Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/b72e5cb6-0e84-37b0-8a56-8d420c54193d.roa
File:                     b72e5cb6-0e84-37b0-8a56-8d420c54193d.roa (raw, json)
Hash identifier:          KcQnP9EHvSZkYWCFAMciwRtgk0TnsP/jG0DMMEQ6gHA=
Subject key identifier:   1E:6D:6D:99:13:77:A3:F4:92:53:B4:28:B7:C0:50:6E:5C:E9:23:4E
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584D6C0FDCBAE7B26349A7620880
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/b72e5cb6-0e84-37b0-8a56-8d420c54193d.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     19926
IP address blocks:        47.19.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:dc:ba:e7:b2:63:49:a7:62:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=50e6d25a-c1ed-4b8f-8b1f-275811677261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:fe:eb:c0:d8:1d:c0:ea:b8:22:d7:13:68:
                    d5:f7:62:41:51:65:71:24:d5:d1:85:88:8f:c5:1c:
                    ac:4f:33:01:8e:93:62:da:50:31:93:81:a4:4f:ae:
                    84:46:d8:0e:6c:84:14:9a:19:dd:73:2f:53:97:ec:
                    e2:c3:74:75:3b:8c:db:54:0e:ba:80:c6:48:e3:ad:
                    3f:95:b8:8c:da:96:51:99:49:e9:c9:fb:43:37:6f:
                    17:36:4f:87:49:be:36:e8:50:d9:be:e2:df:c7:bb:
                    05:52:9b:4c:d5:8a:5b:3d:3c:d0:00:cf:0b:8a:9a:
                    fc:86:60:ac:9b:e3:4c:a4:dd:1e:4d:94:04:16:b8:
                    0b:aa:51:8e:27:f7:6e:72:7a:b2:51:03:65:40:94:
                    d0:db:6d:8e:ff:78:c1:99:5c:08:6d:3f:21:8f:3c:
                    ae:53:f8:8b:41:5e:9e:50:c7:9a:dc:2a:75:17:90:
                    85:57:b6:9b:10:6e:81:6f:f8:f7:66:3a:5c:3a:e1:
                    75:f6:e5:1e:6b:79:f5:45:0c:95:0d:ac:3a:ee:4e:
                    70:3d:50:78:b0:27:22:57:1e:28:fd:28:92:18:37:
                    a1:2b:e4:06:a5:83:0a:3d:d9:8c:98:8a:18:94:b1:
                    24:35:29:43:01:9d:e1:15:2a:a9:ed:7f:c2:ef:81:
                    73:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:6D:99:13:77:A3:F4:92:53:B4:28:B7:C0:50:6E:5C:E9:23:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/b72e5cb6-0e84-37b0-8a56-8d420c54193d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:0d:6e:3f:dc:44:c3:50:fd:c1:ad:da:57:36:39:84:62:
         be:61:6d:94:d6:4c:de:5b:59:18:3a:79:78:3d:8b:bd:f0:ba:
         58:19:45:5f:14:d6:ff:8b:df:a2:0d:4a:e3:77:55:3d:9a:fc:
         dc:80:82:8b:3e:32:0f:31:59:0a:47:a6:1e:9b:44:c6:0d:ef:
         72:09:53:7e:6a:98:7d:f7:d5:71:a5:bd:f2:6c:ed:de:65:ec:
         f0:e7:88:d7:b7:0f:d7:cf:a4:cc:28:c8:fa:00:f0:67:69:10:
         87:02:ef:10:20:b7:a0:79:16:f9:8f:cf:fb:93:96:7d:29:d5:
         da:22:72:5d:82:68:83:8d:ce:b2:7e:5c:0a:02:11:46:01:d6:
         2f:31:0a:45:89:37:65:b4:74:f0:8e:3a:36:19:6c:b0:5c:23:
         34:ef:f9:8e:15:47:43:82:2d:05:e6:14:e3:1e:b8:cc:e3:c9:
         40:e2:46:63:b8:5e:d9:4d:a4:84:6c:d2:e1:31:29:f5:ad:9c:
         f2:0f:aa:84:4b:91:ce:b9:5d:5f:c2:e0:d3:0a:8d:8a:cb:1c:
         9d:32:fe:54:b6:aa:f9:4f:cc:ef:08:9c:78:8b:76:ee:d5:0b:
         73:df:37:65:87:e8:2e:07:a8:14:5a:b4:cb:91:bc:09:01:76:
         82:05:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:48 2026 by rpki-client