Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
File:                     49cb8b45-24ac-3df5-8192-267514fc0835.roa (raw, json)
Hash identifier:          N5Xnuwwdp4Mp3f7BlxrkgLqoobmaIgZT4JJIKcSHfbA=
Subject key identifier:   16:6E:25:EB:2C:7F:BB:D5:A5:9D:32:C8:29:4D:C4:AE:1E:62:7E:80
Certificate issuer:       /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial:       010D0C9F4328584D95F002F97ACF8556F6D57380
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     26677
IP address blocks:        199.212.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:02:f9:7a:cf:85:56:f6:d5:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=741b6b97-111a-482b-aa7f-7cf2d91173f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:00:88:26:37:3f:bc:1a:af:e9:ab:ef:23:
                    d8:c2:7a:2a:f2:68:37:a2:24:b3:d0:69:7a:8b:d4:
                    48:18:ec:83:8f:a0:a9:1d:65:d1:13:6b:fb:a9:74:
                    87:f5:64:4b:ef:0d:ad:0c:7a:5e:bd:96:4d:67:1e:
                    85:dd:68:9f:5d:30:46:7d:36:b9:99:8f:ac:80:39:
                    a3:05:65:6a:67:be:f1:19:73:1b:de:41:e5:e8:b3:
                    7c:3e:22:46:f9:a0:90:88:bd:63:87:34:14:22:58:
                    19:2a:f6:da:ae:b0:5d:41:9b:bf:c7:a2:1e:f6:ee:
                    fc:38:6e:4b:a9:2d:cb:47:fa:66:63:56:36:a0:43:
                    9e:74:c4:dc:24:5b:95:1e:e8:59:86:ac:12:e2:ef:
                    f7:be:2f:b1:3c:7b:4d:fb:97:ec:f8:19:4d:a0:13:
                    8a:de:b2:49:01:94:7c:a7:4f:c2:f2:ad:44:4a:a9:
                    b7:ad:0b:6c:5d:5c:4c:44:96:df:f7:a9:f5:05:81:
                    40:2a:26:cc:d7:2b:18:73:79:43:ad:0b:e0:92:bd:
                    d1:ac:03:c8:8e:49:e4:ba:ff:8d:52:c0:1b:34:46:
                    4a:79:13:21:e1:53:34:28:45:73:39:16:66:9e:f5:
                    98:eb:41:3c:dc:85:60:a7:8e:86:05:49:5c:3c:a7:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:25:EB:2C:7F:BB:D5:A5:9D:32:C8:29:4D:C4:AE:1E:62:7E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/49cb8b45-24ac-3df5-8192-267514fc0835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl

            X509v3 Authority Key Identifier:
                keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:14:50:cb:12:06:2f:ad:d9:f4:4d:fb:3b:e4:7c:aa:24:5a:
         5f:39:2d:c3:f2:df:cd:d1:d3:33:ef:44:b8:fe:b2:ca:27:c6:
         1a:36:fe:77:6b:ee:47:1a:3c:dc:e8:2f:42:2e:2a:98:b9:15:
         bc:d9:00:f3:ca:2a:47:2a:1b:0b:25:23:ea:32:e2:c2:af:41:
         23:2e:60:3e:1b:3c:fc:84:54:98:cf:ce:ba:f0:0c:8f:98:41:
         16:a0:c3:b3:9b:4c:a4:06:1f:9b:e2:5a:12:63:73:0f:58:34:
         b5:b7:c9:19:f8:86:58:24:1c:3c:24:f9:a6:96:b3:bb:5f:e9:
         49:c8:2c:f2:da:09:db:b8:a5:5d:e1:d5:46:24:5b:09:f6:38:
         e9:8d:7a:4f:f9:5b:50:c1:76:8c:ea:b3:7c:18:62:c3:1a:07:
         14:02:33:bc:33:70:40:e9:73:09:96:13:bd:47:6c:ac:03:06:
         65:a1:3f:dd:38:d6:bb:63:80:0f:4c:d3:c9:96:e6:97:3b:64:
         7a:51:1e:3c:eb:6e:aa:a9:b5:63:21:83:ca:88:ad:a0:6b:2d:
         e3:10:57:9f:29:80:12:40:c3:67:2a:91:3c:83:7d:6d:5e:ef:
         bd:de:38:6e:3c:ff:4b:94:3a:1b:8b:70:cb:33:68:b5:c5:d3:
         2d:51:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:55:40 2026 by rpki-client