Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa
File:                     f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa (raw, json)
Hash identifier:          liHBhIF3ejRnwlby3o3nXA9y8rexoaJT/HhoKSAohnI=
Subject key identifier:   2D:10:1C:DA:DF:EC:73:F8:6F:29:83:8E:E5:19:E7:8F:AF:03:6B:2D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAEB6361D634EED725BC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        170.85.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ae:b6:36:1d:63:4e:ed:72:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=c372014c-9589-42e5-ad84-d0ca25d37960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0c:8d:ba:8b:49:27:b8:15:df:7b:f5:f2:eb:
                    20:e3:90:3b:e1:e0:3c:32:b1:0b:9b:42:77:d6:23:
                    97:91:a2:c1:31:40:b7:85:16:46:10:88:50:01:3a:
                    0b:a6:40:b5:d7:9e:ff:59:96:36:83:bd:19:d3:9a:
                    ed:55:7d:5c:90:32:93:30:f1:6b:06:dc:76:7d:be:
                    8c:e1:ef:6a:1d:bf:48:46:9b:50:93:ea:eb:3a:c1:
                    73:1f:9b:9e:50:7b:14:14:29:8e:aa:94:b4:07:6e:
                    e1:06:9c:68:ff:aa:e3:d2:dc:1d:e1:91:d4:d3:c9:
                    50:da:96:c0:f9:4f:09:26:54:eb:b6:fb:be:88:6f:
                    1a:ca:f1:3e:74:25:53:f8:7c:66:ae:ea:e6:81:76:
                    28:7e:04:ef:16:87:f9:e8:d9:6b:4e:52:81:a2:af:
                    7a:a1:a9:5a:5d:6a:46:db:21:a4:cd:3d:9f:fb:bb:
                    26:0d:97:d8:d5:fc:fd:7b:58:62:49:5d:7b:a5:70:
                    fa:b2:ee:65:b9:b1:ed:38:1a:00:43:c9:0a:da:36:
                    85:4e:7b:a3:79:fc:1e:37:8b:e4:39:3c:ff:32:0b:
                    6d:85:98:12:cd:d4:95:ec:9c:2a:1d:00:20:c6:83:
                    3e:9f:6c:94:ba:7f:1e:46:58:76:a7:03:6b:a3:7e:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:10:1C:DA:DF:EC:73:F8:6F:29:83:8E:E5:19:E7:8F:AF:03:6B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f7ce0c53-86ce-313a-9dcd-b699fe8d211b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:20:78:6d:1a:28:8f:1b:62:47:d1:42:ae:b8:37:b8:3e:
         7e:97:50:04:d7:12:f5:75:2b:59:c0:f8:f7:6d:fe:06:c2:f4:
         77:be:b5:3e:5a:6a:b8:94:c4:4c:72:a6:d1:a8:72:91:1d:81:
         b6:e2:14:67:3b:55:6b:da:91:f2:1e:fd:b4:d6:06:4d:65:29:
         19:ec:88:cb:e8:39:93:2b:d0:43:19:fe:c4:e2:28:8f:ec:f5:
         9a:b6:e8:da:64:98:bf:d0:2f:78:32:7b:5a:bf:db:c5:01:9d:
         72:ff:73:4f:12:ad:53:e7:fc:cc:11:b5:7f:5b:2f:48:aa:53:
         bc:33:29:dd:95:f0:b5:bd:86:6f:91:95:f9:45:39:f1:1f:cb:
         dc:fc:c8:71:05:8c:59:87:d8:1a:a5:67:58:f2:dd:c1:63:97:
         34:45:3b:04:c5:d4:83:7f:79:ae:a1:17:b0:29:64:fb:de:27:
         c4:29:f5:dc:67:a2:2d:68:ab:02:2c:57:0b:8e:4d:c7:d4:ee:
         77:ca:74:26:a0:52:61:e4:be:5e:3d:59:7c:49:85:40:45:7b:
         b9:b4:99:47:1a:fb:56:27:31:07:59:ec:b3:ae:86:bb:fd:ca:
         c5:7e:4a:4d:1e:e7:e1:0a:8f:39:90:8b:a2:e8:27:c9:9e:9c:
         39:d4:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:37 2026 by rpki-client