Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa
File:                     3faf2af1-6ac8-3fef-8689-293a2108a805.roa (raw, json)
Hash identifier:          R0qxaae84ZjgSBCS60Xy/2+Plq4ti1Vt5E/i6lMYGZg=
Subject key identifier:   DF:D8:4D:F2:85:07:25:24:66:62:C0:13:9A:90:3D:A6:4C:5D:5F:B3
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584E33A27045952283DB0C3D0300
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa
Signing time:             Wed 17 Jun 2026 12:42:02 +0000
ROA not before:           Wed 17 Jun 2026 12:42:02 +0000
ROA not after:            Tue 15 Sep 2026 12:42:02 +0000
asID:                     402347
IP address blocks:        8.19.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:a2:70:45:95:22:83:db:0c:3d:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jun 17 12:42:02 2026 GMT
            Not After : Sep 15 12:42:02 2026 GMT
        Subject: CN=9e7465bc-dc6f-4d0d-8346-21320d688fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:ae:16:32:68:5c:ce:ea:a0:5d:49:fc:d2:
                    a7:b7:f9:06:31:41:e7:74:e9:94:7b:d5:33:a5:b1:
                    86:72:ec:ee:89:6e:d3:49:ac:e8:da:73:17:10:93:
                    ab:30:c1:ba:27:b7:8f:9e:82:af:40:10:71:e5:5d:
                    1d:ee:63:ff:8a:fb:6d:44:b0:78:33:4c:fa:3f:d3:
                    da:f1:9e:55:22:b5:62:24:9a:6a:c5:fa:29:cc:51:
                    78:e6:3b:a0:c3:ce:b2:9f:1b:4d:c9:18:46:7e:54:
                    15:3c:56:5d:1d:a3:09:2e:ac:d8:65:80:ca:60:25:
                    71:1e:3f:16:e5:88:9e:86:4a:0e:57:e9:62:07:f4:
                    93:b0:c8:19:28:73:62:e5:bc:58:25:c1:a2:1b:9b:
                    79:28:cd:c5:5a:a4:68:6f:aa:43:e4:37:d3:bf:2f:
                    2d:12:bb:4f:19:25:d1:e4:58:63:fa:ea:90:2f:48:
                    89:dd:66:d8:8a:42:fa:71:97:91:2d:a3:e8:8e:aa:
                    dc:53:a2:37:d9:42:7a:3b:35:3c:82:29:ed:41:ba:
                    3c:43:53:1f:d4:d4:74:5f:03:58:d3:6e:a9:96:46:
                    38:73:2f:a2:4a:69:d1:60:2f:38:ee:97:ff:cd:81:
                    20:3d:94:ae:39:4a:83:0d:c0:ff:0c:c6:12:47:bc:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D8:4D:F2:85:07:25:24:66:62:C0:13:9A:90:3D:A6:4C:5D:5F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.19.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:68:b8:6c:b6:08:71:96:71:6f:c3:1c:b2:ec:14:84:6b:01:
         88:d1:96:3e:7b:d1:47:d5:2c:2c:85:74:a0:27:5b:a7:ea:69:
         41:83:04:1e:6c:e1:c2:e5:72:88:63:7b:e3:6f:ed:48:f7:a0:
         b3:78:0c:38:0c:42:e6:22:e4:e8:41:80:10:1b:0a:91:59:c2:
         71:ee:86:43:be:b7:bc:bc:82:ca:c7:94:2b:8a:21:38:12:8e:
         1d:b1:84:1f:4a:99:96:04:79:db:23:3d:d9:f2:0b:1e:e9:89:
         2a:3b:b0:0c:ed:44:cc:2d:95:c8:84:77:bd:9b:14:10:bb:61:
         10:c7:20:d3:b4:4c:ae:cd:0a:d2:c3:c1:a7:80:e5:be:55:9d:
         c1:68:49:7b:58:42:1f:43:0a:56:ce:bc:b9:e7:4f:6f:78:52:
         e0:64:6b:54:d0:bf:97:09:98:2a:83:a9:3b:87:ec:47:29:05:
         c1:17:04:b4:d9:65:5b:81:de:b9:fe:a4:c8:51:b7:2e:cd:93:
         f7:90:78:7e:b2:68:02:1f:41:24:41:88:53:6d:e6:2a:4a:ae:
         cf:98:9b:46:46:fb:a9:ea:be:d7:a2:91:c6:1c:9f:ba:15:cf:
         18:30:61:5e:9c:05:af:e4:57:71:53:e4:49:4d:c8:5c:ab:0c:
         a0:06:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 03:30:41 2026 by rpki-client