Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/83e9362e-22da-34f8-964c-a37315231787.roa
File:                     83e9362e-22da-34f8-964c-a37315231787.roa (raw, json)
Hash identifier:          BjTiWc2d7+oLZo35TQXGmYgKgpayQgB/zK3gsHeJjvE=
Subject key identifier:   22:55:AC:41:9A:B3:13:C3:CD:4F:AC:60:19:7B:31:9D:02:71:B6:04
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584D3DFFB3D73D89DD3200D5EA80
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/83e9362e-22da-34f8-964c-a37315231787.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     19637
IP address blocks:        192.19.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:b3:d7:3d:89:dd:32:00:d5:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=e35ba7eb-d51b-40d9-a35d-32b2abe2567d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:1a:b6:67:4b:0c:8e:b1:fb:38:ac:1a:6d:
                    1a:24:b0:52:b4:a9:ac:c5:42:3b:37:f6:48:32:ee:
                    7d:68:2b:20:3e:68:75:f9:1b:52:b0:2e:1b:3f:98:
                    d4:f6:23:d9:6a:af:b0:84:e1:6d:61:ae:94:42:9a:
                    94:66:b6:8e:60:31:2f:41:a8:2a:c0:e9:4b:aa:aa:
                    83:23:6e:a4:ca:f5:d2:1f:7b:23:f3:40:a2:4c:70:
                    f8:d8:14:59:32:ef:0a:b1:4d:2e:44:f1:f4:2e:e0:
                    eb:24:32:cb:6b:da:66:62:0f:19:76:20:0a:06:3f:
                    27:5d:c2:90:d9:63:b3:8e:60:74:d3:eb:f7:cf:d9:
                    d4:15:32:62:46:d8:ab:da:a9:65:9b:bc:9e:11:68:
                    f5:7e:43:3b:58:f1:73:4b:69:7c:86:ed:c4:3e:48:
                    dd:42:6d:5a:75:e2:a0:99:a7:83:d4:a7:59:f6:5d:
                    88:e6:6e:16:9e:e8:9f:16:99:5e:a4:29:3c:a0:1b:
                    05:a7:43:a7:d2:88:49:c3:eb:56:db:d1:3f:fe:fc:
                    f4:50:e5:31:7f:e0:af:51:a9:e8:a1:47:22:e0:c3:
                    0f:c6:ce:9c:0b:fe:60:13:b0:c4:be:91:d2:c7:7a:
                    46:ac:ac:74:08:4d:06:ff:c2:ac:b9:af:30:f1:11:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:AC:41:9A:B3:13:C3:CD:4F:AC:60:19:7B:31:9D:02:71:B6:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/83e9362e-22da-34f8-964c-a37315231787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.19.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:16:2e:a7:5d:73:9f:ca:21:e6:9a:92:d6:57:c6:2c:db:
         61:f9:44:95:98:77:c3:2b:7c:7d:54:a1:e6:82:42:1f:c1:08:
         6e:55:15:ba:a6:e2:80:74:7e:38:58:0c:4e:a6:5b:78:6f:c5:
         2f:ea:a4:d2:03:04:a9:dc:c4:58:c0:ec:99:a7:64:47:57:ee:
         c5:d8:3a:13:e8:e4:cd:bb:de:8d:82:5b:d0:9e:99:ac:61:c0:
         e6:4e:84:f3:65:5e:80:4b:b8:75:58:bf:88:86:ad:11:4a:03:
         44:88:a8:4f:b4:4d:1c:c6:2e:b7:81:44:03:2f:9e:6a:de:d1:
         1f:f9:62:cc:a6:db:f3:18:51:c6:83:11:d1:01:5a:1f:e1:e4:
         10:1e:0d:0a:82:9c:d0:f2:a4:1a:68:0d:b7:05:83:9f:d4:df:
         47:64:f3:e1:c4:b4:74:cc:74:ea:80:33:60:8b:87:4b:e4:7c:
         54:e9:0b:61:68:d2:2f:33:58:00:5e:06:77:3c:73:b4:75:5e:
         43:2f:18:90:b0:de:8a:81:1e:4e:2f:f6:53:37:a3:c5:2b:cb:
         90:db:66:1b:14:e8:16:66:e8:b8:cf:1f:28:ec:41:30:e9:fe:
         b6:c5:19:36:04:b0:4d:68:91:f1:29:4d:52:9f:af:2d:37:c3:
         2f:29:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 15:24:49 2026 by rpki-client