Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d07a051-76a7-37e3-b818-0a725c5f03cb.roa
File:                     4d07a051-76a7-37e3-b818-0a725c5f03cb.roa (raw, json)
Hash identifier:          OIfaklJn0yOkES58vUseaJ9mUQa5LTVms/dX2oYl3WI=
Subject key identifier:   0F:3B:21:7F:93:33:91:7F:C1:EB:2F:CE:F0:40:03:EE:21:C8:75:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CB2874F04E991B306821A6F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d07a051-76a7-37e3-b818-0a725c5f03cb.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     3855
IP address blocks:        199.172.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:4f:04:e9:91:b3:06:82:1a:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=9ce55350-000f-46af-9e83-b710d148b63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:23:ea:a3:88:a4:37:50:9f:58:ef:ba:17:
                    cb:1c:59:85:71:64:ab:df:db:09:22:79:e2:60:6d:
                    f6:3e:08:57:23:b5:69:4d:cf:b8:9b:44:36:74:e0:
                    7d:fb:00:fb:91:8d:13:7c:ae:77:a6:6c:ac:45:41:
                    5e:da:0c:85:be:34:2c:38:a1:69:2c:ab:3a:d2:a9:
                    0b:b3:a6:cd:5a:d8:6e:60:da:9c:ad:4a:63:2d:0f:
                    f7:c6:42:71:2a:aa:ab:45:22:6b:ba:9f:9e:d3:47:
                    8d:60:53:45:19:1c:a6:d3:81:8d:8d:62:20:b5:e5:
                    42:69:41:eb:9d:39:74:51:5a:03:b4:ae:f6:a1:1c:
                    af:31:a3:90:3a:f8:b2:34:88:22:06:28:4a:96:60:
                    d1:3b:96:39:e0:ec:eb:e1:0f:9c:85:3d:88:3f:f4:
                    08:3f:08:43:cf:92:e9:fd:c0:42:e3:24:7d:7e:15:
                    e4:ee:0e:2b:6a:57:7d:b5:95:c9:d1:74:80:96:3a:
                    61:30:e8:ac:9f:01:ea:ac:15:c4:24:1b:a9:27:d2:
                    81:7a:52:45:cd:c9:ab:da:94:86:00:f1:9b:b3:13:
                    62:07:02:0e:87:67:3b:b6:8a:10:96:92:e5:ba:1b:
                    df:4e:8a:2f:df:13:68:b2:db:ab:5f:c6:ae:2b:c0:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:21:7F:93:33:91:7F:C1:EB:2F:CE:F0:40:03:EE:21:C8:75:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d07a051-76a7-37e3-b818-0a725c5f03cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:4c:1a:e8:4a:db:4f:15:5f:de:ef:ba:b9:3a:9e:45:53:
         a8:06:2b:cb:c0:41:bc:27:94:8d:dc:b8:af:69:4b:df:a9:3a:
         83:75:e0:e2:97:ab:b7:8b:3e:cb:f8:16:ef:e3:93:1c:12:c7:
         49:c4:2f:ab:3b:34:49:c5:2c:b2:f6:c1:a0:45:7e:7a:64:a7:
         ee:ac:96:bc:40:2f:5d:eb:60:9f:a9:25:71:5d:ca:0e:0d:9c:
         02:26:8f:f3:52:d8:d9:b9:01:1d:3f:d7:7f:7b:ba:9b:38:03:
         66:2a:6f:db:de:8a:9b:95:ba:d4:16:ac:17:d8:e9:06:58:ea:
         35:f0:d8:65:60:55:01:2e:fa:bf:f2:1b:10:0e:b1:ef:e6:13:
         5a:91:54:ed:9a:b6:84:09:98:cc:b0:1f:1c:34:15:de:c0:3e:
         5e:03:b6:b7:5d:52:e5:cc:79:a0:1a:f9:b3:8c:07:c3:c9:33:
         f3:1c:e7:06:86:0f:7a:9d:da:43:61:72:1e:79:32:1c:6a:05:
         db:2f:e5:97:c1:45:8d:48:54:21:a7:07:15:4b:54:13:57:3a:
         c1:3d:9c:ea:8d:5f:bc:7b:a4:bf:32:eb:43:fc:a1:88:6f:b9:
         4e:71:88:28:34:27:66:74:17:bd:08:45:fb:03:98:ce:c5:6a:
         02:0e:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:21:57 2026 by rpki-client