Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/df2f71f1-3537-3ba4-9b02-ecd20139465a.roa
File:                     df2f71f1-3537-3ba4-9b02-ecd20139465a.roa (raw, json)
Hash identifier:          OVG5D1+QstXBBdWtPUvnI7pBq9Wvn86eQdkLr1ZH7Xg=
Subject key identifier:   B0:2E:DF:3D:54:BB:39:41:6F:0D:B0:74:CA:7A:95:5B:65:83:8E:55
Certificate issuer:       /CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183
Certificate serial:       010D0C9F4328584E3E5F17476193758287F23A80
Authority key identifier: 1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/df2f71f1-3537-3ba4-9b02-ecd20139465a.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     19184
IP address blocks:        192.231.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:17:47:61:93:75:82:87:f2:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea97c31c-83d2-4e24-a4f4-9d69b3ffa183
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=85934c70-8428-454c-b0e8-47effb854c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:e2:dc:c1:c7:06:70:d4:ab:af:95:ab:f8:
                    9d:0d:27:44:45:32:b1:da:5d:2e:c5:c2:a7:75:b9:
                    bd:87:b9:a8:da:02:0a:dd:a0:1d:c6:37:68:ff:71:
                    4b:27:9a:28:44:7a:19:bd:31:43:f4:f5:ab:7a:55:
                    59:fa:22:66:f5:66:d4:97:fa:ed:30:78:ba:7e:ec:
                    de:46:48:a4:2d:75:4e:0b:7a:0b:ee:06:41:ff:51:
                    45:05:bc:4d:16:59:ec:62:ea:27:3c:29:55:da:48:
                    31:ad:38:b2:04:9f:03:d5:93:3e:8f:ff:cf:b4:65:
                    62:62:45:54:3b:c3:82:df:88:f3:a5:04:42:3e:7d:
                    26:33:ca:78:ce:78:ae:f9:1c:a2:da:f2:49:e3:e0:
                    30:5a:b5:f6:d7:58:e6:ce:bd:84:6d:63:f9:db:20:
                    f3:f4:35:a8:70:d7:a9:99:b3:e6:58:4c:43:f3:30:
                    d6:22:c3:2f:1d:c6:a9:a7:dd:51:03:95:38:39:03:
                    8a:75:9d:4e:1a:6f:c9:c8:58:22:23:89:f5:85:e2:
                    40:67:d6:3f:d1:c2:57:d1:79:40:06:cb:61:18:c6:
                    bb:62:86:69:dd:bc:cc:7a:07:5d:ea:c4:7b:ab:dd:
                    63:b7:23:0f:77:ff:a6:8e:a6:64:bc:4a:98:97:4e:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:DF:3D:54:BB:39:41:6F:0D:B0:74:CA:7A:95:5B:65:83:8E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/df2f71f1-3537-3ba4-9b02-ecd20139465a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.crl

            X509v3 Authority Key Identifier:
                keyid:1F:79:08:FC:0E:CC:B5:0D:93:FF:2B:78:65:57:D1:06:B6:2E:85:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ea97c31c-83d2-4e24-a4f4-9d69b3ffa183.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:48:cd:3b:df:a8:62:b1:f1:4a:74:f4:31:5b:c2:de:d5:
         ab:99:4f:86:13:d8:ae:4c:fa:d4:bb:c1:3b:af:6f:8b:4f:87:
         eb:6f:03:c1:e7:91:88:e0:1d:70:ea:a4:aa:e8:9d:0a:a4:97:
         5a:14:6d:2c:6d:3d:3a:b5:84:62:b3:52:90:00:81:2d:dd:fa:
         6a:05:85:53:0d:93:93:2e:98:70:8f:f7:d5:4f:03:81:20:33:
         fb:77:41:bc:02:7c:d8:95:20:62:7e:52:17:85:db:61:00:50:
         df:5a:61:51:19:84:f1:8f:ce:90:55:72:7e:1a:25:9b:37:a1:
         99:56:0d:d2:e1:02:1c:3d:bc:9f:4c:e9:b9:30:9b:53:20:dd:
         c9:32:f9:8e:3f:84:1e:41:fe:6a:e3:da:db:a8:4e:15:67:4f:
         50:7e:95:52:bd:f4:13:42:1b:cb:ac:aa:85:09:a6:2b:10:61:
         31:ec:52:3d:2f:c4:ba:ed:d8:ba:82:f5:cc:d4:1c:a2:96:2f:
         ca:a8:f1:aa:41:ea:d4:dd:a7:c0:2d:b7:8d:87:1b:7c:d1:e3:
         44:46:83:8c:49:d1:90:f5:e4:6f:ef:fa:d8:3d:4e:cf:3d:e3:
         76:1c:ca:2c:03:e2:5d:e9:d3:ce:55:97:32:8a:1a:43:57:ef:
         e8:ec:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:39:28 2026 by rpki-client