Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
File:                     68f886e6-3ee4-396a-852d-a801badb904f.roa (raw, json)
Hash identifier:          gk2X7H1Gos57/N36yFWYKIaXSLT3FuKOPCg4khHWK2s=
Subject key identifier:   B0:06:99:F7:F8:4B:D6:B4:BF:A2:00:52:AE:3E:92:D8:51:1A:44:F9
Certificate issuer:       /CN=324a8cbd-4953-435c-bace-07af1279e9bc
Certificate serial:       010D0C9F4328584E8B24F9C2039F0690B0BD5F00
Authority key identifier: B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     398025
IP address blocks:        143.109.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f9:c2:03:9f:06:90:b0:bd:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324a8cbd-4953-435c-bace-07af1279e9bc
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=46f4f1b2-1b37-4d22-920d-6760bf3c1b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:36:66:88:0f:f5:d4:48:e3:00:86:b5:d0:
                    ff:6b:4a:3b:40:96:df:37:1a:87:b1:d9:3e:37:b1:
                    be:6a:39:85:c5:e5:dc:a8:fb:09:ec:ea:23:03:0b:
                    98:73:b6:0d:84:8f:dc:99:12:48:06:37:23:6c:06:
                    c5:e7:8d:6a:ad:e1:04:6a:1a:a5:4d:56:a9:a3:bc:
                    a3:33:a5:9a:ba:51:d3:92:ae:96:e9:de:e8:d6:c8:
                    f0:a0:03:02:ba:ad:b9:16:99:07:c8:59:50:50:7e:
                    c6:bb:70:9b:43:cb:b9:71:02:ec:8e:db:68:72:35:
                    d1:a3:6d:39:c3:27:ec:6c:b3:21:3e:c6:6e:4f:bd:
                    b8:42:1b:7f:78:a7:39:d4:49:ef:ae:83:fb:b9:2d:
                    85:f0:90:aa:1e:e5:6e:05:93:59:18:1e:d5:64:62:
                    13:26:20:2e:25:49:b9:28:c8:55:dd:2f:b2:80:ef:
                    d0:a1:51:50:50:aa:c8:84:5d:08:e7:27:2c:04:5e:
                    87:c5:55:ca:a2:a0:fc:45:c7:5e:38:01:a7:be:46:
                    0e:e4:a8:cc:7e:4e:8c:8d:7a:9f:21:ed:7d:3c:9b:
                    27:f0:ce:99:ce:34:75:34:82:89:75:c8:49:64:39:
                    74:a3:c6:de:60:d6:77:6a:a9:29:ca:2a:af:83:a2:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:99:F7:F8:4B:D6:B4:BF:A2:00:52:AE:3E:92:D8:51:1A:44:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/68f886e6-3ee4-396a-852d-a801badb904f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc/324a8cbd-4953-435c-bace-07af1279e9bc.crl

            X509v3 Authority Key Identifier:
                keyid:B9:51:8D:60:2D:87:3E:B0:5F:09:28:22:A7:33:96:C6:4B:25:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/324a8cbd-4953-435c-bace-07af1279e9bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:8d:ce:e2:95:b3:20:99:0e:1c:25:2d:ce:47:1f:b5:1e:
         d7:66:79:65:42:b7:6e:3b:ce:1b:a3:90:5f:e7:04:64:0f:21:
         e2:61:a1:1f:9a:b2:05:52:56:46:e7:d2:8b:4d:49:95:06:a3:
         95:b3:ba:76:b6:cc:28:2c:97:ff:88:36:68:96:de:b9:f6:13:
         52:50:e7:6b:77:66:50:25:83:ad:ef:b7:05:c2:6e:de:13:f1:
         2b:2b:83:b1:a6:18:ee:59:92:74:60:75:e9:12:b6:1f:f0:7a:
         ff:32:51:13:e2:4b:a5:75:6e:4d:9e:e2:57:88:0d:b0:dc:a5:
         28:5c:ea:63:46:ad:6c:f7:e3:ba:0c:a1:7e:83:8d:c7:10:b9:
         ba:b5:d4:6a:bd:b4:fa:d0:bf:6b:1d:f9:10:cf:94:8c:0e:c6:
         af:75:f4:a1:ee:bc:ca:23:a5:38:23:80:cf:a0:1d:7c:7a:9d:
         fa:ca:9f:5d:b0:d1:0a:34:78:e1:77:5d:3f:d6:7b:52:93:25:
         f4:f1:f8:b3:65:1c:1d:27:29:15:96:ea:29:f4:2c:26:81:91:
         6e:08:a4:f1:6c:41:03:b5:e8:56:7d:46:bc:9a:17:55:29:e6:
         c3:92:49:32:13:a9:3f:03:07:6b:28:84:48:54:a8:b3:80:4c:
         87:91:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:18 2026 by rpki-client