Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa
File:                     9b95030b-a993-3973-92d4-5063b41f1b1b.roa (raw, json)
Hash identifier:          GOuEKjm9dMpjYRV0priQ64RCWgutFm43EP/0ffzq6OQ=
Subject key identifier:   5C:84:63:7E:37:13:B8:E8:5F:B4:AA:51:88:19:39:E9:1F:80:EA:18
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584CBDB1E017060AF6341DF10480
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        207.202.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e0:17:06:0a:f6:34:1d:f1:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=9abc1eee-1ec1-4602-9e36-69210e4adffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:2a:5a:a5:af:dd:4b:ee:a3:87:67:d5:04:
                    06:19:32:10:03:83:93:16:b5:da:b2:86:04:af:41:
                    1c:13:f9:e7:47:26:41:91:b4:26:c6:ca:0c:ee:bf:
                    fc:09:34:f7:77:ae:05:30:39:82:a5:8c:55:42:1b:
                    d4:ad:16:34:b7:b5:1d:21:2e:ee:21:58:4f:09:13:
                    1d:70:51:60:c1:dc:46:34:aa:f2:e5:9d:fa:c7:ff:
                    a6:c5:2b:60:f2:9f:fe:1a:a4:ac:5f:71:ff:90:d8:
                    a6:62:4b:f1:dd:f8:fb:83:3b:80:f8:2b:5d:c4:c3:
                    6c:22:a5:f7:00:4c:1b:5f:b6:cb:c3:23:e7:25:60:
                    62:f3:f5:cd:07:d5:5a:ef:6b:3f:27:98:a6:a5:6a:
                    ab:d4:7e:ae:24:f7:90:f2:df:72:8f:7a:d0:0e:ef:
                    5d:e6:2a:5e:ca:f8:eb:8e:cd:48:d9:85:ea:be:fa:
                    ca:a2:32:44:ae:80:6b:a3:ee:d1:5c:4a:3d:c3:3f:
                    5e:25:b4:40:cc:25:9a:ac:b5:50:86:7e:3f:0c:bf:
                    30:d9:dc:2d:4e:fb:94:3e:a8:7c:e6:ac:9a:34:60:
                    e6:fc:7a:78:f5:41:d7:e1:7a:6f:2b:05:fa:ae:f8:
                    5c:bb:4b:06:2f:09:c0:18:e1:33:c0:37:3b:4b:68:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:63:7E:37:13:B8:E8:5F:B4:AA:51:88:19:39:E9:1F:80:EA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:42:f8:90:07:6b:bf:7e:df:10:f6:38:64:7c:14:82:8e:e8:
         0b:a1:7a:69:18:03:be:ec:9f:4e:fd:c5:8b:94:e6:24:16:16:
         48:12:b1:90:0a:74:c9:1f:9c:a4:8b:9e:ef:f7:9d:52:6f:a2:
         5c:5b:b7:08:07:41:06:70:17:a1:d4:01:6a:f9:cd:92:81:4e:
         2c:4c:0b:dd:d5:97:ff:c0:92:c5:80:00:1f:74:e2:b0:67:ed:
         39:24:5e:68:cf:0e:df:e2:9b:76:9f:78:a3:e2:b5:88:47:ea:
         3e:9b:81:34:1c:67:33:40:47:1e:08:f0:36:4e:04:bf:1d:ce:
         c1:f3:ca:44:da:a6:93:2a:96:1e:31:8d:2f:4d:f8:d6:a2:c6:
         e1:e2:fa:e7:b5:98:ea:5e:83:fe:31:9d:9d:9b:76:57:77:60:
         5e:3a:f0:57:8f:80:8b:de:48:4c:8b:0f:53:37:86:77:78:cb:
         65:44:40:09:b0:3c:eb:82:e2:4e:a2:e9:e4:4a:4c:e6:c5:6d:
         6c:5e:84:7e:f5:73:17:5f:f3:3f:12:0e:fe:87:37:76:4c:0c:
         6f:b1:33:94:b8:15:e0:17:a6:e7:0e:4e:b1:4d:be:a4:ca:d4:
         02:a4:d8:de:51:c1:33:c7:cf:a7:63:09:ad:31:50:26:e1:97:
         2a:36:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:46 2026 by rpki-client