Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa
File:                     af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa (raw, json)
Hash identifier:          VmmXNUwWcIYzPQqsFDENlRq1hq7cOUZJmfz4oT0N9sg=
Subject key identifier:   2A:22:66:5F:70:A7:06:D7:63:D3:F7:7A:07:1D:0B:C6:A2:E0:50:8F
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E1E449AE7DF2396700536F290
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     212238
IP address blocks:        149.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9a:e7:df:23:96:70:05:36:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a2f198b8-511d-4024-beeb-6ba346b0a363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:82:d4:ea:76:9c:07:94:9c:c7:7d:f9:48:
                    68:b0:7f:dd:1c:96:fd:c4:fa:91:86:d4:a8:5b:3a:
                    83:44:0f:4e:3f:d1:46:13:9d:6a:d5:07:3f:6b:24:
                    d0:81:bc:d7:11:c2:04:fd:f1:9a:d6:7a:a0:db:33:
                    bb:a0:b3:bc:9f:08:6c:18:ac:ef:8c:81:ae:48:13:
                    63:cd:2f:f6:59:06:97:10:82:bc:53:ef:05:48:85:
                    4e:dc:3a:6d:97:4e:e6:7b:e0:8b:67:b7:1c:cc:a0:
                    89:40:dc:4f:f8:99:35:c0:e3:4c:20:06:9e:da:20:
                    26:34:98:51:3e:9f:3e:1b:40:ae:58:bb:a3:0b:dc:
                    5e:92:46:9b:d1:b9:6e:25:0d:ee:34:d8:f0:43:2c:
                    28:16:71:32:0c:16:b4:a7:8e:29:89:68:ce:1f:11:
                    31:ca:46:83:5e:a4:55:86:fe:7d:ee:15:07:27:67:
                    d1:79:90:23:ff:9a:cc:10:c6:1b:d4:0d:1c:27:6a:
                    49:ca:3c:dd:50:d8:3e:3c:0a:8e:03:46:e7:e5:61:
                    c4:d1:84:72:21:4f:ea:39:25:f7:6b:1e:26:72:66:
                    b9:87:d6:d3:da:9f:d4:b1:82:32:bc:e5:3e:9d:7f:
                    3d:b4:7b:be:bb:dc:6d:5b:65:1b:39:08:c4:87:41:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:66:5F:70:A7:06:D7:63:D3:F7:7A:07:1D:0B:C6:A2:E0:50:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/af6d1abb-ec33-3d38-a843-92fd2e5b8379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:de:50:82:7f:27:5e:2b:1c:95:52:2f:27:db:67:a3:ea:
         4e:ac:37:8e:9a:54:af:5a:cc:1b:bd:84:fc:1b:a5:ca:bf:c3:
         b7:66:64:0b:e4:8e:05:46:40:9d:8c:55:03:a1:3a:83:0b:97:
         b6:24:2a:61:80:49:ff:0a:5b:3d:11:90:e6:0c:e0:3b:dd:d0:
         bc:d2:ff:cc:d3:61:b5:ec:94:c1:a3:33:e5:d7:dd:5b:21:89:
         05:d4:9a:56:4b:85:2b:ad:14:f4:c7:af:30:bd:41:f3:b6:51:
         21:df:ea:1b:ca:be:f8:74:f8:7b:88:2b:2b:3f:80:ba:86:15:
         97:24:25:ea:17:56:8a:fa:26:18:a0:9b:c7:da:db:7c:ac:86:
         44:f5:4c:7d:78:a8:fb:e3:16:d3:41:c8:83:d7:7e:54:3d:70:
         45:79:f8:4a:a5:dc:f2:c6:44:f9:e8:85:7d:53:03:98:f9:0f:
         4c:a7:0d:1c:cc:c9:0f:74:4e:2c:f2:8c:42:0c:ad:80:bb:a4:
         92:df:46:c7:ea:d9:e4:61:89:94:b8:50:ab:f6:6a:c2:4d:19:
         ef:4c:58:4a:e9:71:ad:5d:3c:d9:cc:49:2b:74:71:fa:ce:81:
         12:d3:c3:4e:a1:ed:5b:f3:5d:4f:83:5e:0a:8e:8d:4c:9f:b3:
         94:ed:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:55 2026 by rpki-client