Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
File:                     25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa (raw, json)
Hash identifier:          81npOw9BZtKT10Lklo3lrFeVj0uXFeI4EDRbSTM14JA=
Subject key identifier:   A6:04:F8:3C:5A:7C:F6:C2:CC:F0:D3:F5:05:80:0B:1B:9C:89:D9:F3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E7634CD793740786DEEEF1900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     206092
IP address blocks:        149.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:cd:79:37:40:78:6d:ee:ef:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=d7375527-de20-421d-8406-71288422a0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:a2:a0:0f:82:78:ab:06:3a:ed:a4:d0:b6:
                    38:1b:7e:ae:6d:60:7d:26:85:d6:9e:03:d7:e7:72:
                    a1:ab:34:39:26:95:92:3b:93:f3:0a:09:3e:2b:e4:
                    32:28:0b:26:19:f7:f6:4c:a4:4e:e2:85:ec:8a:75:
                    3d:16:a6:a8:e2:83:7f:66:a3:f9:fa:dd:9d:55:98:
                    14:c2:33:60:73:46:d5:d0:d3:d5:07:6e:32:23:2f:
                    5b:08:d6:98:70:e3:84:5b:d0:54:69:94:eb:5f:1f:
                    d7:12:08:e7:73:09:1a:1c:b5:f8:a5:3c:ac:61:9f:
                    07:06:95:eb:b9:e5:4e:17:47:94:f4:00:e7:49:16:
                    52:b9:5c:29:75:21:cc:a4:d6:9c:85:96:84:50:e6:
                    be:3c:0c:81:bf:cb:b2:f0:4c:9b:7a:19:de:de:6b:
                    2b:c8:eb:77:93:97:1e:d6:40:54:c2:22:3e:fd:9b:
                    48:e7:4c:7b:e5:69:82:ec:28:41:bd:00:a5:58:b4:
                    c1:45:1b:e2:79:11:b2:62:ff:45:78:ce:95:55:b7:
                    0b:ea:f3:45:6a:c5:49:59:27:d1:ce:bf:aa:2c:16:
                    21:1e:9b:9d:bc:09:b9:2d:96:f7:fd:e4:0c:a3:d3:
                    c5:b1:7d:b3:59:4a:ad:59:01:1f:c4:cb:7c:3a:03:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:F8:3C:5A:7C:F6:C2:CC:F0:D3:F5:05:80:0B:1B:9C:89:D9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:71:b4:20:6f:04:3e:fc:28:74:37:da:a0:a4:d5:e9:ec:6d:
         55:54:58:cf:c1:ae:6b:88:24:d0:2d:78:ad:a9:eb:7a:e7:a9:
         28:89:62:b3:99:d9:d8:98:eb:47:5c:ec:9c:87:06:d1:af:bb:
         e1:94:61:62:ea:d7:91:6b:12:9a:b8:d4:8d:85:98:bf:14:cf:
         0b:00:5e:1d:eb:5d:e4:db:a4:05:cd:2f:ce:05:e0:2f:eb:ac:
         8e:59:f4:92:d4:3f:7f:22:91:66:a6:86:a5:2e:b7:3f:9c:3b:
         86:14:7f:96:68:9a:69:5d:94:e4:08:be:31:ef:49:67:fa:b4:
         bf:3c:78:cf:a1:1f:2c:42:c3:78:00:6b:94:14:5e:44:4c:d6:
         2c:96:bc:21:ca:9a:06:dc:88:03:f6:52:91:e5:4b:32:3f:b2:
         cc:b8:1b:4e:d0:73:20:e3:8b:37:35:7e:da:14:86:94:56:98:
         58:68:47:f3:b9:2d:54:cf:53:71:1b:72:2f:28:92:27:a6:41:
         de:07:e8:de:a1:15:ba:87:26:08:c9:a7:63:1c:9c:cd:9a:c6:
         ea:ef:7f:f3:27:f9:9a:a7:e6:68:26:fd:1c:1c:ae:59:94:fe:
         8d:90:b2:7c:7c:a0:cf:90:75:fc:3b:0d:96:39:76:32:88:52:
         54:b7:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:08:35 2026 by rpki-client