Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebe64c9-8bfd-3edc-899e-6137e364f921.roa
File:                     cebe64c9-8bfd-3edc-899e-6137e364f921.roa (raw, json)
Hash identifier:          to5DV1ZeUxpyEdi2Jc6box7dNNP+dIJbjl3MQ9kEvFs=
Subject key identifier:   4C:09:05:2C:BF:75:0E:41:FB:58:B5:14:6F:4A:4D:B9:73:AC:FD:2B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EA791904E783834D642C73E40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebe64c9-8bfd-3edc-899e-6137e364f921.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19905
IP address blocks:        173.19.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:90:4e:78:38:34:d6:42:c7:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cdb59823-8e2d-4239-a0b1-5af520396ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0e:2a:6d:70:8a:5d:74:b6:12:32:d2:2c:32:
                    92:3a:9e:a5:a8:4c:06:46:22:30:0a:47:51:c5:5c:
                    8f:e7:b3:d5:cc:89:a7:ea:f2:d4:ce:64:b2:55:95:
                    5c:ec:7d:f4:02:c0:0c:83:02:34:7a:d5:d3:bb:b8:
                    6f:f6:6c:28:dc:20:48:59:de:93:13:e3:10:e8:f6:
                    5b:4f:0a:0a:a0:bc:17:b4:24:db:5c:29:a2:b8:49:
                    83:dc:3f:76:bc:f1:ba:7e:9f:97:7e:ef:c6:80:8f:
                    80:13:31:7c:72:47:75:7c:13:c9:c2:e6:23:90:2f:
                    8b:81:ad:81:fc:a2:ca:fa:39:fd:9e:f2:94:d2:0d:
                    91:71:03:32:dd:01:d2:fe:8a:da:e1:bc:3a:e0:94:
                    81:00:dd:6a:64:b8:a2:77:45:00:29:20:5f:d3:bf:
                    93:f5:2f:6e:ab:ab:39:24:ea:6c:cb:39:d1:51:7a:
                    bf:68:74:47:1e:c8:e3:7d:e6:c4:25:ec:65:15:03:
                    93:3f:29:13:dd:48:f0:1b:8d:68:40:dc:a0:52:9f:
                    30:17:48:2c:27:87:e8:0b:ea:22:f5:27:18:c6:f4:
                    b3:72:a6:80:32:97:c1:22:e4:3e:98:8e:62:bd:a3:
                    7f:29:d5:ec:b6:1c:6f:38:5a:7a:a4:5f:ee:40:01:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:09:05:2C:BF:75:0E:41:FB:58:B5:14:6F:4A:4D:B9:73:AC:FD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebe64c9-8bfd-3edc-899e-6137e364f921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d3:ee:e9:88:04:c0:fc:fe:ac:03:10:1a:e7:54:32:a8:cc:
         23:fb:f5:44:45:25:70:8c:74:1d:67:fe:09:c6:b2:b6:f9:80:
         a3:c7:c0:45:28:bd:ca:42:18:fa:16:0a:c6:56:26:3f:f9:36:
         7d:82:92:d1:73:07:8b:fd:17:fb:61:75:f9:6b:31:35:f6:61:
         1e:bf:61:c0:b4:dc:0d:88:42:55:07:38:40:f6:da:7b:ed:12:
         83:c6:ae:da:67:eb:91:cf:98:f5:92:8f:51:83:35:ce:fc:cd:
         64:23:4f:98:77:ea:23:a8:fe:c3:ef:fb:22:46:b5:2c:97:4b:
         a0:23:e5:21:54:3e:3a:ca:b6:37:82:8e:bb:45:04:df:80:dc:
         8a:e2:d9:21:ec:25:22:16:65:a9:00:86:ad:15:73:02:bb:8c:
         42:c7:2c:3d:48:76:05:52:b5:e0:e0:cd:dc:fa:82:b8:71:a7:
         2f:2d:f6:ec:ee:1a:03:06:cf:46:01:c0:74:5b:e2:d1:1f:85:
         04:3e:b2:21:c7:ae:e3:33:22:5d:a5:a2:8f:91:7c:cc:10:9f:
         b8:4a:5c:ec:db:e5:bb:7c:66:d9:81:00:ab:c4:67:34:74:0a:
         ef:67:43:8e:3c:6f:b3:f0:be:5a:d1:fd:b1:f6:58:f2:a8:32:
         6d:bc:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:20:09 2026 by rpki-client