Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa
File:                     32984439-d873-3743-b2f1-99e76f4c192a.roa (raw, json)
Hash identifier:          tQdX9V+KbLuOxJXKV9bww/cFQl0XpnNMkl/Wmp86Xig=
Subject key identifier:   18:DA:81:DC:3F:A6:20:CB:16:C9:2F:6C:FA:69:54:42:F9:BB:D5:60
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584CE8F77D0FB3551469B9B17980
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     13445
IP address blocks:        199.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7d:0f:b3:55:14:69:b9:b1:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=364c0d42-8a91-43d0-9d35-471a332c7c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:0c:9a:d8:fb:27:46:8b:3e:7d:f2:c8:3f:
                    0f:9b:41:ad:20:62:cc:2d:68:88:c5:f2:ac:db:cc:
                    e7:0b:31:31:1e:45:63:85:28:b3:38:6b:25:88:7b:
                    2f:51:5e:79:9e:2b:36:a0:c0:f6:96:e3:7c:bc:91:
                    8d:50:dd:8c:ee:7c:cd:20:4a:5a:d1:48:35:c9:2b:
                    2d:f0:1f:f1:2a:f5:fa:76:58:83:18:d6:3e:65:c0:
                    03:6b:87:f6:a8:f6:2d:26:59:d1:c3:bf:88:64:d4:
                    fd:1a:43:de:99:ed:16:f1:b4:3b:c5:a9:aa:88:11:
                    a9:c2:08:dc:6e:99:aa:9a:2c:39:0f:0b:8e:c3:64:
                    f8:7a:0e:8b:e4:48:b7:50:35:7c:15:04:b9:f7:a1:
                    94:6e:78:39:05:9f:ad:37:31:63:20:18:33:64:b7:
                    df:35:3b:17:93:00:8a:53:74:98:62:2f:0c:48:a5:
                    f2:90:6b:f9:92:24:75:dd:27:6f:3c:4b:c7:78:07:
                    46:dd:f0:ab:f3:9b:44:95:5f:ea:39:9e:d6:0b:04:
                    5a:5e:f3:61:3d:30:c6:dd:cc:d4:35:67:5d:36:a9:
                    5c:ca:5b:4a:fe:1a:ea:ec:ea:8a:bd:1d:09:98:10:
                    ce:27:c7:04:24:34:57:af:13:90:23:04:23:a5:36:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DA:81:DC:3F:A6:20:CB:16:C9:2F:6C:FA:69:54:42:F9:BB:D5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/32984439-d873-3743-b2f1-99e76f4c192a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:d7:89:a9:b4:bd:58:85:1d:7c:dd:09:18:de:c3:8d:9f:
         60:56:4b:78:7a:dd:39:91:16:19:e1:3d:90:41:bc:ca:59:ae:
         04:50:b2:3e:72:2a:4e:f8:91:d1:c9:8e:1b:38:61:b0:a6:6b:
         14:2e:40:cd:6d:85:7a:39:c8:fd:25:5b:2f:e2:8a:ca:3a:3b:
         56:10:9d:b9:24:02:98:d4:70:f2:90:2c:6e:d7:3c:18:a4:1f:
         b7:d7:3e:2b:6b:36:42:1f:5d:6a:8c:f7:87:e8:ee:62:45:dc:
         00:f9:f5:8d:62:b8:d2:ea:df:4a:b2:24:9c:e0:2d:c9:d1:45:
         79:ac:32:58:0e:f1:ca:3d:17:26:65:a3:70:61:eb:70:55:46:
         19:0a:1d:3d:0a:70:2f:2d:68:b6:d9:e9:ed:78:35:1f:f0:33:
         86:70:1a:7d:6b:3c:8f:50:0c:95:06:73:5d:2e:11:14:d0:9e:
         c5:eb:e4:94:6a:87:49:fd:54:38:3f:85:78:a7:4f:f7:8e:b2:
         7f:c2:2d:fb:0f:68:88:58:70:e3:45:83:0f:1c:e8:f2:57:91:
         65:39:ec:16:c5:7e:b4:02:34:ed:d6:dd:5a:13:e9:7b:7d:87:
         e9:88:b7:59:05:69:15:c3:0b:79:ff:30:66:a1:dc:28:c5:37:
         30:16:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 16:58:25 2026 by rpki-client