Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/054eb023-6180-34c4-bf2d-5ad0538099ae.roa
File:                     054eb023-6180-34c4-bf2d-5ad0538099ae.roa (raw, json)
Hash identifier:          yUVfT7+WiOUzd15XELjBvHBn0bh4Rqy0AqifPd7fwSk=
Subject key identifier:   73:1D:35:CB:F5:EA:64:25:DF:60:45:EF:6E:5B:88:E9:FF:74:8B:99
Certificate issuer:       /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
Certificate serial:       010D0C9F4328584D0D426D005FCEA96666BEED00
Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/054eb023-6180-34c4-bf2d-5ad0538099ae.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     10753
IP address blocks:        192.228.19.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6d:00:5f:ce:a9:66:66:be:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=d5c6c1fc-57ca-457a-ad5f-4a8f0a4f5ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1e:4b:ce:7a:c4:8c:fa:b9:67:e3:dc:ec:13:
                    e2:63:62:8b:85:b2:93:77:eb:9d:e6:c8:8c:21:59:
                    c9:00:60:bb:19:1e:52:76:f7:b5:ca:50:44:58:10:
                    38:5e:fa:c9:12:e7:15:d8:09:26:d1:54:2b:45:29:
                    69:d1:8f:02:dc:8b:24:1e:f6:ef:fd:b9:7b:26:94:
                    f0:68:0d:ac:4e:51:e7:ee:1c:0f:49:3e:52:24:83:
                    5d:cf:de:2a:12:77:63:8d:b9:c1:3f:2e:bb:14:db:
                    69:ad:1e:19:e7:bd:44:8e:5d:99:59:3d:9d:ac:87:
                    1b:b8:69:ec:08:b4:93:9f:aa:05:44:aa:01:c9:89:
                    ca:24:e1:f5:18:a1:c5:a3:8b:bd:e9:0f:76:80:d6:
                    27:e0:89:d3:b0:4b:90:c1:22:96:32:8b:e5:9d:70:
                    5a:85:18:dd:f8:ce:3e:b7:d7:ba:b5:02:71:20:c5:
                    43:a7:7b:d1:21:bd:09:41:da:de:1f:66:40:a9:69:
                    d6:e0:c5:25:f3:05:f3:f5:75:2c:21:87:0c:c7:10:
                    82:37:37:93:14:3e:ae:86:1c:db:34:18:0e:89:84:
                    39:90:17:41:c2:35:41:e8:9a:94:24:48:ad:0a:a7:
                    2c:c2:07:de:73:b7:79:4b:6b:c7:b0:81:ad:60:9f:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1D:35:CB:F5:EA:64:25:DF:60:45:EF:6E:5B:88:E9:FF:74:8B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/054eb023-6180-34c4-bf2d-5ad0538099ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c6:5f:3f:c1:07:d1:65:80:e0:dc:49:42:d3:bf:4a:1c:02:
         73:58:f9:c6:d0:46:45:51:a3:a5:3f:5c:24:9d:87:7c:d9:04:
         91:3a:46:38:82:6b:48:7c:69:fe:16:e9:10:aa:b2:b0:1a:80:
         63:46:48:de:42:5d:16:d6:71:ca:57:b5:75:ab:88:c5:00:4c:
         b7:e6:80:5a:3f:11:d9:25:4e:14:24:c9:c2:cf:3b:99:31:e3:
         f0:b0:22:f2:aa:7e:c8:c5:4d:e5:12:f6:34:5a:2b:53:bc:20:
         6f:4b:c0:37:5e:eb:c8:27:50:e8:04:3c:5e:89:2a:6e:d6:df:
         76:f2:1f:80:a4:5a:ef:54:27:4f:f1:ef:86:ce:9c:3b:c2:ff:
         70:a7:19:cb:c4:9e:cb:a2:48:f4:4a:5a:9e:75:2c:2a:72:85:
         68:09:79:39:f1:8c:99:ac:c4:5a:e2:ee:9b:c8:2c:3c:00:ce:
         87:96:c8:c2:42:18:6d:dc:c1:58:c3:55:3a:25:4d:2b:54:03:
         5d:9c:f7:e0:4f:4a:c1:20:b1:0b:e0:ca:5b:a2:f1:53:cf:11:
         c0:56:f7:2d:8b:5f:52:0d:2f:43:86:5e:c6:e6:16:92:41:61:
         4f:48:29:0d:94:d1:99:b3:fc:62:74:58:87:7f:df:dc:ce:a2:
         0f:58:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:39 2026 by rpki-client