Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
File:                     25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa (raw, json)
Hash identifier:          fCbXfhjgXW1bbvz8pHzL5kfgxjliJxzdykY3Xqz+fE4=
Subject key identifier:   8E:28:82:AB:52:7D:5E:A4:35:2A:34:BA:B0:BB:AB:DB:D5:8C:30:60
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D95EFF3C27CBA3F4641533F80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     206092
IP address blocks:        149.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f3:c2:7c:ba:3f:46:41:53:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=284b9e79-96a1-4975-83c0-ab40445def13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:90:ca:2b:49:44:a7:21:57:ae:30:b0:bb:
                    aa:8a:a7:ba:1f:ff:ed:4e:1a:ee:9a:f9:c2:22:15:
                    de:a8:a5:44:2c:35:e3:e3:3e:6d:e7:e1:99:93:53:
                    8b:29:a9:83:1a:ac:ee:15:4b:3f:6d:ce:3b:34:87:
                    21:ba:b0:eb:90:31:f2:39:30:b0:76:48:e9:b2:c3:
                    d6:58:8a:29:d6:da:0d:9f:c9:b2:88:d2:e4:29:a3:
                    8d:4e:14:73:d6:d2:c1:6c:3f:67:cc:9c:8e:0f:5e:
                    6f:53:c0:66:d2:56:21:69:69:0d:1b:a6:0b:49:d6:
                    7f:22:37:ab:e6:54:80:32:4f:ab:cf:d3:cc:e2:b7:
                    01:2b:39:cb:9f:17:a0:32:81:41:e8:af:54:78:56:
                    8d:af:4d:55:40:a3:02:50:15:18:78:85:36:24:2d:
                    e8:ac:66:8e:da:0a:c9:07:f5:8c:52:aa:97:d0:a6:
                    fa:0f:77:1e:94:05:cf:14:de:ff:81:60:e0:84:65:
                    3d:17:3a:9a:0b:ef:93:74:ee:6d:a0:16:75:ac:e0:
                    c4:1d:67:de:c4:b7:44:e5:ed:7d:aa:96:85:b2:4e:
                    5d:88:16:d1:f9:cc:84:24:65:f6:a6:a0:00:f0:32:
                    34:f3:c7:d3:60:8f:33:96:e3:7f:31:c9:ce:86:12:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:82:AB:52:7D:5E:A4:35:2A:34:BA:B0:BB:AB:DB:D5:8C:30:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/25b60e3a-8aad-39b5-aa82-58a2fa5fbdb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:1e:c5:21:10:7d:c5:d6:08:00:77:c3:74:a5:df:95:eb:
         a0:ba:3e:5a:28:e7:13:bd:58:94:58:ac:61:bb:ec:17:86:15:
         a5:55:41:f3:d3:8d:4d:a3:71:41:ad:de:b9:ba:ae:77:03:81:
         02:e5:54:17:a6:ca:70:12:84:82:bd:76:d8:1d:a2:8f:32:58:
         17:24:f0:b9:4d:6a:25:36:21:3d:d0:ed:94:d6:4e:37:1c:66:
         91:69:8b:ca:18:fe:4a:9c:90:a8:e9:d1:b2:76:62:3f:45:e6:
         9b:07:0f:8f:69:b7:3c:0f:84:9f:3e:d6:cd:2e:32:eb:19:54:
         ad:31:19:e8:d7:35:4b:12:35:0b:9f:53:4f:52:20:33:a8:f9:
         8b:ab:07:14:24:a5:2e:fe:24:2a:2d:e7:ed:e6:44:a5:74:06:
         b4:7c:30:74:36:6e:ae:48:32:a4:73:d7:92:3d:5e:49:12:09:
         0c:7d:1e:33:ef:6a:2a:35:2f:fa:4d:cc:66:15:97:18:a8:00:
         11:86:68:3c:f0:09:4c:f0:d6:37:36:4c:39:cd:65:97:a8:16:
         57:a8:ed:5e:94:cb:b0:38:67:85:40:4d:6e:8a:62:e0:ca:d8:
         04:09:00:9e:40:41:42:da:45:9f:8e:bc:dd:d1:fd:8e:49:0a:
         35:78:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:07 2026 by rpki-client