Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/028a86c8-1e2b-3873-a76e-270be9acc827.roa
File:                     028a86c8-1e2b-3873-a76e-270be9acc827.roa (raw, json)
Hash identifier:          hAdSdhHE23d9A+XyPozkoQwHC9NTgI724X220NlUIzA=
Subject key identifier:   A1:23:2F:55:9C:69:DB:38:7E:15:52:2D:C6:42:F8:DE:2A:A2:3D:F7
Certificate issuer:       /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial:       010D0C9F4328584E90BA48C25FCCB4D7C0EBE180
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/028a86c8-1e2b-3873-a76e-270be9acc827.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     1048
IP address blocks:        192.139.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:48:c2:5f:cc:b4:d7:c0:eb:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=1458daa5-f5ce-4d5b-a505-a10a0910dfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:ad:ca:55:92:ae:49:6d:a3:49:4a:f2:bf:
                    88:25:15:4c:30:eb:ff:7c:db:ce:6a:a6:96:81:22:
                    f0:7c:5d:1f:50:08:51:79:74:32:c4:41:44:f2:f6:
                    86:8b:ea:09:26:13:de:46:49:d8:bb:55:24:2e:47:
                    f2:b9:e0:12:8c:50:5b:40:87:b1:db:3b:0a:e8:ee:
                    e7:45:35:55:13:91:ff:ed:c7:ef:80:1a:3b:c3:c7:
                    31:f9:50:85:88:21:5d:b7:97:f8:02:1c:ee:aa:ce:
                    e5:9e:7e:a9:2d:b3:7c:21:ce:53:06:0b:65:b3:a1:
                    0b:7a:e2:f4:66:4c:41:9e:1a:f4:19:c7:e2:8a:4f:
                    a1:e7:e4:0a:25:04:c3:66:01:31:b7:46:29:79:72:
                    3b:94:82:f0:a4:0d:5c:2e:70:b5:c1:8d:b6:5f:ec:
                    8c:40:e0:37:bf:f1:b0:ae:31:99:3d:db:90:8b:cd:
                    fc:6d:b8:7b:a6:41:51:fc:55:13:7a:4a:8c:50:bf:
                    01:3c:f2:67:5d:2d:9c:4f:62:67:de:76:3e:74:44:
                    70:ff:dc:d3:fd:90:50:8f:0a:f4:d3:65:12:89:96:
                    6d:e8:5c:7b:5f:2c:4c:ab:18:e4:92:b6:73:83:77:
                    0b:7e:a7:fc:05:51:b6:b6:a1:83:09:9d:80:83:d0:
                    e0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:23:2F:55:9C:69:DB:38:7E:15:52:2D:C6:42:F8:DE:2A:A2:3D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/028a86c8-1e2b-3873-a76e-270be9acc827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:24:01:d4:4f:3b:c8:d6:91:64:e2:4b:b4:2a:6d:44:32:1f:
         c7:ac:ce:05:cb:23:02:12:37:bb:b6:66:be:10:2e:ea:25:de:
         11:a0:74:a0:3a:81:5e:43:5d:cb:f1:31:fe:fe:5f:6a:e6:a2:
         7c:72:2f:dd:5e:6b:4e:52:b7:99:3b:e2:9b:8c:e5:4f:a4:a5:
         df:c9:3d:f7:9e:fd:e2:76:81:2f:eb:62:ef:c1:b8:62:eb:6f:
         bb:77:7b:bf:20:9b:a2:3a:48:92:eb:5c:41:b4:28:c1:e0:c7:
         ad:1e:63:05:8a:ae:70:3a:ff:4c:54:ee:93:79:47:4b:a6:24:
         5f:78:72:e8:a3:58:a5:97:fe:0a:29:48:14:ee:c3:a1:a2:ba:
         6f:ea:d5:6e:97:d8:94:82:fc:cf:12:8f:f3:22:d7:cd:b3:d2:
         b2:83:1d:fa:b0:02:3b:45:2f:09:0c:80:a8:2e:59:0e:db:3e:
         9a:c9:d2:a0:ed:3d:57:55:0f:4f:e3:eb:5a:14:3a:85:4c:e0:
         b8:ca:5f:a4:8d:6b:63:8c:0f:dd:4c:aa:8f:c7:fc:1e:1f:80:
         df:60:57:92:be:15:41:f8:58:d7:5d:68:7f:4a:24:66:dd:d1:
         74:82:8e:c2:19:fa:ea:83:f8:8e:39:43:ba:32:a5:0b:e1:d1:
         37:d1:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:30:44 2026 by rpki-client