Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ace9b639-493a-3b21-9d98-c2182139ac15.roa
File:                     ace9b639-493a-3b21-9d98-c2182139ac15.roa (raw, json)
Hash identifier:          Gv2FGQK5sEpoO+Lfb0XsZ1XBcGFH9/zDbvr+nJcQrr0=
Subject key identifier:   6D:62:D4:7C:05:43:15:F4:CB:44:A9:A0:51:14:B6:E8:D4:C2:FB:A5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B4A80A06D468A2EBBA00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ace9b639-493a-3b21-9d98-c2182139ac15.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        23.19.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b4:a8:0a:06:d4:68:a2:eb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=04d0a6bc-b3e1-4e82-8abb-429a4dddcda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:88:8e:1f:8e:8b:f1:4f:f0:e5:88:26:57:
                    de:ef:c6:39:e9:b8:ac:2a:78:ee:89:2c:38:aa:67:
                    cc:9b:c6:7b:f3:35:9d:b2:91:df:1a:14:8c:8c:ad:
                    63:03:20:97:e2:74:e9:f2:2d:77:12:9f:94:25:de:
                    83:8b:9b:0c:c3:77:33:0c:f1:db:94:91:af:49:28:
                    e6:cf:42:b8:d7:ee:43:66:0c:13:25:33:72:eb:2d:
                    8f:28:6a:9b:c6:97:0f:4a:91:a9:d2:6a:5a:ec:e8:
                    8b:38:2c:40:ba:62:24:d3:63:28:57:2d:30:4b:5a:
                    02:94:be:2a:cf:e7:c4:93:c9:50:cb:d8:26:f1:60:
                    bb:7e:d5:0f:f6:1b:74:31:13:f3:32:2c:6d:ad:72:
                    a3:ce:10:44:42:b7:c3:47:2d:df:6f:f2:17:38:db:
                    bf:64:c5:fc:97:4e:53:cc:7d:8e:9d:2d:58:24:3c:
                    a1:71:90:7e:e4:b3:e2:ea:12:0b:f5:4d:06:30:d7:
                    ae:e2:4e:90:0e:ac:c9:3a:80:4c:e4:78:f4:40:b0:
                    02:f5:0c:bd:e4:b1:8d:1f:28:bb:79:9c:89:5e:39:
                    ac:1c:62:86:92:f9:7a:52:b2:6f:c3:50:16:f3:1e:
                    97:ff:90:69:9c:95:0b:8b:d9:94:c2:00:e4:59:53:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:D4:7C:05:43:15:F4:CB:44:A9:A0:51:14:B6:E8:D4:C2:FB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ace9b639-493a-3b21-9d98-c2182139ac15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:46:96:8e:94:55:49:c8:59:42:b9:e6:96:6b:2e:e2:29:b0:
         c3:92:08:2a:e7:ca:12:12:c9:ad:87:81:88:73:14:a7:e3:8c:
         89:1b:da:d8:e2:61:4b:6d:91:21:e4:51:e4:68:32:cc:dd:bb:
         a6:46:bb:70:32:69:ea:79:cb:17:d2:f3:7f:67:fc:25:9b:f3:
         45:01:98:a3:b0:3a:51:90:f6:36:a9:03:03:ba:cb:37:60:53:
         df:fa:11:46:20:96:43:a5:5a:e5:5e:69:8d:35:8a:76:b3:92:
         db:01:95:35:64:dc:5f:df:b5:39:c4:2d:0d:8e:40:cf:42:6b:
         77:89:cd:90:84:ad:dc:5c:cd:86:5b:fd:3a:4a:85:92:e9:6f:
         ed:85:66:8d:a2:dc:df:51:fc:8a:fe:15:37:26:74:02:48:00:
         8b:eb:f1:c1:10:a5:2b:6b:33:42:1d:68:52:0f:74:60:6c:91:
         26:50:93:40:25:37:57:d0:eb:04:ca:f5:b1:19:fb:03:fd:c7:
         c1:ad:51:6d:ab:45:52:8b:d2:bf:47:2a:16:28:da:65:9d:bb:
         61:f5:fe:0e:f9:73:12:71:43:64:91:32:60:ab:c0:77:63:f1:
         4d:8e:dc:19:a5:8e:86:02:1a:c3:60:7e:32:e2:92:b3:5e:b9:
         d1:f6:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:11:43 2026 by rpki-client