Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa
File:                     19147fbc-9b03-3805-96e0-3f7524943c5b.roa (raw, json)
Hash identifier:          KbawTgd92NneayE5szX9MotcuaIA93UuL1LoJi2y67g=
Subject key identifier:   7C:B9:E7:48:9B:96:F0:10:FB:81:8C:BF:54:32:47:17:65:38:63:A4
Certificate issuer:       /CN=06951899-7f4f-486b-bb86-0aee5ea26079
Certificate serial:       010D0C9F4328584D5E1A4B9D7D48A762F8AB9680
Authority key identifier: 99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     396982
IP address blocks:        52.119.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4b:9d:7d:48:a7:62:f8:ab:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06951899-7f4f-486b-bb86-0aee5ea26079
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4749d664-f43f-4c5e-b4c0-bf057cac9b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:3d:5b:f8:5c:df:02:f8:c4:ad:23:af:57:
                    5a:a5:ca:7b:d5:1c:4a:b1:ec:c4:95:f8:10:24:23:
                    0b:52:d3:77:d4:79:a9:3e:ac:60:6c:ad:1d:a6:3e:
                    86:25:23:31:03:f2:4a:6c:8d:d3:1c:44:c2:69:70:
                    b4:18:64:68:ce:84:fa:a3:25:7a:43:a9:c0:9a:20:
                    cf:2d:df:29:30:f4:d0:e7:9f:eb:2d:b8:b4:84:ae:
                    5a:92:27:9f:0e:fe:cb:a2:5e:9f:05:d0:2a:d4:0f:
                    12:a9:21:5a:3d:30:58:8f:6f:f6:35:e5:ef:36:1e:
                    53:57:60:b2:4a:27:90:3d:17:b9:a5:38:6e:05:2c:
                    9d:a6:e7:7c:b3:db:30:c1:62:de:d4:ea:4a:e5:f2:
                    fe:81:c4:49:51:37:ea:43:cc:54:c5:7d:4f:02:5d:
                    7d:5f:6b:e0:1e:ed:bc:3d:e9:69:da:ff:93:75:a2:
                    4b:df:1b:fe:9c:54:41:45:dd:7f:91:f3:11:fe:52:
                    0e:52:fe:6c:b4:b9:2f:1d:9b:1f:b1:07:58:58:0d:
                    79:2d:65:67:ee:fd:5a:dc:e2:8b:2f:d8:15:38:19:
                    c1:5e:1b:34:cd:c8:b0:84:df:41:31:99:6d:89:74:
                    3c:f1:12:4c:f5:0c:06:d6:16:99:89:36:34:72:d6:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B9:E7:48:9B:96:F0:10:FB:81:8C:BF:54:32:47:17:65:38:63:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/19147fbc-9b03-3805-96e0-3f7524943c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079/06951899-7f4f-486b-bb86-0aee5ea26079.crl

            X509v3 Authority Key Identifier:
                keyid:99:9E:13:10:94:90:6E:07:46:81:31:9C:F9:59:3B:B6:35:DE:E9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06951899-7f4f-486b-bb86-0aee5ea26079.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:6f:9c:90:bb:c2:bb:45:84:05:16:d5:5f:e7:4e:06:fe:
         1d:66:32:7d:0a:c9:08:b5:c9:6a:77:ff:df:43:78:3a:7d:e9:
         58:7f:70:a5:6f:23:d2:59:b7:37:f0:03:da:06:1e:98:bf:dd:
         2e:d8:17:ae:e8:c1:cc:48:06:2c:b5:0f:47:5c:d4:13:5c:3b:
         e8:b4:36:12:8d:5c:ec:66:0b:f9:e0:69:5b:61:07:f2:d8:1a:
         ea:c4:38:c1:b7:24:c0:43:3c:76:5d:81:7d:7b:41:e7:d0:75:
         4f:dc:b7:8b:cc:67:a8:e9:71:4d:d6:16:79:1a:0c:af:cc:ff:
         44:0b:a2:6c:2d:37:bb:38:eb:38:ff:56:b8:c2:40:c6:18:59:
         5a:08:9e:26:4f:15:a9:78:a7:d7:a8:d5:21:d3:b9:98:10:a0:
         dd:ee:10:94:de:ff:e3:11:c2:47:d8:0b:af:a2:fb:e7:3a:72:
         4c:e7:62:1e:6b:a7:2d:d9:0a:6b:d8:45:37:92:e9:f0:be:94:
         57:d3:f5:1e:82:c9:73:98:65:ae:ad:60:02:2e:aa:33:9a:1e:
         37:73:fe:84:a8:d6:d1:09:ba:ba:e3:b0:a4:3b:85:a9:14:50:
         e0:4a:0f:8a:87:74:15:b3:a3:3f:74:04:bb:83:2e:10:ff:05:
         dc:b1:af:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkudfUinYvirloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY5NTE4OTktN2Y0Zi00ODZiLWJiODYtMGFlZTVlYTI2
MDc5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NDc0OWQ2NjQtZjQzZi00YzVlLWI0YzAtYmYwNTdjYWM5YjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYM9W/hc3wL4xK0jr1dapcp71RxKsezElfgQ
JCMLUtN31HmpPqxgbK0dpj6GJSMxA/JKbI3THETCaXC0GGRozoT6oyV6Q6nAmiDP
Ld8pMPTQ55/rLbi0hK5akiefDv7Lol6fBdAq1A8SqSFaPTBYj2/2NeXvNh5TV2Cy
SieQPRe5pThuBSydpud8s9swwWLe1OpK5fL+gcRJUTfqQ8xUxX1PAl19X2vgHu28
Pelp2v+TdaJL3xv+nFRBRd1/kfMR/lIOUv5stLkvHZsfsQdYWA15LWVn7v1a3OKL
L9gVOBnBXhs0zciwhN9BMZltiXQ88RJM9QwG1haZiTY0ctZVbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHy550iblvAQ+4GMv1QyRxdlOGOkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNjk1
MTg5OS03ZjRmLTQ4NmItYmI4Ni0wYWVlNWVhMjYwNzkvMTkxNDdmYmMtOWIwMy0z
ODA1LTk2ZTAtM2Y3NTI0OTQzYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDY5NTE4OTktN2Y0Zi00ODZiLWJi
ODYtMGFlZTVlYTI2MDc5LzA2OTUxODk5LTdmNGYtNDg2Yi1iYjg2LTBhZWU1ZWEy
NjA3OS5jcmwwHwYDVR0jBBgwFoAUmZ4TEJSQbgdGgTGc+Vk7tjXe6TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wNjk1MTg5OS03ZjRmLTQ4NmItYmI4Ni0wYWVl
NWVhMjYwNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZob5yQu8K7RYQFFtVf504G/h1mMn0KyQi1yWp3/99DeDp96Vh/cKVv
I9JZtzfwA9oGHpi/3S7YF67owcxIBiy1D0dc1BNcO+i0NhKNXOxmC/ngaVthB/LY
GurEOMG3JMBDPHZdgX17QefQdU/ct4vMZ6jpcU3WFnkaDK/M/0QLomwtN7s46zj/
VrjCQMYYWVoIniZPFal4p9eo1SHTuZgQoN3uEJTe/+MRwkfYC6+i++c6ckznYh5r
py3ZCmvYRTeS6fC+lFfT9R6CyXOYZa6tYAIuqjOaHjdz/oSo1tEJurrjsKQ7hakU
UOBKD4qHdBWzoz90BLuDLhD/Bdyxr3c=
-----END CERTIFICATE-----
Generated at Thu Apr 9 02:50:12 2026 by rpki-client