Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/dfd99b71-f38f-320a-a0a6-d09edb67c57f.roa
File:                     dfd99b71-f38f-320a-a0a6-d09edb67c57f.roa (raw, json)
Hash identifier:          IHlIohBBnfC97cftUWd2W8lWOgA8EABZ9R7+5hSWhKM=
Subject key identifier:   C4:07:4C:38:9C:5A:51:1C:6C:5B:C0:CF:40:0C:8E:3D:3E:84:26:17
Certificate issuer:       /CN=19b7c71c-26ab-4c79-8c6d-452479d2d710
Certificate serial:       010D0C9F4328584E9606C97EC77CDE4856A1B8C0
Authority key identifier: A9:18:BF:8A:A5:F4:FC:BE:37:CD:76:A1:9E:FB:62:33:18:06:AC:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/dfd99b71-f38f-320a-a0a6-d09edb67c57f.roa
Signing time:             Wed 22 Jul 2026 18:33:26 +0000
ROA not before:           Wed 22 Jul 2026 18:33:26 +0000
ROA not after:            Tue 20 Oct 2026 18:33:26 +0000
asID:                     31898
IP address blocks:        205.178.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/19b7c71c-26ab-4c79-8c6d-452479d2d710.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/19b7c71c-26ab-4c79-8c6d-452479d2d710.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:96:06:c9:7e:c7:7c:de:48:56:a1:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b7c71c-26ab-4c79-8c6d-452479d2d710
        Validity
            Not Before: Jul 22 18:33:26 2026 GMT
            Not After : Oct 20 18:33:26 2026 GMT
        Subject: CN=db5f6e65-691f-4894-acb0-c75ca761a339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:5c:14:8d:31:2a:80:4f:d6:0c:6e:32:58:
                    d0:9c:56:84:8e:2a:42:b4:dc:f3:46:37:68:73:2a:
                    cf:fd:0f:27:7e:17:95:3a:a0:d9:83:a0:c8:ea:af:
                    2f:22:49:84:94:2d:4d:10:b2:a1:be:81:dc:13:49:
                    74:f5:59:a2:07:26:4d:d6:97:b4:3c:ef:09:21:8c:
                    74:49:3f:64:86:72:55:30:62:cf:67:85:58:03:bf:
                    65:c2:f4:ac:42:6e:55:98:bb:dd:9b:95:c8:e8:3a:
                    f1:22:b3:12:4c:cd:cd:fa:87:a6:30:41:ab:7b:8b:
                    44:21:72:5a:bb:9b:dc:f6:6b:6e:d7:d2:ba:cf:56:
                    20:72:65:8e:31:73:ba:15:e0:c4:3b:27:e6:db:eb:
                    57:0d:da:62:44:00:e0:03:e1:c1:e6:e0:41:2c:8f:
                    8a:9b:80:25:7d:da:f2:8b:70:26:90:dd:5f:8e:d8:
                    a7:cf:b9:01:53:c9:a9:b5:32:c4:c5:34:fa:39:e0:
                    fd:a8:41:d9:e4:cd:ac:b0:8d:a1:5a:fd:64:57:e0:
                    07:e4:63:4e:ae:6c:c7:84:28:5e:95:a1:c2:2d:01:
                    88:d8:bc:0b:38:7b:d5:1b:8d:a7:c5:0b:fd:67:55:
                    c9:6c:01:a1:da:f6:d0:0a:14:71:e8:21:cc:fe:9e:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:4C:38:9C:5A:51:1C:6C:5B:C0:CF:40:0C:8E:3D:3E:84:26:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/dfd99b71-f38f-320a-a0a6-d09edb67c57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710/19b7c71c-26ab-4c79-8c6d-452479d2d710.crl

            X509v3 Authority Key Identifier:
                keyid:A9:18:BF:8A:A5:F4:FC:BE:37:CD:76:A1:9E:FB:62:33:18:06:AC:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19b7c71c-26ab-4c79-8c6d-452479d2d710.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:75:0f:9d:cb:ca:c3:0e:11:53:b4:ea:65:c3:bd:19:b4:e3:
         a1:71:99:45:13:c1:27:25:1e:6c:f1:69:8c:71:26:47:ca:ea:
         95:df:1c:64:da:8e:f6:22:d1:03:f5:cf:7b:3b:f8:e3:81:0d:
         3b:81:b5:83:68:12:c6:bc:48:dc:77:3b:5d:49:4b:7c:4b:f4:
         df:d2:68:fa:9f:65:c2:66:4f:73:00:eb:a4:5b:ea:2f:82:64:
         f8:be:c2:ad:9b:9e:2c:f3:16:33:74:07:1c:3f:bd:b3:56:df:
         8d:1d:09:ad:ce:0b:1f:2a:1d:f2:fd:90:96:c5:31:96:d3:1d:
         07:6a:ce:f3:38:eb:55:72:a2:2e:1b:4c:2d:17:5d:a9:0a:15:
         65:66:39:f3:02:eb:dc:f5:fc:52:a6:cc:a1:0e:59:bc:34:df:
         60:a3:0d:0b:3e:b7:46:62:84:2b:06:e5:45:9b:3b:21:58:bd:
         3d:20:6b:4e:3f:01:da:63:4f:db:2d:a5:ca:52:72:f5:5d:8a:
         ff:04:3c:f6:98:e6:3a:65:cd:18:36:75:89:d1:3c:13:55:0c:
         6f:1e:6c:96:ff:57:01:1d:4e:52:2a:fb:10:9d:f5:22:0f:73:
         3a:97:ff:1c:d4:78:78:e5:ac:0f:73:d3:c2:92:5b:0d:59:47:
         74:e1:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:05 2026 by rpki-client