Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d9823c16-daff-3cfa-94c6-3baf96f50e76.roa
File:                     d9823c16-daff-3cfa-94c6-3baf96f50e76.roa (raw, json)
Hash identifier:          LlFlhd8qPhcf06FpE9AfuRdHSueBX1NN2YvDOeGOnr8=
Subject key identifier:   14:88:7D:04:8D:4C:8A:F1:43:DF:48:71:D8:82:94:BD:26:F6:72:0B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC2C50A2236AD6BCE62F3A00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d9823c16-daff-3cfa-94c6-3baf96f50e76.roa
Signing time:             Wed 05 Aug 2026 10:29:46 +0000
ROA not before:           Wed 05 Aug 2026 10:29:46 +0000
ROA not after:            Tue 03 Nov 2026 11:29:46 +0000
asID:                     27411
IP address blocks:        23.19.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:2c:50:a2:23:6a:d6:bc:e6:2f:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 10:29:46 2026 GMT
            Not After : Nov  3 11:29:46 2026 GMT
        Subject: CN=73554d11-5f95-4e80-b94f-7d50bcb065b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:9c:4c:b8:f7:5b:74:85:9b:62:a1:55:ff:
                    58:05:02:c5:69:1c:54:6f:e9:6d:0f:81:b5:d2:27:
                    51:4b:df:6b:05:74:78:44:c2:dd:2b:04:39:b8:86:
                    06:26:fd:75:37:2d:0e:3a:5d:dd:a2:85:48:79:a9:
                    ec:c7:7b:b7:2b:25:e2:b9:20:01:7b:af:d2:15:bf:
                    38:34:00:5b:c7:9b:28:f4:99:9f:ff:04:4e:1f:08:
                    ca:74:9f:e9:28:94:23:f5:0b:24:42:d3:ad:f8:a8:
                    84:90:25:a3:a3:0f:fd:47:26:e2:69:53:b3:cf:07:
                    0a:f4:89:91:cf:f4:1b:f0:57:b9:f7:3b:03:34:4d:
                    6c:f1:3c:38:6d:f8:15:35:98:a4:ee:62:79:83:15:
                    c6:55:6a:6d:dc:b4:d4:dd:4b:94:d6:e4:b2:2d:33:
                    08:39:81:76:29:f3:00:56:2c:66:2c:c3:2b:5d:69:
                    38:5b:ea:4c:0f:31:63:26:97:0c:26:e0:d8:12:55:
                    14:9c:09:b5:52:23:30:67:aa:5a:0b:11:2a:8e:62:
                    97:02:01:1c:39:a7:1e:39:d3:13:3e:21:dc:bb:4d:
                    2f:f1:b2:6e:2e:98:d3:a2:73:12:8e:ee:7f:5a:05:
                    31:70:f3:0a:a3:1c:c3:5e:a5:f9:64:69:0c:88:09:
                    e3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:7D:04:8D:4C:8A:F1:43:DF:48:71:D8:82:94:BD:26:F6:72:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d9823c16-daff-3cfa-94c6-3baf96f50e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:51:cd:71:81:67:c3:62:c6:82:56:c2:28:fb:a8:4f:8d:7e:
         b4:28:18:20:48:d8:29:32:0e:55:cd:5c:73:42:e5:6e:16:98:
         c3:78:de:05:06:7e:1e:85:b5:e7:db:2e:87:36:c1:70:21:6f:
         a0:c1:11:a8:a4:b7:39:f9:b8:67:01:38:f0:a6:07:9d:28:0e:
         b7:d4:7f:95:3c:e1:3a:a4:ff:66:64:d2:de:a5:d7:c8:48:ad:
         2d:1c:58:76:7b:2e:3e:72:e1:00:26:5b:9d:3b:61:21:73:1c:
         36:ee:ce:84:15:25:34:66:98:da:16:12:0a:09:71:06:ed:15:
         11:00:f1:c3:58:88:1a:aa:5f:be:3f:26:85:0d:ef:e3:a5:c9:
         19:18:d0:ac:70:76:b9:49:60:ed:95:ce:51:bc:8a:76:42:98:
         58:5a:c4:0c:9d:d0:e1:63:c0:a3:2c:ba:eb:b8:9a:31:89:23:
         f4:2b:2d:1c:d6:02:57:98:fe:62:47:23:1e:ca:0f:de:09:94:
         3a:cc:95:95:7e:2f:6c:fa:1a:69:5f:e2:78:38:5f:47:aa:de:
         ae:76:16:c9:41:c4:99:ad:59:96:02:89:0f:c2:d1:39:6b:c3:
         34:71:f6:d8:b1:b9:5b:a7:de:ee:1e:34:a8:0f:7b:58:13:a2:
         f4:6c:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:01:27 2026 by rpki-client