Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/19089e92-2ef8-32c0-a0f9-2d47b63d9ab0.roa
File:                     19089e92-2ef8-32c0-a0f9-2d47b63d9ab0.roa (raw, json)
Hash identifier:          HZQwJ53/cqPASOt5oKbTEJAIpTghZuCZpr9dSdDO8RE=
Subject key identifier:   31:70:C5:C6:F9:65:73:04:AA:F1:1C:24:DE:33:E7:92:11:20:D5:C7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D60E502CF7438471012328F80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/19089e92-2ef8-32c0-a0f9-2d47b63d9ab0.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        192.119.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:02:cf:74:38:47:10:12:32:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=580acea0-794f-4b0c-ad1a-72dc444a619a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:4d:c8:63:99:a1:1d:3e:e4:c5:e1:94:92:
                    d4:30:63:3d:e5:5a:50:75:f2:1e:4b:74:cc:e6:d8:
                    2c:f9:a6:79:89:4f:3a:67:b4:d8:68:f6:f5:1f:b8:
                    f8:1c:87:ba:65:34:91:9f:d1:96:4b:77:5f:1b:7e:
                    7e:fb:30:bc:c8:5e:4c:92:53:f1:28:6f:99:6f:c0:
                    3b:52:0b:86:54:43:b1:72:b5:b0:2d:2e:3b:8a:12:
                    84:1c:06:e9:62:6b:ea:f9:4a:55:a2:16:66:1b:5d:
                    7d:f0:de:0a:48:b1:08:6b:86:e1:e9:ec:0e:48:14:
                    14:d6:74:b5:2a:27:3a:b1:75:10:c2:d1:d9:1c:88:
                    7b:fe:65:ae:bf:8f:75:c8:8f:20:6c:ed:f4:99:4c:
                    65:e6:3e:10:88:13:11:ff:f0:a8:e4:4e:fe:0f:80:
                    ad:8e:4b:34:23:93:62:47:95:25:de:76:af:24:48:
                    d1:cc:8e:3c:cc:c4:c1:b5:21:d1:6f:b3:4d:4a:b3:
                    7a:e3:df:be:8e:82:43:1d:ff:84:f9:bb:96:71:3d:
                    ed:37:d6:5f:8d:1f:3c:9b:0c:cf:e9:85:18:c6:96:
                    cd:e5:e4:60:05:fd:50:2c:66:0a:ba:03:34:26:7f:
                    f3:94:31:2f:e6:2d:83:1f:6c:c9:d5:6e:ef:78:9a:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:C5:C6:F9:65:73:04:AA:F1:1C:24:DE:33:E7:92:11:20:D5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/19089e92-2ef8-32c0-a0f9-2d47b63d9ab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:1e:aa:31:aa:0c:dc:b2:4a:54:91:4f:93:bb:92:56:a8:
         03:68:93:c0:86:2b:cf:3d:97:be:92:4f:44:4f:65:e3:df:ff:
         03:ac:3e:80:64:63:d7:ee:bc:3f:6a:92:c5:3a:0d:7a:06:dd:
         17:37:df:f0:4c:3c:b3:ee:dd:b8:cc:c7:a9:9f:db:ff:10:24:
         33:09:6b:03:9e:c8:00:ae:11:9b:64:90:03:fc:81:a8:f5:34:
         bf:1d:d5:0e:ed:6c:e2:9e:65:b0:eb:45:37:d7:b1:fb:1e:10:
         eb:5f:fc:fa:4f:9d:2b:d9:92:24:68:ee:3a:4e:37:eb:79:4c:
         86:a3:1c:41:58:e6:ae:68:bc:f8:fa:9f:2f:d9:c1:6f:e1:81:
         84:6b:c1:59:96:3c:14:92:94:72:1f:cf:6a:f1:25:24:30:47:
         65:a8:e5:3b:08:1b:5d:51:7d:c4:ae:5a:91:1a:22:2a:aa:36:
         f1:3b:f2:b3:f2:4d:d4:a1:c6:39:d1:8b:f5:06:90:13:8a:8d:
         55:9e:b0:35:66:05:86:06:a8:1d:5c:2c:fe:d9:97:a6:a6:3c:
         28:05:b9:af:2b:03:21:d5:08:1e:e7:94:c8:b4:0e:2c:1e:f8:
         95:35:8c:ca:c5:46:0e:16:ae:a0:cc:fd:50:46:1f:de:9e:61:
         6f:b8:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:14 2026 by rpki-client