Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b19f07e6-d5c0-3817-948b-33a5e28d126d.roa
File:                     b19f07e6-d5c0-3817-948b-33a5e28d126d.roa (raw, json)
Hash identifier:          bU7kqdXo8CLkyrvxC+RKQkkgHvAAUce1igaotSfrsKk=
Subject key identifier:   7F:D9:61:32:96:9C:DB:D4:6A:66:22:38:C7:3F:0B:1F:68:FD:11:2D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B979DD743479BC514520
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b19f07e6-d5c0-3817-948b-33a5e28d126d.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     7203
IP address blocks:        23.19.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b9:79:dd:74:34:79:bc:51:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=18812d29-aac9-4776-8b7c-863e6b043f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:8a:f5:99:fb:56:a1:a2:1d:ac:58:98:37:
                    1d:cb:fd:fb:79:63:e4:0d:4b:a6:46:3a:4f:dc:94:
                    3c:81:51:48:c6:ec:d9:19:ca:5d:98:8f:13:cf:c1:
                    d5:22:1c:a4:74:47:c1:aa:b2:90:85:15:5a:3b:65:
                    42:bc:3c:27:7c:2e:a2:1e:37:1a:3f:1e:72:f3:60:
                    b9:45:3b:60:71:75:0e:64:ea:e6:be:aa:b4:54:a8:
                    09:10:eb:92:6e:18:d8:e1:a8:bc:60:ae:06:50:38:
                    9d:82:3e:22:7f:41:79:4e:8f:43:2a:6f:49:48:e8:
                    79:f1:b3:04:e0:99:10:db:77:d3:f9:6c:71:34:cc:
                    5f:b8:5f:d6:b8:54:2c:5e:a9:3d:6a:db:76:d0:bf:
                    7d:ea:a0:06:ae:41:6f:7b:9b:b7:df:cc:ad:59:89:
                    d4:b5:87:c6:6c:30:f7:b9:28:c7:eb:cd:58:a8:54:
                    d7:39:76:45:85:9f:f0:f6:47:8b:70:84:6d:61:22:
                    99:b2:de:0b:e4:88:46:0d:99:4f:e7:67:a6:c6:42:
                    ac:41:d5:9d:89:ba:10:bf:49:c7:32:ad:60:dc:30:
                    a8:b8:d1:4a:3f:9e:94:86:07:9f:03:92:8e:f8:4e:
                    59:4b:83:87:5b:ca:10:bb:02:30:12:94:6c:8c:f6:
                    88:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:61:32:96:9C:DB:D4:6A:66:22:38:C7:3F:0B:1F:68:FD:11:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b19f07e6-d5c0-3817-948b-33a5e28d126d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a8:d2:3f:72:3f:3e:6b:e9:7d:43:59:d3:33:07:ad:25:9a:
         fd:d7:a9:6e:75:c3:35:88:5c:85:40:d6:b5:79:7c:cc:ca:03:
         c5:04:89:f3:59:0e:00:f6:51:cd:29:37:a0:d4:7a:4c:c3:5c:
         f1:c8:00:6e:9d:81:9d:f0:bd:53:22:f5:69:d7:74:98:76:c7:
         00:4d:f0:55:ee:85:c7:a0:24:44:6c:46:43:6d:e7:af:2a:05:
         19:23:3b:d5:10:77:72:e3:09:90:ed:44:b7:80:99:ea:0f:b5:
         c0:28:16:77:cf:e2:0a:73:29:e0:22:a0:49:23:4d:b5:fb:57:
         65:fd:03:8f:3f:dc:d6:8d:a8:09:2e:78:1b:f8:76:f1:ed:4c:
         67:6d:9d:01:3b:ea:b8:3f:87:0c:07:b0:93:63:7b:1a:19:b8:
         6a:de:e6:6a:8c:00:b2:44:20:87:9e:14:6e:21:9f:7d:24:e3:
         c1:17:5f:52:db:ef:47:5a:b0:b5:70:1a:86:d8:da:b9:6f:a3:
         1f:f1:eb:66:b7:c6:7e:fe:02:28:9d:6b:08:e7:8f:ff:91:cd:
         0f:7b:b8:4e:cb:5f:f8:b4:90:ef:a0:28:c4:0a:59:ce:cc:11:
         d3:23:f4:32:7e:e4:16:e3:0e:61:43:53:e0:11:99:80:00:46:
         68:5a:7d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 12:58:49 2026 by rpki-client