Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa
File:                     2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa (raw, json)
Hash identifier:          TJJPdEe3q2iUvp7UUspqVsv64g3dexve676h9yIheGs=
Subject key identifier:   5A:2C:26:D0:32:31:31:15:8F:9E:8D:CA:28:07:BE:DE:1D:D1:3C:11
Certificate issuer:       /CN=f59a5af4-2483-44fd-8539-cacfd54edc45
Certificate serial:       010D0C9F4328584E2D9EFAA554A0DFDC915AAD00
Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     394352
IP address blocks:        192.219.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9e:fa:a5:54:a0:df:dc:91:5a:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ae6f95f4-e048-45a5-a618-18a1f8186fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:1f:9e:a8:84:fb:52:a9:2a:5b:02:05:1e:
                    13:a4:1a:14:27:77:5e:fa:4b:b1:9a:1d:0b:87:26:
                    67:1d:ad:86:49:f4:65:eb:73:f0:03:d4:97:7b:bd:
                    ff:8e:66:ad:7a:60:c1:61:db:67:be:86:d6:5b:92:
                    e8:1f:c0:44:e5:fd:fa:a4:ad:5a:a6:ba:99:3f:e1:
                    34:73:d4:a0:aa:11:03:29:c7:05:9f:69:50:91:18:
                    f2:a6:67:17:70:8a:92:03:b6:2c:40:bd:cd:e6:51:
                    44:9d:54:44:75:db:17:c2:65:12:da:2e:fa:da:8b:
                    09:cc:bf:fb:9e:f2:39:f0:ce:5d:1a:2a:94:a9:a6:
                    41:20:57:16:e8:be:40:59:7a:ba:dc:63:f5:7c:27:
                    d1:4b:ca:ec:a0:77:47:dc:f8:cd:57:83:52:bd:39:
                    46:4e:4a:99:29:7c:50:6a:a5:59:1d:43:99:32:15:
                    b9:ba:48:b4:a9:b8:66:61:44:e3:ab:9f:61:58:16:
                    75:6a:42:bf:fd:66:ef:02:02:ea:38:c1:8c:bf:b6:
                    d8:54:03:fc:27:d5:30:98:4d:63:6c:73:61:d4:2c:
                    70:5e:17:08:e3:02:6b:60:97:8f:74:31:90:17:bb:
                    87:d0:62:10:c8:b2:fe:fb:91:1a:23:09:8c:39:24:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:26:D0:32:31:31:15:8F:9E:8D:CA:28:07:BE:DE:1D:D1:3C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/2f394fd0-b0ee-32eb-b594-bc26c3363f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:30:8b:74:54:30:05:ac:9a:3c:16:57:a4:d0:9c:a9:4f:
         7d:33:9e:c1:76:a6:21:18:4f:ca:1d:98:75:45:97:ff:10:49:
         b1:e8:28:db:cb:77:66:94:96:c5:2f:c9:2c:54:a7:16:30:07:
         f2:2b:2a:74:8e:e8:13:01:6a:0b:91:33:a3:8b:5f:e2:4b:3a:
         3e:c0:f1:e0:09:66:e4:f9:5c:4d:0a:0b:0d:89:90:91:0f:be:
         91:27:e9:48:a4:3e:db:ff:fe:68:b8:c8:5c:63:c5:82:1f:f3:
         ef:5f:03:9e:08:cd:c3:3c:5f:6d:de:7e:ca:62:3b:19:9f:46:
         6f:96:75:72:29:eb:17:eb:1e:d1:f3:65:e8:17:93:14:2e:13:
         3d:35:e7:4c:bc:d2:da:1b:19:20:e8:8f:9e:6d:90:64:e9:59:
         4e:35:3b:aa:29:fa:51:30:c6:3d:fd:da:3e:c4:3c:f5:7e:69:
         58:2f:f7:a5:a3:cf:b9:12:86:72:59:4c:e8:f7:58:72:2d:bb:
         82:30:65:1c:f0:3d:e7:af:5b:64:c7:f0:ca:0c:49:2b:8b:9a:
         6b:f2:76:70:19:63:3c:70:92:ad:16:77:c7:9f:f5:2e:ac:bf:
         43:d7:ef:41:39:27:ed:fb:ff:4f:02:29:9b:13:9d:38:bf:a3:
         32:3a:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:23:45 2026 by rpki-client