Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/f8348de0-13ed-3eb9-be86-ce3659a72456.roa
File:                     f8348de0-13ed-3eb9-be86-ce3659a72456.roa (raw, json)
Hash identifier:          0xGx0Zy8Ml98xbowEyLxrufTyrJxdG/6Bwp2GIZNrKg=
Subject key identifier:   64:45:2E:7E:4C:2B:9D:87:A8:12:BE:8C:6C:3F:B5:30:F1:F5:CF:55
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584E4C5482C438AFB655C80A3180
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/f8348de0-13ed-3eb9-be86-ce3659a72456.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     25808
IP address blocks:        47.19.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:82:c4:38:af:b6:55:c8:0a:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=f5de83e1-c127-43ba-8ff5-9223db264d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:3f:cc:cc:e4:47:03:c3:aa:50:fa:f3:29:
                    99:ae:6b:68:90:ff:b4:77:a4:b7:36:d5:ac:df:66:
                    ae:c6:21:da:7b:72:bd:ff:8c:b0:32:63:a2:5a:31:
                    23:44:5e:8f:93:43:99:a7:3b:d7:75:0c:65:f9:68:
                    27:70:ea:9e:7b:b5:39:af:3d:f4:b3:59:b0:2a:c1:
                    33:4f:1d:a8:87:99:82:a4:a5:9a:bc:66:a2:45:f6:
                    03:0d:80:12:e0:bd:3e:d4:0f:43:ba:cc:a1:37:09:
                    3c:48:82:d9:8a:f3:e0:7e:db:27:5c:6f:94:f0:92:
                    6f:fc:e1:0a:57:aa:9b:fb:79:2c:51:21:db:79:c0:
                    55:e0:64:af:1b:d3:f8:dc:c1:28:20:cb:aa:22:5a:
                    fd:36:40:1e:33:76:c1:c1:4a:95:9d:26:a8:e9:38:
                    09:e4:62:30:70:4c:9b:d6:6e:a4:8c:be:b0:d5:cd:
                    81:3b:dc:96:a3:25:e0:d6:1f:d6:1e:46:26:6f:a2:
                    a1:c2:e2:96:78:d5:ec:f6:9e:65:5d:0b:c4:63:86:
                    bb:b8:09:c7:61:22:ac:13:75:1c:c8:2b:2b:9e:01:
                    6a:29:9c:f1:35:78:6a:86:80:f0:8d:b7:24:39:8c:
                    c1:21:b8:b7:e2:6b:2e:49:dd:ab:85:49:9b:36:5f:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:2E:7E:4C:2B:9D:87:A8:12:BE:8C:6C:3F:B5:30:F1:F5:CF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/f8348de0-13ed-3eb9-be86-ce3659a72456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:19:8a:fc:d1:e5:9c:78:02:93:72:f6:fe:bb:af:30:2b:3e:
         70:a3:bf:a3:10:6f:84:cb:42:ed:80:e1:1c:eb:0e:4f:1e:b8:
         af:4f:a3:94:11:09:59:02:6a:d3:89:8a:0e:b4:e1:f0:d7:77:
         85:44:41:ff:72:55:db:d8:8d:f2:07:83:98:61:97:cb:37:3b:
         c6:47:7c:e8:0c:ab:c2:33:ff:b8:f7:c6:40:93:99:05:8a:5c:
         0c:a0:59:45:b4:83:ed:35:f5:a9:52:25:9e:74:ff:29:ba:70:
         d6:91:fa:00:bd:11:0a:16:83:8f:91:04:4c:ed:44:5e:1d:a9:
         f4:20:75:ce:5b:f2:4f:3d:a1:41:ce:46:cb:2f:4a:5a:c5:4b:
         72:b5:c9:04:17:d6:52:18:da:88:ab:1c:0b:65:1d:ed:54:5b:
         17:67:65:db:22:1c:69:b2:ec:f8:74:bd:ed:8c:47:de:32:a4:
         a7:21:7e:f0:17:75:09:ca:d7:48:68:4d:d5:ba:ca:3c:78:c4:
         dc:18:13:93:93:40:92:6d:3d:77:ff:fd:b0:43:55:b2:de:12:
         d5:ae:c1:c4:d5:f0:ae:28:4a:4c:2e:de:f8:a5:fd:af:10:21:
         19:e7:77:cf:fb:fd:2b:af:79:b6:bf:e7:42:c1:15:8a:69:8c:
         e9:f7:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:08 2026 by rpki-client