Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/2ff947d9-9624-39d6-a675-e6424eaf27c7.roa
File:                     2ff947d9-9624-39d6-a675-e6424eaf27c7.roa (raw, json)
Hash identifier:          NaNowVFAF6Ti8Ir5e1RtFly8vEj4JFf3gKXvso+Yqoo=
Subject key identifier:   46:8F:44:A0:59:A1:1D:14:6C:49:CD:FE:34:83:2C:BC:2E:BC:9C:47
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584D6C0FDD1D0B318FCA02A3C140
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/2ff947d9-9624-39d6-a675-e6424eaf27c7.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     62802
IP address blocks:        47.19.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:dd:1d:0b:31:8f:ca:02:a3:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=7d611afd-e9f3-41c0-ae29-e1f9a6208c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:98:5b:bf:ab:93:e5:44:89:32:db:d3:2c:
                    48:6b:b5:46:7b:d6:50:12:be:f6:f7:3f:91:3a:a8:
                    ec:9b:2d:eb:df:9b:52:ae:7a:ee:ad:4f:0b:b8:a1:
                    81:f4:89:14:8c:2d:52:fe:04:93:60:d4:ea:cb:ce:
                    27:86:c2:5b:7c:40:47:70:c0:64:e0:ee:de:88:1c:
                    77:e5:c2:4f:ce:07:93:68:fd:8c:53:2d:cb:fa:4b:
                    79:49:f0:a6:53:6c:a6:1c:60:fb:b1:46:75:93:dd:
                    a4:34:04:da:7d:0a:bc:99:44:a6:32:e2:4d:05:44:
                    e9:68:5f:07:5c:40:a7:87:45:83:34:fb:e3:22:7d:
                    64:9a:16:1b:b3:4e:81:7b:8c:b6:3b:a3:a1:72:df:
                    76:1b:a5:74:44:fb:44:c3:70:38:50:0f:fc:45:74:
                    bc:97:91:b1:cb:e1:b2:c7:14:bf:cc:34:ab:dd:6f:
                    8f:61:7b:94:0d:7a:8a:de:59:71:34:54:10:78:57:
                    88:db:45:eb:47:f7:f7:31:fc:ac:ce:bb:e3:93:67:
                    ee:ce:e0:8e:af:69:e6:fc:f9:0b:75:8a:da:28:a7:
                    62:52:5a:88:6b:35:5f:9e:93:bf:e1:9d:33:8a:a0:
                    0b:61:36:e5:9e:1c:b2:21:3d:31:18:0d:16:f0:e3:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:44:A0:59:A1:1D:14:6C:49:CD:FE:34:83:2C:BC:2E:BC:9C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/2ff947d9-9624-39d6-a675-e6424eaf27c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:61:40:24:20:15:c9:46:3b:da:6a:03:11:12:2a:fe:a2:94:
         e9:2c:77:6a:b4:d5:4a:8a:a4:55:d2:46:f2:88:3e:cb:e3:16:
         c5:71:f5:03:9b:50:c0:4e:71:d4:c3:84:14:71:16:44:de:47:
         d8:d0:fc:45:c8:08:52:25:a5:78:79:5e:ef:1a:ba:1c:04:23:
         db:b8:ed:56:d6:a6:c4:17:d0:40:86:71:0e:82:cc:3e:d0:42:
         d9:c5:4d:06:ef:c2:00:4a:50:e7:c3:b0:ad:fc:a6:fb:9f:f5:
         10:8d:34:8b:af:53:17:7c:7b:c0:c9:61:fa:b8:e9:e7:67:95:
         44:22:5a:0c:c5:76:2f:e0:51:a0:14:e1:77:ae:3e:4b:c4:c8:
         8b:d3:43:b9:5a:76:c2:60:b2:2c:01:cc:75:0e:a5:f8:4c:78:
         4e:81:49:73:d2:3b:ff:1f:dd:aa:39:93:09:b1:12:45:4f:58:
         41:fd:23:82:dc:c1:8d:ed:33:bd:fa:3a:11:98:d3:0e:e3:71:
         2b:d8:66:10:de:e2:89:39:f2:2e:b4:9e:92:fc:40:e3:28:08:
         87:c6:2f:69:b8:b7:9e:0d:09:4f:52:1b:3e:85:37:c5:11:1a:
         86:1a:09:d0:e6:27:bf:5e:3f:0c:d4:7b:0d:76:1b:0f:36:00:
         d4:40:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:49 2026 by rpki-client