Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ace9b639-493a-3b21-9d98-c2182139ac15.roa
File:                     ace9b639-493a-3b21-9d98-c2182139ac15.roa (raw, json)
Hash identifier:          CtjaVevzieNRbPWcMNb7yHA7B7sDwuWMOP9J4Yjle7o=
Subject key identifier:   E8:0A:2C:B4:76:BC:C7:EF:8E:19:8E:6F:6C:32:EC:F4:21:24:8E:1C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF6BC3A82A608E3811162CA0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ace9b639-493a-3b21-9d98-c2182139ac15.roa
Signing time:             Thu 06 Aug 2026 14:25:02 +0000
ROA not before:           Thu 06 Aug 2026 14:25:02 +0000
ROA not after:            Wed 04 Nov 2026 15:25:02 +0000
asID:                     396190
IP address blocks:        23.19.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:6b:c3:a8:2a:60:8e:38:11:16:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:25:02 2026 GMT
            Not After : Nov  4 15:25:02 2026 GMT
        Subject: CN=f238d1c6-1dfc-4792-8e99-8a3c9a2af4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:01:18:d0:e4:80:2f:17:8e:c6:c6:e5:9b:
                    bd:36:db:ef:9e:a9:37:d7:b2:37:29:cf:ba:59:44:
                    29:3b:96:15:b7:00:ee:0e:84:51:0a:60:57:96:8e:
                    b7:9c:c8:0e:b2:52:d2:12:78:38:c7:a2:8e:8e:40:
                    83:85:eb:64:ab:ec:36:f5:7f:84:10:97:9c:cf:c8:
                    57:87:27:4e:e0:d2:2f:89:ed:88:ca:c8:cd:60:8c:
                    32:6f:b6:0a:0b:67:fb:a6:5c:45:90:44:bf:fc:d9:
                    62:eb:7c:88:63:69:2a:b1:1d:31:82:34:99:cc:86:
                    80:ba:9c:28:ac:4a:e9:e3:83:88:66:18:57:32:10:
                    d7:66:73:80:86:d1:04:21:53:42:19:e5:5f:cb:75:
                    a6:ad:cb:b6:92:23:8f:1f:c2:33:75:b1:3d:93:18:
                    d3:42:7a:8f:41:93:be:ce:02:11:2d:76:d1:12:aa:
                    b5:23:29:1d:35:d3:03:07:2e:73:c9:b9:c3:ee:d2:
                    d4:20:6d:12:11:d0:c3:57:ed:f4:42:e5:2d:3a:55:
                    e6:a4:9a:8a:35:9e:2b:25:af:7a:87:2e:b2:4b:9f:
                    50:5c:37:22:a4:d3:77:29:42:6f:70:fc:9b:84:1b:
                    1e:0d:71:80:2b:bb:c3:85:80:68:0a:1d:02:31:37:
                    c1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0A:2C:B4:76:BC:C7:EF:8E:19:8E:6F:6C:32:EC:F4:21:24:8E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ace9b639-493a-3b21-9d98-c2182139ac15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:25:34:aa:80:e2:90:a5:c8:ea:6f:56:f5:88:c9:34:78:14:
         f9:b4:b7:d7:a7:40:a8:83:d8:b6:b0:db:83:7e:69:74:5a:3e:
         11:e1:e3:49:2b:e8:7a:cc:c8:4a:68:8c:23:a2:ef:30:d3:88:
         5f:7f:54:de:ea:d3:27:4e:81:a2:6f:82:97:c6:67:21:39:15:
         36:0c:06:f0:5c:c0:b8:14:50:57:93:ee:a0:0e:9b:ee:cf:d6:
         c2:c7:68:b9:20:45:84:f0:fb:b8:f6:82:f2:49:8e:f1:9a:f9:
         dc:00:06:a1:9a:06:66:a7:98:c6:3c:b1:27:e9:b8:89:74:49:
         8c:dd:c0:24:91:b8:63:7f:29:f1:a6:be:89:05:f9:a5:80:ac:
         b2:da:e3:27:76:bc:af:28:ef:4a:ae:c5:52:9a:ec:98:38:96:
         ef:60:e3:64:5e:1e:82:b2:76:96:ed:54:92:16:f2:d5:c6:af:
         1a:b8:98:d3:3f:6e:f7:da:17:80:26:e5:15:71:fe:5b:0e:e3:
         55:68:aa:3b:e5:80:96:f8:39:66:9d:da:58:45:10:6a:51:23:
         07:df:ca:7d:e6:a9:44:0a:77:36:41:0d:a5:6f:52:d3:6b:de:
         8c:17:4e:bd:b3:f7:e7:35:d8:12:f2:31:73:fd:75:e8:1a:26:
         3c:56:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:32 2026 by rpki-client