Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa
File:                     2f1823ea-88a6-3688-8d20-3d497228f9cc.roa (raw, json)
Hash identifier:          JUxYrBE43q4yMsh5E8MraEJGsE5G3mBolEufPhRJfVg=
Subject key identifier:   A6:9D:B5:80:78:B3:BC:BC:7B:FE:DA:E5:FD:42:F3:E9:69:4B:5E:77
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584DD4C073168649D800DD63BB00
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     40342
IP address blocks:        199.47.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:73:16:86:49:d8:00:dd:63:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=c248b995-b69d-475e-b696-7c2851c84b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:e5:a6:49:2f:69:9d:61:0a:b1:18:b5:cb:
                    62:0e:83:c3:87:0a:05:6f:40:b8:f4:57:7b:13:51:
                    38:5e:21:d5:d1:ef:45:2b:51:c1:be:97:d1:77:8a:
                    69:47:d0:a3:77:a3:a6:b3:6b:0c:3f:8c:6e:88:fb:
                    d5:71:1e:85:91:b4:17:b5:f6:89:c2:4e:00:62:b7:
                    ba:c0:e0:80:b3:5c:04:6d:c4:93:03:3a:e7:4b:da:
                    73:b4:82:f1:c2:89:15:d8:27:16:e0:a2:a5:90:c0:
                    18:da:61:c4:00:bc:e1:eb:51:21:92:8e:67:53:20:
                    f6:3c:36:6d:0b:46:57:60:9d:d9:88:73:1c:8a:45:
                    eb:87:b2:a4:76:25:de:c3:a9:7b:33:79:af:39:92:
                    ce:a7:23:88:e3:99:54:8e:31:01:01:8e:f3:4d:84:
                    67:bb:2f:b6:33:ec:50:c7:32:25:29:b4:5d:6c:0a:
                    ae:e1:71:c4:33:8a:8e:4a:8f:59:0e:85:f6:c3:da:
                    2d:5b:34:48:92:75:67:30:9f:66:48:0d:2c:e6:bf:
                    86:ea:7e:a1:fd:ec:9d:47:4b:b2:f3:40:05:79:11:
                    20:53:2a:05:e3:e1:01:c4:37:27:67:89:a6:14:fd:
                    ec:de:05:e2:ef:8c:f8:00:42:72:8b:ac:3e:4e:db:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9D:B5:80:78:B3:BC:BC:7B:FE:DA:E5:FD:42:F3:E9:69:4B:5E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/2f1823ea-88a6-3688-8d20-3d497228f9cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:e9:b5:67:32:0a:79:c4:5a:8e:ab:44:49:02:3d:78:4b:
         5b:ba:2d:65:27:9d:1e:9f:15:61:97:72:28:52:83:09:e1:95:
         05:67:33:27:68:27:f9:2a:5c:5b:29:0c:47:14:8c:33:d5:e8:
         3f:8c:b7:30:46:dc:80:fd:8e:95:fa:c3:8a:e2:46:ce:ce:9f:
         99:e2:ce:45:43:11:64:47:03:ce:d4:19:1b:84:3a:b0:65:65:
         30:48:52:4e:93:ba:03:a6:37:24:a7:fa:8e:ce:cf:9c:82:24:
         29:b2:95:04:2a:ae:4d:3a:54:2d:34:e0:23:9a:b3:18:da:0a:
         6b:23:ae:2c:d0:cd:a8:1e:c4:57:d4:cb:99:ef:c9:6f:e9:5a:
         1e:3b:44:42:8c:73:15:d2:f4:c8:b1:85:7a:74:41:95:b1:0c:
         09:69:1f:e1:bf:a2:26:f1:66:51:0d:e0:1e:ca:c7:38:39:4c:
         75:54:67:1f:4d:eb:66:68:7b:7e:59:15:20:5c:72:f6:46:d5:
         45:b6:c3:1c:44:35:34:c8:a6:fc:dc:ad:b3:6b:c3:87:45:67:
         38:63:d8:c1:9e:d5:26:fd:eb:aa:4d:3a:20:c3:a0:82:2a:f4:
         bd:0b:e9:e8:25:91:1b:c3:f8:84:99:16:4f:fb:4e:31:13:5b:
         52:c0:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 19:34:08 2026 by rpki-client