Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
File:                     c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa (raw, json)
Hash identifier:          j3tcW/SmXm5ZLi7LIb/ITJ9iqs4mp/SSeh+F8JVW8wM=
Subject key identifier:   FF:56:34:23:97:62:E8:4E:F4:F1:C0:73:BF:FD:A7:71:C7:55:7D:EB
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584E296F0A7A8769A739DE783B00
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     22742
IP address blocks:        199.241.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:0a:7a:87:69:a7:39:de:78:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=bccec1c3-bcb7-4901-b01f-c742e919c231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:80:09:cf:9e:4f:b7:c8:5f:81:53:c5:ac:
                    18:d1:ad:99:8e:5c:6e:af:62:50:9a:c2:ac:9b:25:
                    23:bd:16:30:63:05:46:ca:16:55:2d:63:64:94:fe:
                    4e:f0:7f:dd:3b:fd:ec:d1:07:3a:6e:f7:a9:2e:11:
                    70:2b:3f:10:53:a8:7e:8f:5d:be:02:51:98:95:a5:
                    40:34:07:84:68:78:0f:b6:8c:66:5f:1c:9e:62:7a:
                    f3:39:4a:95:89:e5:5f:d9:26:c3:7c:1e:21:4e:f9:
                    a6:1e:ce:52:75:d0:bf:be:2d:cc:77:ba:8d:55:7b:
                    b3:0b:af:ff:b6:0b:49:70:66:2c:38:c5:7d:f0:e1:
                    c7:ae:16:cd:f8:37:45:14:26:90:a9:01:0b:20:f5:
                    2d:86:76:75:14:4b:90:c4:df:e2:57:e4:5e:cd:16:
                    6e:01:d5:3d:ae:3f:4d:26:4e:7d:36:e7:18:0d:80:
                    2a:d2:05:86:63:59:a3:4c:25:14:cb:dd:8a:41:06:
                    ef:6a:11:8c:7c:f5:01:76:f2:b2:b1:2f:d2:a4:61:
                    e6:87:d9:c8:2b:50:7e:79:c9:d5:1f:f1:9b:78:3f:
                    3d:92:6b:68:5f:84:cf:d6:12:51:a8:8d:ed:16:af:
                    06:39:2c:3e:29:ec:2b:06:8b:31:79:d6:c7:f1:c4:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:34:23:97:62:E8:4E:F4:F1:C0:73:BF:FD:A7:71:C7:55:7D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/c8cd6d1e-fca4-3a08-a296-4c6b62dd2f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:83:84:9b:d9:4d:69:c4:24:b2:28:a2:ff:b0:d3:5b:6e:
         63:2d:9d:75:6f:01:38:43:e7:79:0d:96:1e:1a:d7:42:24:e1:
         44:3b:20:de:9c:d2:8d:0d:c9:2a:6d:90:d4:31:ce:37:44:cd:
         fc:03:c3:e4:a4:3f:7b:6f:b5:38:f4:a0:b0:eb:b3:a3:bb:ab:
         f2:6c:04:05:93:de:d8:4b:46:60:34:49:89:72:9b:a7:90:94:
         0a:a9:ba:0e:3d:a5:ea:ca:74:b9:ce:70:d3:a0:22:1f:aa:72:
         23:e3:88:ed:d8:fb:a5:8d:72:74:7a:2b:04:23:ab:12:46:42:
         fa:03:aa:b0:f2:d6:a8:67:af:1e:7c:d4:6c:c6:07:1f:7b:c8:
         ba:a5:78:d3:4e:01:9f:60:8f:b4:e7:1d:c4:69:ff:5f:e0:69:
         4b:1d:e9:37:ee:01:3d:3b:e3:f6:df:8d:d8:8e:fa:10:ec:1b:
         ce:ec:9c:ba:28:2a:95:43:19:10:81:13:c4:d9:62:80:b5:77:
         f9:9d:12:97:e2:f6:ed:97:72:03:a4:c3:e4:0c:d9:69:79:04:
         43:0b:31:4b:6b:c6:b9:b0:fd:25:c2:d7:3e:00:8a:36:b3:07:
         10:5c:70:b4:bd:0a:06:69:f1:47:87:e1:9f:ac:ca:cd:0f:c0:
         c0:71:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:50:16 2026 by rpki-client