Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19effe20-c4e9-352c-bd10-cdea91969197.roa
File:                     19effe20-c4e9-352c-bd10-cdea91969197.roa (raw, json)
Hash identifier:          HR+GETux+YWRmqq+yEtZEcdRar4IYXSWYm38snW487A=
Subject key identifier:   3B:FD:97:8B:78:7A:B4:D9:A1:77:69:B7:DD:27:52:97:58:DB:1B:31
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE423360356FAA6448F6A3240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19effe20-c4e9-352c-bd10-cdea91969197.roa
Signing time:             Wed 19 Aug 2026 18:03:46 +0000
ROA not before:           Wed 19 Aug 2026 18:03:46 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        173.245.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:36:03:56:fa:a6:44:8f:6a:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:46 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=7999421c-0e0a-4293-bf7d-b988cd4b2095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:d4:de:b4:35:3d:e9:96:1a:90:a3:34:c0:
                    25:49:07:d1:66:80:4a:05:fd:eb:c0:0a:f9:a4:86:
                    8f:0a:8d:3b:00:34:8e:4d:d2:3a:57:3f:52:2b:93:
                    72:ca:10:69:03:da:d7:b8:8f:7f:ba:3f:43:70:50:
                    13:a2:88:38:1d:f6:9e:b7:2c:52:a2:a2:ce:ac:e1:
                    1f:43:01:54:72:a0:45:db:41:1f:2b:c4:12:f9:4d:
                    6b:b5:19:50:ad:f0:a5:91:d4:3a:6c:ba:69:bd:50:
                    e9:27:c1:82:81:12:73:2c:30:d7:a6:b0:c0:3f:2f:
                    d9:fc:e2:c9:8a:16:46:53:ea:55:2c:b0:0b:f8:17:
                    1e:31:d8:49:c9:93:39:09:f2:f2:bd:fe:48:fe:e8:
                    26:cb:de:6f:d5:d2:57:f0:2b:af:a9:c6:fc:50:1b:
                    1b:02:6a:44:ad:ec:83:db:a4:e2:f9:ed:2a:f8:fa:
                    93:93:7d:55:b7:50:79:a9:f5:67:89:03:0e:5c:cf:
                    d3:53:13:05:89:0a:6f:6a:33:89:3a:1f:60:ba:f3:
                    bc:11:6f:9e:87:f3:08:50:b3:80:bf:f5:00:4f:34:
                    ce:97:5a:d2:61:6f:f3:d1:89:33:18:4f:52:fd:13:
                    9f:6d:6a:a7:0b:ad:0a:cd:2c:0f:78:28:f1:ae:5a:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FD:97:8B:78:7A:B4:D9:A1:77:69:B7:DD:27:52:97:58:DB:1B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19effe20-c4e9-352c-bd10-cdea91969197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:2a:99:5e:af:06:8d:56:b6:34:86:4b:91:f8:0a:92:11:
         60:5f:c8:bd:78:93:09:78:76:6f:3f:61:29:db:a5:84:ca:fb:
         3b:6a:9f:43:0e:15:d7:4f:47:c1:5e:36:15:b3:b8:79:99:8e:
         2a:50:2a:fb:41:57:96:24:17:33:8b:a6:f2:20:c5:bd:1f:ff:
         01:b8:72:31:d1:ef:b1:f5:41:4e:91:9e:1c:97:ee:86:49:fc:
         97:ae:a6:ce:70:3b:2d:43:23:2f:53:ed:e1:18:ef:3f:05:ad:
         19:0b:eb:17:98:a4:71:2d:e7:78:cc:a3:30:5b:f5:31:fd:58:
         c3:7e:17:01:cf:d6:05:fd:4e:64:41:7d:ad:25:a4:b5:c5:2e:
         38:61:2d:5a:c3:a0:38:19:8d:9c:11:47:1f:6f:06:de:5d:3f:
         a4:9b:2e:b6:8d:07:dd:8d:56:ae:63:ba:8f:6c:91:1a:68:c0:
         9d:72:f5:a2:2b:0b:2d:e3:db:80:82:31:4e:9f:0b:88:cb:69:
         9a:27:ac:89:f4:36:13:07:fe:2b:21:0b:8c:70:bf:e4:6f:23:
         42:47:85:09:6f:c9:17:c9:99:85:1b:f2:24:b2:6a:b4:d9:aa:
         47:4e:63:e4:bf:3a:ab:02:17:6e:b9:cc:75:74:e1:f4:a3:40:
         b5:62:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:44:55 2026 by rpki-client