Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa
File:                     ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa (raw, json)
Hash identifier:          LUko6LFxuWYMvjNyNGnirM2PyWv0/yEewsJON238858=
Subject key identifier:   08:6B:10:00:EB:B7:FE:95:1E:29:40:59:18:80:77:B0:B8:D5:41:2F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584E37647A3A19273E4AEFFF9480
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     28753
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:7a:3a:19:27:3e:4a:ef:ff:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=9383985f-5e08-4bc1-94fe-347982c40500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:84:ee:7f:95:4d:0c:94:88:11:38:14:f7:
                    b2:4b:86:c1:de:56:72:49:61:78:bb:81:f0:33:9b:
                    e9:bd:d8:95:d6:7e:c1:0b:d4:53:26:af:0a:d2:7b:
                    78:96:3b:89:30:63:3f:61:0e:78:5f:7a:e2:d0:e0:
                    3d:db:50:81:68:72:ec:b3:65:8a:ec:3e:74:9e:df:
                    5f:4a:dd:3c:15:c7:a0:af:39:6c:2b:b3:6c:0c:41:
                    43:3a:4d:cb:c2:4e:6f:11:44:e7:39:9a:a7:d5:b7:
                    eb:4c:ec:26:73:43:32:32:9f:57:02:9c:8e:c7:0e:
                    d9:25:16:b1:70:4a:65:97:f2:98:2b:24:47:f5:9c:
                    cd:16:b6:f1:d4:27:11:bb:c5:d3:d0:82:97:14:97:
                    a6:7c:00:a2:71:40:8c:b8:39:74:05:df:69:cf:b4:
                    07:22:cc:f7:b9:5c:80:86:8f:9b:05:78:a6:c6:65:
                    0e:5a:01:ab:db:73:db:fd:0a:10:8b:55:08:55:3a:
                    cb:39:f4:06:bd:70:87:4f:ce:41:f4:66:55:5e:b8:
                    0f:0c:c2:c3:69:8a:15:9a:40:2d:0f:df:73:2c:cb:
                    2f:81:61:66:7e:4b:ac:23:1c:52:26:24:65:7a:46:
                    f9:af:c3:e6:38:7f:c2:3a:2a:e7:3d:3d:ca:fd:82:
                    80:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6B:10:00:EB:B7:FE:95:1E:29:40:59:18:80:77:B0:B8:D5:41:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ec611dd2-d3ab-3a31-8ca8-6725aac97670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:75:47:40:e6:e9:16:1b:55:92:49:1e:49:43:b1:7a:e0:dc:
         b3:c2:b5:09:98:95:60:81:0b:ad:7e:a5:ef:f9:b5:d8:5e:56:
         52:f6:c6:ac:0d:29:2a:f5:5f:5c:05:7a:91:7a:19:73:c7:12:
         2a:41:0e:8e:94:cd:a2:84:38:8c:e7:7a:2b:c1:d2:3d:8c:11:
         24:75:d3:60:ed:b7:fe:09:a7:e1:f5:82:a3:21:28:42:c6:7e:
         0c:7f:88:be:a7:7f:e2:35:65:41:f3:37:6b:f1:86:55:0b:fa:
         9b:70:fb:e5:05:26:72:b1:de:86:21:0a:4e:11:27:38:d4:9c:
         89:d7:69:49:0c:5a:35:96:58:7c:f6:76:b2:2f:db:9a:8f:ba:
         d2:20:c0:4c:77:21:df:57:24:5a:7b:93:51:0a:70:b5:aa:b9:
         d3:4b:2f:cb:99:dd:7e:e7:b5:1d:34:1c:a3:2b:6a:65:26:2a:
         b3:04:47:e0:b8:b0:5b:50:af:eb:e2:8e:69:36:e0:3c:38:20:
         d9:d0:00:4d:18:7b:dd:6e:ce:bb:9d:b7:66:32:ff:d0:b8:35:
         a0:85:d2:d2:1a:5a:bd:10:4f:1e:68:8a:82:f8:c0:38:e5:fc:
         b0:a1:4a:ca:6e:bd:12:55:24:63:c9:cc:fe:6c:13:0c:02:b3:
         bc:45:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:28:00 2026 by rpki-client