Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa
File:                     47306951-0aab-380f-84d2-7a9c11e67870.roa (raw, json)
Hash identifier:          tihPkQOV1gAgf4Qeo/arD3Zui9GwkFafXbiluFkEVRU=
Subject key identifier:   2B:C5:76:30:E4:88:F8:3C:C2:58:DB:1D:96:28:03:0D:E6:BB:AC:88
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F4975B74C4A682E44BC97F0C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     1742
IP address blocks:        199.94.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b7:4c:4a:68:2e:44:bc:97:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1b33aec2-eeef-4d56-8c8d-1cb756007843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:21:1f:82:51:60:1b:21:d6:a3:a3:87:ff:
                    cf:87:59:14:7c:e7:d2:ba:3f:db:94:d3:53:a1:32:
                    35:54:f1:77:a0:4e:6b:d7:b8:33:34:98:dc:32:7c:
                    b2:01:81:ef:81:19:17:d2:6d:10:2b:42:a5:53:09:
                    bb:5b:b8:b1:02:57:3f:a0:87:00:bf:bb:57:4c:58:
                    0c:ae:98:bd:8e:6d:fe:12:ab:39:a0:ec:7d:5b:8c:
                    43:cf:45:19:7d:81:06:d8:31:12:0b:d9:40:66:7e:
                    17:55:13:5c:84:e0:4c:2d:ef:af:9d:80:d5:85:93:
                    84:1a:89:40:63:59:00:55:96:9f:d1:b9:2a:bb:ab:
                    ea:4b:4b:ec:02:2a:7c:55:15:c1:a2:5d:47:56:6f:
                    a1:7c:25:05:34:93:fa:ce:5b:71:9a:f4:13:c9:b0:
                    2b:94:5d:c4:6c:0f:2d:60:19:34:b2:af:ad:85:4e:
                    30:d1:4b:5b:89:49:e2:9e:e8:ba:34:48:c6:bc:6e:
                    c8:bd:0f:d1:9d:16:62:49:d4:9e:13:aa:d9:09:c6:
                    1f:b9:ee:f0:6d:7c:4c:62:19:91:e0:34:59:01:07:
                    35:41:9a:ab:dc:de:00:59:24:66:ea:43:b1:f7:f1:
                    b6:94:3f:42:0c:b8:43:56:b4:a0:2e:0d:0c:61:41:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:76:30:E4:88:F8:3C:C2:58:DB:1D:96:28:03:0D:E6:BB:AC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:97:7d:96:ab:63:7c:d7:57:43:59:88:68:a2:28:08:13:e3:
         6e:cf:e5:0e:99:f8:25:0c:dd:35:75:a6:18:eb:9c:cb:ae:ef:
         f6:b4:de:b1:92:7c:a6:f4:84:d9:c8:4d:ba:bb:2f:d3:a6:34:
         5a:23:c8:7c:d2:ea:2c:ed:82:d0:9c:ce:aa:01:1f:d2:57:fc:
         4c:b3:5d:f6:55:85:d1:d6:d0:a4:b2:ee:5c:e0:3a:42:28:27:
         37:13:e4:eb:14:68:60:51:f0:21:80:50:ce:f5:c4:ea:3a:fb:
         52:f4:dc:b4:c4:00:31:f3:31:f9:f7:99:d6:b0:f0:26:0d:66:
         fc:03:ba:7d:10:75:c1:e4:62:2a:99:80:9f:8a:4a:1c:c6:b5:
         a3:28:d3:42:02:53:49:49:8a:03:83:b3:68:58:a5:76:e2:e9:
         f0:1f:82:5d:d7:3c:1d:d2:f9:4f:15:d0:1f:80:7c:17:73:fe:
         14:4f:97:9d:bc:e4:39:f1:e5:2c:d0:c8:33:31:f1:b0:58:1d:
         95:44:76:9f:6d:24:74:e9:f4:9c:52:c9:2b:05:85:44:49:04:
         56:79:2e:55:77:9a:d3:2c:91:f4:c2:a4:9f:67:e2:c8:b6:a7:
         3c:2d:17:3b:ce:d4:a6:5c:b3:60:96:c8:79:33:12:14:8f:7b:
         b9:6e:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:32:42 2026 by rpki-client