Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/494719a3-67fe-3c57-99e1-3e7c62672a3c.roa
File:                     494719a3-67fe-3c57-99e1-3e7c62672a3c.roa (raw, json)
Hash identifier:          EhClTQIrcOJfQBa9s0+kwefK6ukumvvSdPURNTwDY/U=
Subject key identifier:   A1:7B:AF:9E:F1:DF:05:46:B4:B6:80:6E:38:D8:D7:5B:C3:03:E9:DB
Certificate issuer:       /CN=a32aa006-ef22-4905-8c82-2651c19859b9
Certificate serial:       010D0C9F4328584F43DD58E14DE293B82AF08C00
Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/494719a3-67fe-3c57-99e1-3e7c62672a3c.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     19350
IP address blocks:        199.212.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:58:e1:4d:e2:93:b8:2a:f0:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=945b54ee-d8f0-4287-b221-97413729f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:80:eb:e2:c7:d7:d8:50:dc:2c:2a:d9:12:
                    29:2e:42:6d:14:13:31:11:42:3a:38:6a:ef:6e:5b:
                    7e:63:39:b7:ce:9c:a1:b8:43:6e:3b:56:77:53:7b:
                    42:90:2e:5c:51:b4:f5:9a:e0:dd:3b:37:71:d9:5e:
                    e1:c5:4d:84:d6:42:3f:6e:d0:23:5f:0f:9c:a3:47:
                    37:01:68:ce:fd:b1:46:e9:07:c4:d9:76:81:a4:2c:
                    a4:e7:73:3d:89:6e:c5:5f:23:e2:e8:d3:e8:5a:7c:
                    e5:f5:20:86:72:50:a5:89:da:3d:1e:dd:ec:0b:03:
                    2b:7b:91:09:ac:26:e4:c3:37:fa:a5:a3:19:e2:cb:
                    d7:7d:42:86:11:82:0f:ac:3e:95:4c:1a:26:d0:4a:
                    70:ac:01:a7:60:7f:71:51:a4:b6:80:68:1c:e8:7b:
                    bc:0d:5b:91:48:b0:36:e5:1a:15:6a:52:2f:b0:5e:
                    80:6d:cf:c6:0b:87:8a:11:d9:7c:7e:77:63:76:f2:
                    be:cf:5d:ba:24:0d:32:8a:6b:c8:f4:64:0d:81:5e:
                    60:b2:7f:e2:36:81:f3:d0:e5:e2:06:1e:fa:b8:18:
                    de:f1:29:00:79:60:03:8b:01:e8:b6:10:62:ac:cd:
                    7d:d8:27:fd:58:64:3f:51:83:0f:f5:74:4a:f3:a2:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7B:AF:9E:F1:DF:05:46:B4:B6:80:6E:38:D8:D7:5B:C3:03:E9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/494719a3-67fe-3c57-99e1-3e7c62672a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl

            X509v3 Authority Key Identifier:
                keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:3b:5d:22:93:5c:56:9e:ab:ee:9c:c9:a6:34:42:e3:fa:
         76:47:fe:2c:f0:db:b0:8c:67:25:bc:41:f0:c2:14:a0:20:4a:
         fe:f1:0f:5c:f5:55:1d:9d:20:28:a1:40:9a:9c:51:26:56:f5:
         ac:7a:4b:1f:49:48:42:46:17:85:fb:f2:5b:e5:b4:7c:c9:33:
         be:1c:73:66:22:8f:ac:0d:94:8a:e9:47:94:8b:42:19:22:93:
         2b:05:4e:d6:3e:24:e5:8d:59:16:08:b1:2e:d4:74:c5:4c:e4:
         51:ab:c9:6f:66:65:74:6a:10:5b:e8:64:08:fc:26:1b:cd:e3:
         c4:b0:02:7f:81:86:93:43:01:47:2d:8b:e2:2a:1c:56:78:4e:
         24:4b:15:8c:6d:f7:2c:aa:a3:14:4d:0f:06:27:9d:de:25:d3:
         61:2c:51:1a:b0:a1:aa:c9:b1:c0:51:01:37:9e:79:86:bc:23:
         de:e9:d2:c2:23:59:8a:fc:33:a0:3e:7f:45:2b:9f:12:51:07:
         a6:67:db:9b:cb:1e:d7:71:6a:4e:ae:80:d5:ce:d6:61:75:88:
         e4:c1:6b:e3:a7:b5:96:49:66:ed:97:2d:05:28:e6:df:f3:b0:
         59:c5:f5:a7:98:c4:57:95:ce:03:7e:38:60:fc:2a:8e:f0:c8:
         48:b6:cc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:00:36 2026 by rpki-client