Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa
File:                     24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa (raw, json)
Hash identifier:          l+ygxsiVTliWees5+xXzr9jndJlB++Z0ToPCw23qUKE=
Subject key identifier:   D5:D8:E8:1B:AA:20:DF:DD:F9:88:F3:5C:F3:F4:E1:5C:CD:6E:AC:71
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584E37647A2EB84ED9F09E14CD80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     30633
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:7a:2e:b8:4e:d9:f0:9e:14:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e6b81033-8f35-4a58-be2c-bc17a59f2b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:da:d7:2e:ec:82:dd:de:fc:e3:d2:5b:d9:
                    51:3e:d1:e9:f7:0f:b5:35:dc:c5:26:2b:f9:61:77:
                    73:f8:0a:91:81:21:0f:b4:3e:46:d7:f3:54:ed:2e:
                    7b:87:cf:1c:05:99:69:4f:4c:ff:6c:69:80:61:c4:
                    c7:0a:96:e5:71:ea:cd:7f:05:0b:7f:ae:23:9c:b1:
                    2d:47:88:09:84:d4:99:80:47:19:db:ae:8b:ba:e9:
                    b1:f9:96:36:d0:ee:2b:53:a4:9c:5d:3c:6f:79:9d:
                    73:0f:c2:f4:e5:ae:7e:6f:11:92:e9:56:df:8a:94:
                    67:c1:33:cc:cc:91:11:2b:95:49:1c:b5:47:3f:af:
                    c4:72:80:b5:81:84:c1:9c:b6:b6:ad:4f:f8:44:11:
                    19:0a:e1:21:58:96:e6:55:6d:a8:da:97:00:4c:fa:
                    90:8e:15:93:1e:e8:91:6a:4a:6b:2a:97:88:bf:0e:
                    ce:da:1e:ae:e1:b5:ea:a6:4f:59:5e:f5:b1:49:18:
                    dd:e6:15:90:e8:aa:48:76:99:06:53:81:81:1c:34:
                    8c:bc:c2:19:30:ff:17:8d:3f:ff:91:7d:da:67:10:
                    de:17:86:db:47:ba:fa:54:80:a7:9f:7a:b8:24:ee:
                    38:57:31:8e:f7:0e:2a:01:18:d1:49:01:6a:32:e0:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:E8:1B:AA:20:DF:DD:F9:88:F3:5C:F3:F4:E1:5C:CD:6E:AC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24d02c6c-fbff-3e17-a7ee-bdb7046a2384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6b:12:93:47:2e:50:f1:ed:e7:d9:ad:c8:1b:46:61:4b:4f:
         bf:12:f3:fb:bb:d8:73:13:98:73:69:4c:45:82:62:8b:65:48:
         52:5e:de:54:34:86:5f:d4:cb:0a:74:5e:a2:54:f5:12:73:a3:
         6c:e0:1d:a1:d7:3a:bb:23:18:3e:a2:2b:25:b0:b6:a8:aa:e4:
         a1:2f:ec:1c:a5:61:93:15:bc:16:17:10:4d:93:3b:38:94:8e:
         b6:49:9d:8b:46:a0:16:5d:22:5e:4a:62:15:a2:9c:65:33:93:
         dc:ee:b8:69:4f:00:70:4e:30:5d:a9:6e:28:8b:47:d6:b2:2f:
         23:5c:11:21:9c:fc:65:34:61:4c:03:c7:c8:0b:46:f1:b8:8e:
         ea:ae:2b:77:a4:8e:f9:b7:48:f9:75:b6:6f:00:8b:92:21:78:
         f7:10:16:2d:0d:25:0c:dd:8d:ea:b9:c1:17:40:93:69:b0:9f:
         97:52:88:fe:30:a1:56:b0:19:b6:c2:c0:b9:8d:8b:27:50:6f:
         99:d6:0e:16:bc:06:21:c4:f9:37:ce:12:7c:85:a8:ef:53:1d:
         b6:1b:9a:5f:8d:fa:ac:0b:e7:06:6e:4d:7d:7c:e6:90:d4:d2:
         78:70:b5:6c:1a:ea:fb:aa:eb:8f:35:d3:a2:c7:c6:e2:fa:ec:
         7e:5f:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 14:52:45 2026 by rpki-client