Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
File:                     2436cc83-a62c-3742-950a-c8c1fdc678de.roa (raw, json)
Hash identifier:          6GurhDJ+rOTC1GEQ+BKYwhOb/ZhTCdLQWC2dVAsAeII=
Subject key identifier:   70:F0:C9:46:CD:08:58:97:28:E7:1F:D3:AF:20:29:E8:D4:78:61:DA
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584EDC91E471301D33C306CD05C8
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     19830
IP address blocks:        144.249.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e4:71:30:1d:33:c3:06:cd:05:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=7715b721-a880-4cb0-ae39-cfd45aa241a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2e:b2:45:28:a3:29:e5:06:81:a9:5a:cc:5e:
                    22:7a:99:1a:6f:79:ee:06:ae:a9:e0:03:37:50:93:
                    46:e2:7d:71:93:18:dd:8b:82:62:57:7a:cf:7f:52:
                    fc:8d:59:15:26:d4:de:0f:6a:a5:62:00:e4:d0:e1:
                    40:5e:2f:d3:57:23:e0:56:42:ff:fa:ba:ac:c3:b3:
                    bc:43:11:bf:ea:d5:9e:df:1f:e1:4b:96:e6:c1:62:
                    5a:07:63:99:ee:96:08:47:71:99:dd:08:40:c3:50:
                    ee:59:88:8d:f2:38:7c:89:6b:da:19:d3:73:bc:4a:
                    09:a1:91:00:17:a9:01:51:17:5f:09:d8:2d:64:44:
                    a5:43:d3:f3:16:6e:3c:7b:ac:e4:d5:ec:b2:2c:98:
                    85:b9:45:ac:76:38:d8:16:58:a2:ef:e6:2d:82:2a:
                    93:08:7c:e3:0e:88:3e:bf:54:9d:6a:d8:55:16:c6:
                    13:04:b8:f1:ba:0f:21:9d:13:ff:0f:d1:a1:ba:c8:
                    43:8f:20:a9:3a:f4:fd:00:d2:6b:8c:ce:d5:ab:d8:
                    b6:db:48:13:02:09:e0:36:c3:c1:ef:8a:0a:80:bf:
                    0f:f4:b4:d2:e7:cd:fb:ea:a9:bd:29:c7:94:78:04:
                    6e:7f:35:3e:1a:73:37:22:16:03:0c:70:b2:ad:e0:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:C9:46:CD:08:58:97:28:E7:1F:D3:AF:20:29:E8:D4:78:61:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.249.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:86:36:f8:0d:67:91:c8:a4:58:b2:49:dd:e9:50:ed:db:
         c7:c5:13:e4:68:e2:c6:75:97:9a:8a:97:4a:ee:38:95:38:a2:
         49:ac:6b:e9:b7:e4:c0:5a:6f:f6:ae:f6:c1:c5:9d:9c:71:dd:
         0e:6d:26:df:a9:e5:54:d8:32:4b:88:51:4b:92:ab:66:2e:5c:
         28:4a:9b:e7:99:2c:7c:5f:fa:1e:0a:cd:d7:73:1a:b7:99:19:
         25:75:e5:42:bd:52:5b:a8:06:af:3d:f6:ea:b3:ae:43:30:1a:
         72:c9:50:01:bc:18:d8:71:58:67:af:d3:a3:6f:f7:c1:98:bb:
         9a:62:7b:3a:62:b7:ab:29:be:94:1e:dc:08:2f:2c:ca:da:5a:
         d2:16:92:6c:50:27:b0:a4:41:13:56:b7:c5:86:25:e8:08:d4:
         b0:c4:04:43:e4:e6:14:a0:27:b7:30:a0:e6:ca:39:c5:da:81:
         d6:27:94:88:42:42:7f:6b:0a:16:36:74:91:1e:e7:6a:11:64:
         dc:fa:87:ed:92:04:56:66:55:b3:7c:98:97:e3:d4:b4:ed:32:
         25:e6:7b:2b:79:99:50:d5:32:48:4e:c7:af:fe:11:9c:3f:ab:
         84:e7:f4:90:af:ad:4b:9b:bf:28:fd:54:42:12:ad:5e:a5:33:
         de:76:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:25:22 2026 by rpki-client