Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
File:                     3ccb2ccd-6776-345a-bf6d-3805674a638a.roa (raw, json)
Hash identifier:          OitsbhdCRtVW0/mqwHTWFggKIpZaGUde7UwbJvFTo/s=
Subject key identifier:   3A:86:C6:A9:2E:2A:B1:EE:CE:76:24:30:14:AC:5D:03:8B:10:B1:57
Certificate issuer:       /CN=61b23514-b37d-4216-9f76-1988ace05318
Certificate serial:       010D0C9F4328584F576800CF05E8E5594D5ADD00
Authority key identifier: 46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     32329
IP address blocks:        199.4.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:00:cf:05:e8:e5:59:4d:5a:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b23514-b37d-4216-9f76-1988ace05318
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=fcf2a2d0-cbf6-41b4-a0df-b77f5659d319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:83:06:80:f3:f0:f8:6f:36:b8:28:87:f2:
                    15:3e:f9:16:7d:dd:d6:1a:7f:e4:4d:af:13:14:b3:
                    88:e8:63:d7:a0:71:5e:35:20:dd:25:88:fa:d6:31:
                    f8:67:64:f0:10:c7:87:6f:06:59:d6:24:df:8e:e0:
                    6b:4c:c9:43:29:cb:de:8e:68:1e:82:7c:b1:2d:c0:
                    75:8c:be:b9:e6:b6:6e:fa:5a:35:b1:b5:18:0a:92:
                    94:f9:46:ad:1e:9b:81:cb:45:72:8d:6e:4d:ed:ef:
                    49:99:ac:26:55:00:0a:d5:ec:50:1a:4d:b4:00:f2:
                    da:ec:e2:21:d5:8f:64:73:35:1b:16:2f:8c:80:05:
                    fd:1e:20:f2:3b:1c:0b:47:24:9c:0d:7e:09:45:e8:
                    da:d6:68:b9:b2:25:98:ac:65:4c:26:9f:09:09:03:
                    25:b5:93:04:22:6a:72:57:f6:65:f1:db:78:a9:82:
                    4a:f3:a9:8e:5c:27:19:db:2f:58:f8:97:54:3f:0f:
                    47:1e:fc:c8:5e:62:d8:95:33:8e:0e:ea:19:f4:a2:
                    2d:f3:4b:75:68:cd:31:93:df:82:7c:11:34:09:ab:
                    80:48:e5:f3:91:5b:72:24:b0:b5:5d:f6:b2:6b:ce:
                    e3:5e:3b:a5:c1:cd:53:88:94:23:48:99:de:f7:14:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:C6:A9:2E:2A:B1:EE:CE:76:24:30:14:AC:5D:03:8B:10:B1:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/3ccb2ccd-6776-345a-bf6d-3805674a638a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.crl

            X509v3 Authority Key Identifier:
                keyid:46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:87:dc:d5:1c:60:de:45:a3:a7:6b:9b:e2:3a:e0:28:fe:c7:
         51:6a:51:e1:88:25:2a:05:e6:41:a6:36:89:30:f1:d6:65:d3:
         1e:54:71:90:2a:1f:76:3b:b5:0b:f4:e3:94:ed:f4:fc:28:a3:
         8d:13:1e:35:41:3c:dd:86:cc:8d:c6:4f:80:bf:59:86:88:18:
         5c:63:1c:49:a3:7a:a8:35:5f:c6:54:65:e0:bd:a1:5b:72:08:
         d8:82:7d:f7:9b:73:4f:f1:dd:e2:9b:d0:c9:84:51:98:39:53:
         62:9a:63:24:fe:0d:3e:27:44:b9:9f:7c:8a:b6:2f:e0:60:32:
         d9:6f:d9:11:fd:15:58:b2:fb:62:03:99:81:39:b4:49:87:e7:
         09:23:db:f3:d2:63:1e:c6:b9:86:69:8f:9c:a9:f9:ef:d1:3a:
         2e:11:61:26:ba:2e:14:44:59:9d:61:0f:91:7a:2a:4c:ce:d3:
         07:23:10:da:02:85:00:6d:4d:0a:5a:db:f9:ea:54:b3:28:73:
         92:bf:d5:1e:3f:55:ee:b4:0f:43:16:80:91:a3:d6:b9:4f:f6:
         04:67:65:62:b9:26:a5:f2:2f:46:89:ce:bd:27:59:98:5e:ff:
         8a:41:64:96:10:41:24:33:eb:35:78:69:12:67:fb:a2:20:4e:
         52:4f:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:46:37 2026 by rpki-client