Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f0ba53b1-59d8-3aef-84fb-4112aed3ec34.roa
File:                     f0ba53b1-59d8-3aef-84fb-4112aed3ec34.roa (raw, json)
Hash identifier:          0ViL6mhghNzO4WGjp1CCJTnlUrttZy8b0LF/HeK+/Zg=
Subject key identifier:   F1:D3:F1:17:92:B2:5B:F9:41:12:6F:B4:2E:DE:11:22:83:D5:A8:1A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAD2B8D1A39BF1E798880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f0ba53b1-59d8-3aef-84fb-4112aed3ec34.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        170.85.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ad:2b:8d:1a:39:bf:1e:79:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=beba304f-fae9-45c2-a106-0126444e53b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c5:32:2c:98:47:6d:a4:de:68:fe:91:99:b9:
                    e9:70:55:1b:76:5a:7e:0b:9c:ec:e1:bb:d0:9f:6d:
                    e6:90:78:1d:a3:61:43:4f:1e:40:bb:f3:3d:e5:a7:
                    3c:bb:f4:b9:eb:04:f2:8a:a3:e5:22:6d:96:64:53:
                    75:73:29:76:16:ff:4a:89:ee:bc:7e:b8:5a:66:71:
                    54:ce:c0:18:01:26:89:3f:71:57:93:e8:3f:dd:42:
                    b9:85:b7:cc:13:30:52:c7:6a:91:9f:2b:03:1a:5f:
                    b3:18:b9:25:74:c6:ff:de:1f:18:1d:e4:de:25:63:
                    79:23:36:31:a3:ea:b5:58:cb:75:e6:91:1f:bd:1f:
                    bb:ee:66:42:cd:00:f1:4f:c2:80:87:cf:54:0f:a6:
                    9e:9b:c6:69:f7:96:aa:24:b4:49:05:41:29:57:60:
                    3b:3c:85:f2:d3:4a:6b:6b:8f:6d:fe:91:79:d1:41:
                    a2:ce:29:ed:7b:ec:53:b5:ed:d0:e3:dd:3b:6c:7f:
                    a5:a2:db:bc:94:43:db:93:b4:b1:2e:d0:44:a9:2b:
                    b0:a7:cd:bc:a9:82:26:c3:bd:73:86:e9:f4:65:75:
                    7f:3f:69:04:36:f6:77:83:6c:36:48:0b:b5:b8:1e:
                    12:2d:54:77:50:fe:e8:d6:df:7f:0e:36:28:41:d6:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:F1:17:92:B2:5B:F9:41:12:6F:B4:2E:DE:11:22:83:D5:A8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f0ba53b1-59d8-3aef-84fb-4112aed3ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:09:3e:a5:30:2f:5c:b2:dd:5d:68:70:95:e0:6c:46:78:17:
         f9:3c:17:ac:3e:cd:4a:33:fe:b3:f6:01:44:7d:6f:74:fe:77:
         a2:e5:3f:28:28:ae:73:fd:65:60:f7:61:25:0f:91:3d:1e:57:
         c3:47:f5:0d:bc:5f:f4:4c:eb:47:c6:19:4c:84:bb:b8:db:68:
         df:57:3e:54:72:eb:e0:3e:2b:0c:3c:cd:6a:e8:13:72:36:3b:
         01:3d:ff:cc:38:94:87:b5:35:90:b5:0f:b7:d8:81:b9:a8:7b:
         dd:6f:8d:34:7b:79:bc:13:52:bc:61:d7:99:ef:d2:79:e5:51:
         b3:69:0c:44:d3:2e:49:5e:56:9a:29:f4:be:c6:c8:72:b0:e8:
         a2:70:91:d5:a6:7f:6d:58:62:54:3b:b5:df:60:58:10:43:0e:
         00:93:5d:e5:66:b7:96:f7:14:95:55:8a:41:a8:2b:d7:82:34:
         82:cd:f5:84:dd:d5:f9:23:58:d8:3f:2e:97:44:e5:06:69:33:
         55:a4:bb:9c:d1:35:6c:72:bb:12:94:b0:e8:f4:74:3d:a6:65:
         f3:95:c8:ea:00:71:30:c6:ef:cd:63:47:ea:b4:1b:73:cc:5e:
         fc:15:60:1c:df:f3:42:c9:ef:bf:7b:31:9d:15:fa:00:d8:e5:
         ff:46:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:28 2026 by rpki-client