Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3b0a1c91-6081-3623-ab9d-9cf914540267.roa
File:                     3b0a1c91-6081-3623-ab9d-9cf914540267.roa (raw, json)
Hash identifier:          8Shl2nI4Z7ubmvMWUETLZGAdnpeaBK4SLInMI+tLH2s=
Subject key identifier:   3B:D8:B0:B4:A4:39:82:47:56:2A:4F:15:DE:54:BB:31:F6:1C:0A:EB
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584EDC91E0E9032429DE3E7D9C80
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3b0a1c91-6081-3623-ab9d-9cf914540267.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     19637
IP address blocks:        192.19.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e0:e9:03:24:29:de:3e:7d:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=9fccfd60-c674-430d-a863-05abe68441f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:b6:47:17:05:a4:56:34:7b:e2:56:e9:d2:
                    02:1d:8f:c6:d3:89:c5:7f:51:a1:ea:8c:cd:2b:33:
                    fd:7c:a6:19:cd:25:a4:17:fd:5f:8e:4f:b2:23:44:
                    83:d8:e0:ec:75:66:7c:5a:14:c5:c6:27:0e:9a:4a:
                    57:df:90:7b:dd:52:85:22:cd:ca:7d:eb:9e:d3:f8:
                    a0:65:93:df:b2:cf:35:dc:bb:eb:bb:3e:3d:8c:c0:
                    d9:5c:95:cc:af:8c:4a:42:eb:dd:66:96:68:93:ed:
                    aa:d3:30:f5:9b:7a:ab:5d:b7:f1:04:47:89:79:2d:
                    a6:fe:64:e2:0d:81:ad:c7:75:50:25:ec:c4:41:21:
                    a4:1c:c6:1d:84:98:54:f2:63:46:dd:01:a2:75:a0:
                    29:02:a6:06:d9:12:89:21:a8:57:b9:a3:06:f7:09:
                    32:18:09:85:38:60:1d:d8:8e:2c:de:bd:68:8c:64:
                    23:09:67:63:23:e3:5c:3f:90:69:bd:f5:fa:d5:de:
                    21:60:6c:36:5e:ca:80:24:5a:40:eb:92:e0:b9:3f:
                    b3:5b:47:62:a3:98:18:43:df:f8:0c:05:d4:70:38:
                    38:ac:6c:47:73:08:dd:5f:72:d2:73:c3:7f:d2:ae:
                    68:9b:1c:58:8d:51:1a:9b:40:28:cd:61:3a:90:6d:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:B0:B4:A4:39:82:47:56:2A:4F:15:DE:54:BB:31:F6:1C:0A:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3b0a1c91-6081-3623-ab9d-9cf914540267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:4b:77:b8:89:32:c9:be:7c:c0:91:f9:ee:84:43:6b:9e:
         c9:aa:0e:5f:b3:21:9e:c9:49:35:47:5c:e9:d2:30:a6:47:60:
         53:55:51:ed:c3:5f:98:bc:99:83:19:11:d9:d7:5b:7f:08:bb:
         67:61:8f:75:e7:04:88:df:48:d6:00:85:4d:38:d3:9d:74:b3:
         41:c8:98:2a:42:e0:25:d7:7d:a7:68:3f:d5:ba:a8:1b:92:80:
         9b:be:ff:80:41:97:95:ca:20:cc:10:36:b0:0b:1e:ed:31:91:
         43:a0:8b:f8:4d:34:09:4a:7b:07:bd:ae:6c:1e:7c:9a:16:6c:
         33:8b:d6:20:3e:69:25:09:1e:16:28:71:94:0b:ab:8c:1f:8c:
         d2:42:a4:ea:82:23:f7:79:86:0d:96:e1:10:64:d4:59:56:3f:
         59:35:df:38:76:de:73:c0:9f:17:0c:01:ac:6f:1e:24:f8:a2:
         fa:47:cb:92:d9:27:d3:43:5d:e4:11:72:59:52:83:a5:e0:e4:
         47:77:00:bd:c2:1c:95:71:14:59:01:19:a4:35:55:e5:cf:5f:
         f6:19:6e:6f:c4:83:a7:2e:8d:31:54:45:35:5d:3b:44:34:16:
         3e:ec:7b:ad:52:92:8f:32:1c:9c:a6:19:f2:0c:1a:07:98:c5:
         d0:fa:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:30:47 2026 by rpki-client