Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ebb9edb-140f-3e47-8f32-80590e678518.roa
File:                     3ebb9edb-140f-3e47-8f32-80590e678518.roa (raw, json)
Hash identifier:          wg47yasFYMwTG1OFxrNpV87wpa7QxLa1LeV+EapbeYg=
Subject key identifier:   34:76:D2:60:CF:CB:21:6E:13:BE:FC:50:C1:BC:9D:14:29:92:72:AE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E9D4A941B1CE3CBDBF8F3F600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ebb9edb-140f-3e47-8f32-80590e678518.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     397218
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:94:1b:1c:e3:cb:db:f8:f3:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=f9c06bb9-25a6-4563-8bae-47837c8ce8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a8:eb:12:79:67:ae:b0:8a:d2:54:6b:7d:d3:
                    0d:c6:73:41:a3:4b:35:3f:f2:0c:05:49:d1:02:72:
                    2c:57:50:df:fa:ad:0e:99:38:66:f5:83:6e:88:b5:
                    57:52:c2:9f:91:54:72:5a:de:1f:aa:7d:9b:7b:6e:
                    1c:c4:c8:4f:b7:53:4f:71:84:2b:38:85:8a:5c:cc:
                    06:76:09:92:23:14:03:c9:b6:e7:80:75:69:9d:12:
                    a0:83:7a:41:c1:55:e1:60:86:2c:bd:e5:02:aa:42:
                    65:26:83:b3:da:ca:34:14:fd:09:56:06:74:a2:cb:
                    8e:57:c5:e5:20:06:c6:d0:1e:22:fb:38:d5:95:9a:
                    3c:07:ab:72:76:da:88:9e:40:2d:93:de:29:ee:43:
                    10:5e:ca:4c:d5:70:01:c5:f8:10:9d:a0:4c:9a:70:
                    dd:47:05:3f:6b:c5:d3:84:5f:0c:ff:d6:04:dd:7d:
                    fb:d4:25:44:96:25:0a:56:9a:0b:10:68:e5:59:da:
                    1a:33:70:60:0f:40:50:24:62:2c:6a:9d:76:3b:f5:
                    db:c5:1a:af:75:54:55:14:92:c9:44:89:3a:10:cd:
                    86:9d:54:f4:9c:7c:49:40:e2:8e:fb:25:3d:b0:df:
                    e1:da:0c:8f:02:6c:2e:8b:29:b3:3b:d4:2b:31:81:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:D2:60:CF:CB:21:6E:13:BE:FC:50:C1:BC:9D:14:29:92:72:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ebb9edb-140f-3e47-8f32-80590e678518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:14:31:ad:7d:df:74:63:6b:ec:3e:c6:09:b5:e5:8a:4a:
         21:82:a3:56:75:45:ef:24:b3:ef:2e:ab:79:23:dc:d4:ae:3f:
         21:c6:ee:24:4e:a7:b8:88:3e:5d:f8:a1:73:01:28:38:91:51:
         b3:8b:70:fc:08:b5:f5:db:9c:c4:33:a2:64:7c:fd:f6:4b:96:
         e5:c8:8c:c9:11:2f:14:69:ef:08:0a:2f:2f:7c:1d:ed:cb:f9:
         a9:74:37:15:5e:db:77:0f:b9:b2:27:ea:62:07:a4:18:55:ce:
         bf:c3:6e:b7:dd:00:0b:7e:a0:3b:64:a8:e3:46:64:b5:f9:0c:
         bd:54:28:ab:40:3f:ab:07:eb:95:a2:7e:79:c4:29:32:3b:1b:
         14:9f:7f:f1:72:f5:0d:c1:1e:68:40:52:2a:92:b6:19:3f:7e:
         84:db:74:92:0d:fb:c5:38:95:f1:f0:f9:34:66:9b:fa:37:aa:
         2a:9f:cf:67:f2:36:da:96:07:3f:b5:bb:97:07:98:9d:0f:eb:
         e7:d9:e8:c4:a4:2c:f1:cb:f9:1b:bd:0a:85:32:c8:2e:c3:79:
         1e:17:70:54:cf:4b:82:d9:c3:31:54:6b:6b:46:aa:9a:cc:f0:
         ca:f4:49:4d:fd:0e:b1:f8:17:a1:4b:6b:f2:7d:61:43:d6:0f:
         82:21:7b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:11:08 2026 by rpki-client