Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30284209-6757-30e4-a50f-91075b125464.roa
File:                     30284209-6757-30e4-a50f-91075b125464.roa (raw, json)
Hash identifier:          xdH3pOvlYIojWlarsPhN60NeZExYrTGR5R6B5+XVlUA=
Subject key identifier:   F0:1B:81:FB:7E:1C:FF:79:7F:AB:07:AE:A4:9A:2F:19:71:E4:70:7E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4233F03CAE86BB336D73E7E
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30284209-6757-30e4-a50f-91075b125464.roa
Signing time:             Wed 19 Aug 2026 18:03:50 +0000
ROA not before:           Wed 19 Aug 2026 18:03:50 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        199.184.212.0/24 maxlen: 24
                          199.184.226.0/24 maxlen: 24
                          199.201.197.0/24 maxlen: 24
                          199.245.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3f:03:ca:e8:6b:b3:36:d7:3e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:50 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=cee73fcb-c72b-45db-86b6-880dbf85a166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:0c:24:90:14:25:ae:62:91:65:78:85:33:
                    3b:6c:78:0e:ee:e8:f2:2b:48:8e:20:06:b6:75:31:
                    c8:13:9e:82:8f:8a:9f:a4:f9:b0:28:ab:28:c0:d7:
                    f5:19:7f:c4:89:d2:40:9d:90:5b:94:3e:e7:93:6a:
                    89:3d:02:13:83:08:bc:8d:c0:dd:16:9b:93:61:4a:
                    f2:6e:c3:95:96:54:7f:4e:9a:1e:bd:8d:49:ae:27:
                    ef:30:9d:87:55:4c:fa:1c:61:e7:1f:f7:0e:14:d4:
                    a8:9b:2d:77:36:2e:f4:3d:63:89:29:02:a2:73:4f:
                    ff:78:a7:8b:89:d3:9c:20:d3:0e:e5:f0:8a:fe:c3:
                    3a:ca:ee:91:b2:db:c3:84:f7:58:00:1d:a8:70:dd:
                    d0:6f:cb:a8:0b:0d:38:ee:d1:b1:9e:63:57:ef:d4:
                    2c:2d:f4:a5:77:80:c0:44:fe:a4:b4:55:66:26:35:
                    60:31:29:73:6f:98:d6:3c:9b:fa:01:98:bc:da:95:
                    9b:4d:a7:c9:33:10:a3:a4:5c:d4:d9:d1:d6:7d:05:
                    47:9e:df:e9:68:68:9d:76:a5:f0:80:7f:95:f4:69:
                    01:a5:f2:a3:6e:eb:4d:e1:c8:10:7e:c1:f5:fe:ce:
                    b8:cf:ee:a0:d1:cb:fe:1d:72:4f:d8:d6:25:b5:98:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1B:81:FB:7E:1C:FF:79:7F:AB:07:AE:A4:9A:2F:19:71:E4:70:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30284209-6757-30e4-a50f-91075b125464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.212.0/24
                  199.184.226.0/24
                  199.201.197.0/24
                  199.245.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:50:70:ee:4f:39:1d:d6:4e:29:d1:8a:44:d3:bd:f8:84:9f:
         9a:da:94:bf:d7:25:79:3a:53:25:91:e9:b4:41:90:9f:0a:97:
         3f:21:78:dd:1d:89:2d:c1:b7:9d:68:3f:26:de:e7:7e:aa:a3:
         51:01:69:31:b5:52:a6:29:4f:52:bc:9a:6a:3e:24:45:16:98:
         e0:53:7b:4a:53:cd:8b:13:e7:1f:12:5e:59:7a:76:84:2c:5a:
         82:a6:17:9b:8e:b1:9d:30:02:cc:4d:4d:d1:6c:ff:9a:cf:8f:
         2a:a7:ed:4c:47:15:5f:d0:d7:cf:12:bc:f3:9f:cd:90:67:91:
         1d:cf:a1:95:17:53:fc:29:20:23:d4:89:e4:98:de:bf:43:5f:
         01:e4:76:dd:2b:67:a7:52:7f:36:4a:f7:89:f3:11:be:90:7f:
         7b:92:4a:5e:cf:63:06:b1:4f:4d:81:93:a5:5a:e4:87:88:d8:
         07:16:8e:16:60:8b:6e:01:3c:d5:9c:f8:e5:61:1b:8d:0c:35:
         e6:20:a0:80:43:95:25:a5:0a:00:49:15:cb:d0:79:47:be:93:
         4a:ca:65:d2:3c:d8:79:1b:41:66:49:84:16:1a:d2:ee:dc:52:
         79:5a:d0:32:bf:da:60:e5:99:7e:1e:d0:ad:13:ca:99:09:56:
         43:d9:11:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:52:05 2026 by rpki-client