Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/12644124-0373-3ec0-937c-133a487e36fb.roa
File:                     12644124-0373-3ec0-937c-133a487e36fb.roa (raw, json)
Hash identifier:          yLX4esgpJGsqRtz87kpOjmmJyE8NsQntpIqqeWMQb3E=
Subject key identifier:   98:17:54:F6:EE:72:21:78:7F:CD:89:D1:69:CF:A0:12:57:31:1F:91
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EA6AB4B832EF4DB34FB874200
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/12644124-0373-3ec0-937c-133a487e36fb.roa
Signing time:             Tue 28 Jul 2026 17:37:50 +0000
ROA not before:           Tue 28 Jul 2026 17:37:50 +0000
ROA not after:            Mon 26 Oct 2026 17:37:50 +0000
asID:                     8075
IP address blocks:        192.46.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:ab:4b:83:2e:f4:db:34:fb:87:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 28 17:37:50 2026 GMT
            Not After : Oct 26 17:37:50 2026 GMT
        Subject: CN=ced68c6c-4205-4067-95dd-c7122f3bc542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:24:6e:a8:34:4c:9b:50:16:12:77:f3:4f:
                    3b:f8:bd:2d:64:f6:a8:3a:c3:40:9f:34:27:ae:eb:
                    1f:59:88:b9:75:22:b5:0f:c5:db:2a:78:36:f2:93:
                    04:00:58:c3:4a:b6:b3:bd:0f:9a:2a:50:4d:b5:72:
                    af:cf:c0:87:9e:8f:b8:d5:cd:e6:a6:7e:ef:86:b9:
                    f6:31:4f:22:55:93:e9:b8:61:36:d8:18:c7:5a:75:
                    da:e9:b0:95:bc:90:93:23:b5:2c:e5:86:13:dc:d1:
                    97:13:33:1e:34:e8:00:d8:fd:2e:51:e2:0f:14:4c:
                    19:dc:83:8d:69:39:33:76:54:46:a0:c0:cb:83:ab:
                    8f:8c:6c:44:48:17:9c:c4:6a:4c:98:d1:19:54:9d:
                    e6:58:d5:52:2f:cf:01:ae:4b:f8:f5:df:1b:1d:4e:
                    8b:f3:19:bb:33:db:7f:94:be:3a:02:95:93:e7:1b:
                    47:e7:e7:91:8a:21:c2:00:fa:ee:3a:e5:4e:70:3b:
                    b5:e1:5a:0e:67:af:8a:62:08:5c:65:51:be:bb:4a:
                    3e:e2:75:24:f4:1e:4f:f1:b4:40:ee:ea:44:48:df:
                    c5:81:a4:bc:dd:3b:c5:71:da:2c:12:71:44:c1:be:
                    96:3f:b7:fa:92:d3:01:2a:98:53:76:58:3c:3d:f8:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:54:F6:EE:72:21:78:7F:CD:89:D1:69:CF:A0:12:57:31:1F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/12644124-0373-3ec0-937c-133a487e36fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:98:50:fc:f7:fb:98:77:65:b6:78:c0:4f:9b:b3:79:4b:fa:
         dd:42:1d:55:55:8f:57:b0:49:54:5d:08:d5:bc:1b:de:d8:83:
         ed:bf:e7:35:8d:52:3e:13:b8:79:16:90:41:f3:06:af:1e:76:
         66:fd:a1:72:47:73:7b:bd:e3:12:96:2c:07:a4:8c:69:1f:5e:
         2a:eb:a5:21:81:0f:d1:7b:1c:63:51:19:a6:57:01:a0:91:0d:
         1b:ca:ab:e6:18:a5:3c:3c:75:a2:8c:6a:b2:e7:54:4f:58:8d:
         54:e2:02:25:46:ca:f4:39:f2:dd:27:a0:4b:4e:12:f3:a1:52:
         f1:2f:ab:61:4c:60:9f:c9:65:c6:db:69:43:fd:96:b0:cc:5d:
         39:b3:c3:06:52:08:15:3a:a7:8c:da:19:2c:07:ba:96:05:54:
         c3:77:c9:e8:32:64:41:55:89:27:6f:88:12:2f:5c:83:46:fa:
         3b:64:9e:ff:e3:65:f9:ee:77:17:7a:5c:86:fb:9a:c5:81:65:
         39:29:99:4d:43:a1:a5:e8:c5:7a:9b:24:d6:98:6d:4c:6e:95:
         47:5b:db:4f:14:91:10:fb:d5:a1:00:bb:5b:0d:da:33:4d:a3:
         28:0a:23:a6:f9:ee:87:ed:28:28:6a:63:e2:09:a6:56:96:38:
         91:87:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:42 2026 by rpki-client