Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa
File:                     0ce0c169-ef1f-32ec-967d-086703bd7584.roa (raw, json)
Hash identifier:          AmGC0bED4c5SGdFhlVSGFJiMoZQDnFzuWGu1I3nBcUE=
Subject key identifier:   F9:3D:71:3A:D6:F9:87:68:B6:D9:A7:13:79:B4:5F:16:24:D8:4A:96
Certificate issuer:       /CN=e35c7007-7a33-480f-a32e-40481f8f1792
Certificate serial:       010D0C9F4328584E253EF97F52CC0252D43F56A0
Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     204631
IP address blocks:        199.47.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:f9:7f:52:cc:02:52:d4:3f:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=8079f6ff-e9b8-4e8f-8961-4403d1418620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:16:11:ef:78:e1:43:f9:ff:31:72:33:01:
                    41:d8:3c:94:da:b3:b3:b0:d5:9f:22:8f:de:2c:e4:
                    17:c7:1b:95:ec:24:4f:bc:2e:e5:c3:d2:e0:1c:4e:
                    cd:4e:3e:7a:0a:00:ec:d1:05:de:a8:12:c7:b0:93:
                    02:6f:7a:18:ad:af:99:75:63:9b:6d:3f:72:45:4f:
                    db:dd:7c:57:c2:3a:6f:16:3b:6d:58:a0:48:6f:04:
                    10:26:77:57:35:65:22:81:f2:f6:a3:73:f0:db:68:
                    2a:b1:4b:43:17:5d:44:21:01:e9:30:83:49:3e:71:
                    53:b2:b5:1b:4b:e3:60:ed:72:a7:1e:3b:51:64:9f:
                    6d:89:ce:7a:a0:80:a5:af:68:29:73:63:01:c2:5c:
                    dc:de:65:90:7f:62:f3:ec:30:a2:cb:ba:c5:df:04:
                    77:53:42:33:ba:00:25:15:b8:c9:17:92:3a:ad:6f:
                    00:76:33:30:d1:48:3b:e1:0f:61:38:32:d0:13:b0:
                    0d:c3:62:92:dd:a4:02:62:1c:5f:2a:e0:02:8d:6e:
                    81:d3:0e:67:e4:c7:47:33:a7:52:d2:6d:a1:28:d7:
                    3c:b3:a7:ee:4c:8f:d6:d7:0e:41:e4:c1:ec:e0:2d:
                    40:ca:e5:d2:cf:6e:2f:23:81:b7:c0:ca:a7:f7:4d:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:71:3A:D6:F9:87:68:B6:D9:A7:13:79:B4:5F:16:24:D8:4A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/0ce0c169-ef1f-32ec-967d-086703bd7584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl

            X509v3 Authority Key Identifier:
                keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2d:9c:da:79:7d:19:e9:b4:cf:7c:16:af:3e:a5:d3:13:09:
         33:b6:6f:ca:21:06:7b:30:a6:11:85:e7:a7:96:07:e4:7b:ae:
         c5:0d:97:0d:e8:8d:d0:b1:ce:31:91:7f:5c:f3:c1:0f:c3:d1:
         98:9e:77:57:85:19:6a:73:16:0d:e4:f4:c3:2d:5a:b7:53:54:
         ef:68:e0:b7:4a:05:4e:7b:7e:f7:d8:23:bd:69:8f:33:b3:ee:
         a9:ba:68:96:91:b2:3a:12:71:db:ac:41:26:cb:1e:30:54:dd:
         38:b0:78:74:ab:77:63:dc:58:d6:33:d5:f2:0c:e4:bc:ec:31:
         3a:02:d0:bd:c7:8f:df:87:0b:a5:dd:e7:84:3c:02:ae:15:f8:
         19:65:5a:89:ad:40:4b:33:6d:69:0d:d0:19:cb:5d:58:dc:25:
         9d:bd:25:18:fd:fa:e7:b9:12:76:18:22:a7:b6:b2:d3:d8:9a:
         1c:c7:c2:85:a2:14:29:a0:85:95:e1:54:e8:d0:86:b8:b8:1c:
         f8:d6:a8:9d:24:0f:85:90:c7:2b:52:f1:46:43:e8:76:60:06:
         a9:bb:e3:6f:3d:74:27:61:a1:2d:26:42:dd:39:11:f1:74:57:
         b5:c7:97:41:fe:b3:89:eb:16:9e:f1:62:9c:1e:a3:07:f0:a7:
         6a:7d:f3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:13 2026 by rpki-client