:46:74:66:96:15:64:d6:
         74:6d:84:68:c3:1e:ca:ed:c2:5a:57:97:3e:32:6c:12:80:b7:
         d4:26:4a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:55:13 2026 by rpki-client