Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/67b9ff28-853f-3dbd-a917-29952b8649ea.roa
File:                     67b9ff28-853f-3dbd-a917-29952b8649ea.roa (raw, json)
Hash identifier:          a2FZSoicx1oS8YE+/DDY+HylXC/pDNcQeECCwYt6WfI=
Subject key identifier:   B3:39:A9:6D:61:FD:83:6F:AF:B7:2C:6E:22:BC:30:4E:27:EB:C8:2F
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584B4081A04F90294B410260CF00
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/67b9ff28-853f-3dbd-a917-29952b8649ea.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     46183
IP address blocks:        47.19.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a0:4f:90:29:4b:41:02:60:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=87cb8c8c-6e10-4581-b9bc-ac03c1c3a290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:f2:c1:a3:5a:89:6b:8c:fb:c2:05:fc:2a:
                    dd:b0:57:36:84:91:9c:1a:a5:74:25:bd:60:65:4d:
                    10:02:95:11:2e:41:2d:c4:40:c3:d4:d3:9d:69:f8:
                    74:6f:f0:2c:58:f1:13:ca:d2:47:a5:15:c4:d4:ad:
                    c6:97:4d:76:4a:9e:bd:ff:ae:04:4c:2d:56:e4:e0:
                    56:75:af:ad:18:34:c6:e6:db:12:f8:de:b4:55:9d:
                    29:43:5f:42:cf:19:45:93:25:d3:4e:c9:75:52:2e:
                    3c:67:ec:c3:ce:44:9c:97:22:95:ce:e6:cb:60:04:
                    3d:14:43:7d:e0:04:fb:5d:a7:b9:a1:5c:cf:7e:7f:
                    d2:cc:98:aa:e7:f3:84:33:ca:8c:15:d3:0d:40:0d:
                    4c:39:a0:28:db:69:9e:2c:3a:61:91:76:05:8c:72:
                    08:8e:43:15:e7:b4:e9:fb:4a:0d:33:df:96:b3:42:
                    f5:9b:f0:a8:4c:1b:30:8d:c5:7a:7f:5a:c8:2b:ab:
                    43:26:02:52:ed:6a:46:c2:65:80:ca:97:4a:fa:0e:
                    8f:94:4c:30:59:f1:6e:33:fd:8f:92:88:f3:ac:ff:
                    62:3f:e3:07:5e:22:6b:a6:06:79:6d:9a:23:06:ef:
                    fd:3a:39:4b:03:41:15:45:6c:53:51:66:b3:7a:f1:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:39:A9:6D:61:FD:83:6F:AF:B7:2C:6E:22:BC:30:4E:27:EB:C8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/67b9ff28-853f-3dbd-a917-29952b8649ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:05:e2:98:d8:d9:49:a2:c1:17:bf:02:cc:42:fd:fc:4d:
         9e:d0:13:26:c0:e5:1f:51:ad:67:b1:cc:4a:cf:66:91:87:68:
         ff:03:76:10:3d:19:a6:29:e0:04:51:1c:2e:c0:1c:77:83:68:
         5e:63:c5:e5:58:9c:e0:55:11:f7:27:48:b5:44:80:50:dd:2a:
         1f:07:b2:59:98:dd:06:d7:0e:de:23:c8:8a:4d:d0:0b:80:fd:
         2c:74:0b:52:bb:12:d8:37:59:f7:d1:93:23:84:5e:2d:b0:cd:
         84:72:fe:dd:fd:53:e4:5b:01:62:0b:e0:8c:3e:9d:75:8e:7b:
         f7:42:4d:d1:99:ea:f5:b3:03:e2:9e:86:54:13:00:69:e2:0e:
         63:61:41:9c:f8:66:37:5c:c2:ef:b3:93:46:17:0e:77:25:6e:
         a3:4c:a5:93:ad:c0:40:27:42:7f:5f:98:47:e4:38:f8:c7:4d:
         93:b7:60:17:e4:f0:e1:dc:dc:7e:f6:fe:14:60:be:4f:f3:76:
         75:cb:d9:46:52:da:7e:8e:02:22:01:f5:e8:c1:53:e6:cd:80:
         94:46:20:6e:35:81:cc:31:72:6d:84:b9:84:f1:a6:97:57:98:
         3c:c3:18:3c:c6:2f:d7:65:fd:2c:89:aa:e5:e2:fd:e3:24:65:
         15:90:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:49 2025 by rpki-client