Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa
File:                     de537886-8589-3acb-bce9-e8d5e7561ee1.roa (raw, json)
Hash identifier:          cJsomgJlUMdRouowqkffaeFuA/Aad5bUpuMFCDqgOJY=
Subject key identifier:   90:0F:C9:46:6D:78:DD:AE:C9:2B:59:2B:DA:B9:24:2D:67:F9:31:7D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C759C466CA304AB572DA00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     60781
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:59:c4:66:ca:30:4a:b5:72:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=6988ef84-2017-4a4e-8dfb-845901664de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:fe:29:c3:f9:0a:9e:14:b7:24:0a:ff:4a:
                    0e:bf:80:11:93:a6:37:40:9b:64:56:7b:d5:be:c1:
                    f8:0f:bc:1e:4d:5e:90:c6:e9:52:d7:b6:77:a8:09:
                    81:ec:8a:21:ae:a7:bd:fb:c9:af:40:5c:a9:86:af:
                    81:e8:24:9d:ad:9c:1e:a2:b8:c9:ba:b3:4d:19:b0:
                    ef:67:95:ce:fa:9b:a5:7e:27:d4:15:70:c5:c1:18:
                    81:b8:1e:53:60:6b:ff:6a:18:d1:62:a6:3c:40:37:
                    10:be:ca:57:62:25:6d:43:0d:eb:36:b0:0c:5d:4e:
                    d6:08:d5:bb:9f:27:7a:ce:58:69:bb:a3:2f:7e:77:
                    14:5f:18:70:ab:fd:59:f0:e1:ca:0b:84:c6:26:4e:
                    de:38:a1:00:d0:02:6a:25:47:ca:a7:65:f2:06:a5:
                    58:34:33:5d:76:5d:66:2b:ae:a0:ac:b1:52:38:0c:
                    19:ec:95:1b:56:94:3d:89:3b:04:b2:dd:de:49:2c:
                    7e:26:32:d9:0e:e8:0c:b3:38:d0:bf:f0:64:49:ff:
                    d1:f7:2f:e9:66:a2:f8:a2:f3:6a:b4:67:22:33:ea:
                    cf:ef:1f:71:fa:23:4e:63:47:10:eb:9c:5e:4f:5b:
                    3d:d1:85:f3:b9:b4:71:ed:db:47:a8:e8:69:b4:e6:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0F:C9:46:6D:78:DD:AE:C9:2B:59:2B:DA:B9:24:2D:67:F9:31:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/de537886-8589-3acb-bce9-e8d5e7561ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:1c:3e:b8:66:d5:de:8f:24:f0:7f:28:c3:33:05:92:9a:
         9a:1b:e3:b2:f9:db:20:78:22:e9:76:49:f6:fd:86:68:ec:53:
         19:20:58:6f:db:5f:f3:93:c5:d9:dc:cf:54:7a:98:ad:93:fe:
         57:35:06:90:c4:7f:5a:00:ec:07:db:94:96:1c:8d:c2:a9:ab:
         e5:2e:32:d5:09:ad:e0:ae:b2:af:f3:96:84:f8:5b:af:33:63:
         08:ba:6a:55:f5:cf:4a:4f:1d:ed:96:1a:cf:d2:a9:cc:ac:87:
         3d:0e:12:18:cd:94:ca:ac:e0:7b:fe:a1:73:a0:ba:d1:40:67:
         3c:9a:c3:5d:17:a3:8a:5d:c5:8e:50:f8:ba:ed:5d:6c:a5:01:
         18:bc:62:a2:e3:e6:3a:84:aa:28:e0:ac:cf:e0:ee:76:d8:46:
         28:34:74:80:88:b9:16:7f:e5:a0:dd:8e:c1:6b:16:7f:cc:f1:
         c3:35:3e:8c:5e:af:c8:15:88:93:c0:69:8c:eb:40:e2:b0:f0:
         59:d3:fd:ee:6a:d9:d0:1f:84:91:ac:3c:31:1f:fe:ed:50:10:
         12:19:9a:2e:88:a6:f3:e8:34:8c:c3:78:d9:36:1e:9b:fb:ce:
         2c:62:cc:00:77:4b:71:d9:b9:47:0c:6b:6b:c1:64:1b:7d:94:
         bb:b1:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:14 2026 by rpki-client