Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/60346a02-0b0a-3e02-be9a-f2a2fecfa411.roa
File:                     60346a02-0b0a-3e02-be9a-f2a2fecfa411.roa (raw, json)
Hash identifier:          Up4fF1HJDPYN4zEa5CnM3MaNBUTYY6f5LcdL0rjOYR4=
Subject key identifier:   02:02:39:AE:91:2A:01:2B:46:8B:11:7A:1C:C4:99:A8:8A:B0:57:A6
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584E4C54AECB0D3A8502155C7700
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/60346a02-0b0a-3e02-be9a-f2a2fecfa411.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     46183
IP address blocks:        47.19.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:ae:cb:0d:3a:85:02:15:5c:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=216728ea-0e54-46ad-86f3-335e8c7ff96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:8f:18:33:68:45:50:8e:0e:4c:96:35:7d:
                    06:91:89:9e:ec:21:f6:6e:12:38:3a:f4:17:1a:f3:
                    8a:54:8c:5b:67:fd:26:6d:85:5d:2e:e3:20:bc:85:
                    e6:01:6c:21:89:f2:f1:e4:c6:fd:49:97:26:b9:3a:
                    81:2e:a2:ea:9e:1f:87:2d:73:85:2a:c8:b7:22:e8:
                    e2:39:c7:6e:a7:8b:6c:87:06:24:f8:57:af:5f:97:
                    e2:65:97:a4:0e:eb:d3:fe:e8:b7:ce:a3:34:95:e7:
                    5f:28:5b:37:3e:03:10:5e:61:46:0a:f6:19:b0:b4:
                    33:db:fa:55:61:8d:4a:01:ab:b3:7d:3e:89:81:58:
                    91:ff:c2:45:a9:65:ac:d2:b7:ec:b6:85:39:ea:7f:
                    6b:57:37:f1:f7:31:d3:8f:35:8c:ab:e0:be:c9:c5:
                    cd:3e:f8:a8:98:b1:e8:70:5f:f6:b7:d4:ef:9b:90:
                    a3:32:ab:28:9e:6d:75:f1:71:79:92:6e:1c:29:23:
                    e0:2d:84:57:2d:41:e2:f1:dc:64:3d:a4:a1:50:d4:
                    1f:ff:c0:c7:fa:c1:09:8b:18:f6:5b:f3:20:eb:b4:
                    96:4a:19:b9:79:f0:14:b2:34:6e:c1:b9:dd:8d:ee:
                    df:3d:8f:52:40:42:d9:94:3d:d6:92:e7:01:6c:77:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:02:39:AE:91:2A:01:2B:46:8B:11:7A:1C:C4:99:A8:8A:B0:57:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/60346a02-0b0a-3e02-be9a-f2a2fecfa411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:8b:a3:fd:d1:e4:18:44:15:33:80:cf:a6:65:ef:33:0f:
         79:79:25:56:73:21:a4:a7:9b:43:a7:0e:5f:9e:ef:18:fd:e2:
         46:59:a1:c2:5e:12:76:b9:d0:cf:21:f3:89:c2:03:8b:1f:81:
         ea:c3:98:48:fc:68:9b:a1:61:f3:4d:64:f3:fb:a4:11:6b:94:
         66:31:99:a7:77:9e:a1:be:db:cc:0b:7f:c0:11:76:4b:f0:f8:
         94:44:8a:44:90:1f:5b:ab:28:98:e2:3e:6f:cb:9c:e5:f2:3d:
         52:78:63:e8:37:d6:9b:08:61:dd:c9:72:e0:98:80:a8:33:5f:
         74:3f:54:1e:79:ad:2b:4c:ac:b4:9a:bd:36:64:4c:d7:f1:5d:
         6a:88:3c:5b:02:27:eb:4a:5a:6c:39:86:ee:25:2e:8f:c4:ef:
         47:9f:2f:c0:5c:2c:b5:be:9b:99:3e:63:d2:1f:b2:64:7e:81:
         9a:a6:11:ab:ba:f7:a3:12:09:20:fb:5f:93:88:57:06:5e:70:
         ff:b7:ae:b4:84:d8:84:b4:85:8d:b6:9e:52:64:5a:d0:a0:0c:
         58:1d:0c:b1:e6:9e:1e:52:7a:34:ea:2d:d0:23:52:46:4e:8c:
         a4:d6:4a:ad:6e:21:e0:b0:56:c2:e3:73:25:5e:4a:dd:fb:35:
         d4:57:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:27 2026 by rpki-client