Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/3ed67fd1-1f87-3906-a524-5ee478ea83e9.roa
File:                     3ed67fd1-1f87-3906-a524-5ee478ea83e9.roa (raw, json)
Hash identifier:          7jYKSPn+DBSHPJeevho2weTz24WGu2YtdEfpLeGQE3s=
Subject key identifier:   D2:04:F6:17:E7:A4:06:D6:E3:3B:63:CF:37:8A:69:83:74:41:05:36
Certificate issuer:       /CN=1e5e6928-fdde-43e0-9e72-10066be1a674
Certificate serial:       010D0C9F4328584DCAFB04CB67B41DB7E9BDE34E
Authority key identifier: B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/3ed67fd1-1f87-3906-a524-5ee478ea83e9.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     18493
IP address blocks:        142.248.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:04:cb:67:b4:1d:b7:e9:bd:e3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5e6928-fdde-43e0-9e72-10066be1a674
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=f43b5630-f38e-4679-8081-0b0f124c348f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:e6:22:09:95:6c:fe:d5:bc:41:33:c2:06:
                    8e:58:51:69:15:e8:e0:14:42:9a:b7:66:bd:2a:e2:
                    b0:8a:c8:a9:ba:1d:2b:c0:64:c4:02:ae:5f:a9:5f:
                    6d:ee:7e:ff:3b:cf:72:09:47:ee:67:9c:33:5e:a3:
                    8b:26:90:c3:32:30:e3:5c:b1:4f:7d:9a:e6:bb:96:
                    29:06:0e:6e:f0:19:a3:40:17:e7:b5:e5:fa:13:ca:
                    7d:24:4f:42:53:c2:c6:46:9e:d8:c5:27:d9:8d:4f:
                    88:83:72:62:ea:1d:1a:a1:96:f4:ca:25:d6:ce:71:
                    f4:15:2d:7c:66:6f:14:a7:3b:37:a3:a5:07:64:ca:
                    82:59:38:2a:b6:84:6a:bb:b0:b3:45:93:54:5b:57:
                    2b:88:45:ce:ae:81:e8:db:9c:7a:58:5d:30:22:07:
                    39:da:fd:35:34:f4:34:66:f7:8a:08:33:38:6d:21:
                    12:9a:83:65:96:fa:69:d9:24:cc:84:ec:cf:d4:30:
                    eb:91:f4:28:7c:af:f7:4f:38:08:96:b2:7a:cb:5b:
                    0c:e4:8c:20:66:4a:54:6f:0c:8e:47:82:a8:36:a2:
                    e5:24:2a:95:a7:d7:12:23:62:52:1d:e1:1b:df:40:
                    b7:c2:76:16:79:6d:ee:4c:aa:16:a1:8a:46:19:6e:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:F6:17:E7:A4:06:D6:E3:3B:63:CF:37:8A:69:83:74:41:05:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/3ed67fd1-1f87-3906-a524-5ee478ea83e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl

            X509v3 Authority Key Identifier:
                keyid:B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:52:cc:0f:5b:60:d5:e7:75:e0:9c:3c:e8:2d:8e:3e:cf:d4:
         48:27:81:ef:a7:f0:ac:9a:9a:5f:e6:d5:d3:1a:0d:8c:59:b7:
         ee:52:ba:6c:73:97:bd:0c:51:b9:7b:34:4f:67:c3:c7:e5:f7:
         df:6d:80:df:e3:eb:23:98:d8:bc:e1:62:ad:a0:2a:6a:1d:58:
         c4:d7:4d:33:34:d9:20:4b:5e:d6:b2:55:30:8b:34:3e:e1:d6:
         77:3f:aa:37:42:7e:63:c5:19:c6:aa:c5:79:76:c0:65:70:c2:
         86:ae:d1:36:9b:55:15:12:10:49:28:be:57:19:98:0a:a7:c4:
         c3:e0:10:d3:ca:d4:bd:aa:09:7f:d3:ac:ce:75:aa:14:00:48:
         ea:9c:c3:eb:e3:08:f8:15:73:6b:a8:a1:0a:ad:ca:27:92:58:
         0f:6f:bc:36:00:21:90:78:18:96:36:f4:8c:8d:4f:0e:83:d0:
         1d:13:45:de:8c:b0:96:8f:8e:4a:06:d8:30:16:18:e8:c4:82:
         89:c9:a2:bd:13:40:91:9c:c9:3e:a1:9e:7d:97:ce:9b:83:bc:
         19:3f:ab:3d:64:32:63:ea:8c:af:d7:f5:01:24:4c:76:eb:6a:
         ca:54:e5:59:04:86:96:c8:c6:0d:a7:51:93:d7:a8:82:2d:e2:
         14:c9:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:44 2026 by rpki-client