Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819f126e-014b-3dd7-a172-2a496ab4eb9a.roa
File:                     819f126e-014b-3dd7-a172-2a496ab4eb9a.roa (raw, json)
Hash identifier:          7pqpfqhfZ7Q6dCfrkGx20Ga9uO8qdTQhJ/X0c/w4fm8=
Subject key identifier:   53:95:7A:CD:AC:88:AA:E5:9D:AA:8D:D5:9A:2B:13:DE:1C:D9:15:BA
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E885A59CC7B1AD38953FB4480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819f126e-014b-3dd7-a172-2a496ab4eb9a.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     28110
IP address blocks:        149.18.17.0/24 maxlen: 24
                          149.57.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:59:cc:7b:1a:d3:89:53:fb:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=5b232d6c-a2f3-47b0-8491-cdc60b0e8ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:cb:ca:0b:61:d1:23:09:62:96:41:95:d0:
                    38:4b:00:2a:40:e1:88:e4:4c:f5:ee:ea:eb:8f:e1:
                    94:3b:e9:20:4d:d6:45:12:ee:b3:e1:d4:7c:c5:04:
                    73:4c:3f:82:aa:8b:db:90:c0:df:32:db:98:fc:f8:
                    79:0b:ea:e1:2c:0d:8a:95:fe:58:6e:27:3a:91:ea:
                    38:e0:ce:99:d3:a8:5b:c5:25:22:36:03:37:13:f5:
                    78:c9:08:73:60:a3:72:f9:21:e8:63:b5:7c:70:64:
                    15:7c:b5:90:d9:87:90:ab:1c:c5:8c:49:39:ea:92:
                    18:21:c0:f5:33:10:69:c2:bc:12:b4:69:43:38:07:
                    47:97:91:43:8e:82:ac:91:f6:dd:d8:75:aa:54:a3:
                    7c:54:b1:94:4d:c4:3b:43:84:82:bc:87:ed:15:df:
                    6e:85:c6:2f:d8:3b:aa:5e:4b:d6:51:ba:5e:99:0f:
                    d5:87:02:0f:27:16:20:ac:fc:eb:99:2c:a6:ca:3d:
                    ff:2b:17:79:f3:bb:f5:31:a6:dd:53:ab:77:9e:ee:
                    89:8b:93:b2:95:d9:3b:ae:e9:e7:fe:cd:6b:0d:ea:
                    c0:9b:76:e9:87:f5:31:e4:a2:18:30:27:69:56:3d:
                    a3:4d:c7:9b:ae:46:96:5f:9d:b1:64:be:8a:3d:e1:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:95:7A:CD:AC:88:AA:E5:9D:AA:8D:D5:9A:2B:13:DE:1C:D9:15:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/819f126e-014b-3dd7-a172-2a496ab4eb9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.18.17.0/24
                  149.57.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:05:de:d5:3f:29:4e:7b:8a:a9:af:f0:3f:db:53:9a:51:6d:
         93:25:be:82:ce:68:f9:c3:ef:8c:89:c6:6d:84:08:e2:a9:c4:
         0c:65:4c:94:f1:0a:5a:20:4a:91:d4:33:f8:f6:c4:71:63:ac:
         e6:56:63:d4:e0:d1:9f:b9:f4:4b:32:0f:43:bd:32:61:5f:c2:
         e8:e7:6d:0e:0c:e9:6f:5c:fb:eb:24:8f:ae:f6:57:3e:f6:fe:
         1b:4f:4f:38:04:01:54:c9:35:2c:77:15:5b:48:7d:c3:ea:4c:
         49:b2:f2:85:7e:3c:65:77:bd:e6:14:07:31:b1:de:72:2d:25:
         bf:28:7b:8b:a3:f4:25:2d:6e:70:87:fd:e0:f8:04:ef:21:6b:
         f1:92:e8:9d:a0:03:9b:2e:f6:41:63:95:99:1f:e5:c7:3b:d0:
         da:aa:c4:6d:8e:97:b5:32:21:0d:e5:2f:e5:e9:1d:8b:c8:5a:
         60:59:a4:73:65:cd:00:d3:7f:f8:0c:a5:9c:04:52:10:b5:8e:
         c9:e5:1e:06:5c:2f:e1:7a:5c:b4:85:96:c7:6c:69:b9:f7:8b:
         46:fa:25:a3:ed:16:ed:01:e7:6f:bf:2a:0b:18:0d:22:00:db:
         1d:0c:cb:d4:32:53:1d:fd:58:57:7c:83:07:06:d6:c3:8d:86:
         a8:02:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:24 2026 by rpki-client