Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8919df3-c62c-3101-a33e-b919c9623688.roa
File:                     b8919df3-c62c-3101-a33e-b919c9623688.roa (raw, json)
Hash identifier:          kvHHsOLos05oSLQzf3VF/H70Vfx/z6gEcq4DsiNYqBU=
Subject key identifier:   86:53:2E:28:D4:44:12:B4:18:F8:05:28:7B:6C:02:92:8E:6D:89:DE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129E2F73DA1E7DA08F0DB80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8919df3-c62c-3101-a33e-b919c9623688.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        192.119.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e2:f7:3d:a1:e7:da:08:f0:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=f2fe133f-fd0d-4def-934a-cdcf915f9fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:dd:e1:06:d3:5e:a4:1d:38:33:98:39:65:
                    94:2b:5d:fb:0e:eb:ca:ca:53:d6:4f:05:a0:e4:8b:
                    b9:d4:c0:c0:c0:6b:ee:41:43:78:7f:94:3b:f7:c1:
                    ed:8d:db:82:87:bd:ae:2b:53:e2:4b:fe:eb:1d:12:
                    8e:99:e2:db:eb:cc:4a:ca:e4:a1:05:15:1b:e9:4d:
                    99:7a:de:50:19:57:c0:ab:4c:2a:02:1d:06:be:ef:
                    98:16:cd:75:62:96:58:a3:48:8f:9e:60:bf:ae:a5:
                    66:9f:7b:f3:ec:1e:7a:e2:10:8a:52:20:5b:09:c5:
                    a6:9f:48:da:2a:25:50:64:51:26:2a:2c:62:1e:30:
                    9c:42:0c:7e:0a:eb:0d:2f:e1:b8:65:0d:a4:29:3b:
                    06:cc:29:68:ff:ec:aa:8b:50:62:32:77:a2:20:63:
                    19:2d:7f:72:68:d0:cb:ed:f1:e9:fe:a7:70:a6:ae:
                    59:30:d2:36:48:d1:d6:97:1a:ba:9e:08:32:cc:01:
                    a4:ba:f5:4f:37:7d:f7:78:dd:10:24:75:cd:d9:1e:
                    82:2d:ac:69:4c:50:34:e1:42:76:98:41:dd:06:f1:
                    72:ba:e3:e0:f0:b6:9c:f3:0f:df:f8:d7:e5:2b:3f:
                    ca:52:29:8b:a6:f0:91:de:07:37:d7:3a:63:40:58:
                    26:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:53:2E:28:D4:44:12:B4:18:F8:05:28:7B:6C:02:92:8E:6D:89:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8919df3-c62c-3101-a33e-b919c9623688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5b:74:39:c4:22:37:30:60:9d:a9:64:70:06:f1:da:24:f8:
         e0:00:34:89:20:a0:9e:08:bf:70:7e:24:06:69:b3:dd:b4:a5:
         fe:0a:53:2e:2b:b3:ab:45:47:66:c9:8e:9d:0c:82:98:29:73:
         3d:ed:67:6d:2b:08:63:c4:e9:72:2b:e6:df:29:8d:64:50:28:
         70:97:1d:ac:a1:e2:99:e0:f4:bb:12:87:09:98:90:fe:09:31:
         0f:d4:10:da:42:e2:5c:f4:14:f7:da:de:05:bf:1a:52:ec:87:
         a1:33:c1:58:d6:db:e2:94:ad:59:e6:d6:ee:3b:10:eb:e4:01:
         76:82:40:b0:ec:f8:21:d8:29:a2:44:70:62:68:69:c4:d5:23:
         93:65:5c:c5:f1:0e:ee:61:bf:ac:be:74:1e:2f:72:58:cd:e0:
         4e:08:d1:8f:f2:b6:7f:c3:c2:50:8e:ea:e8:c8:1d:c5:91:b4:
         c8:77:34:e6:67:87:f0:fb:4a:dc:69:bf:68:ad:67:77:ad:bb:
         df:f7:c5:19:d6:3b:d1:36:f1:fd:5d:dd:83:02:72:7b:7f:8a:
         ca:0e:0a:73:4b:ef:52:44:5e:72:be:8c:43:87:86:b3:72:dd:
         4b:fc:f4:4d:2f:b1:5b:2a:79:99:64:e7:42:91:97:d7:e9:26:
         3b:f8:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:38:04 2026 by rpki-client