Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa
File:                     25105677-3f17-3688-b9c3-a674947cb1e3.roa (raw, json)
Hash identifier:          HgreuxKyZ3MTD7XyswvZrNhnlc0RoHoipc5fWKPmlwE=
Subject key identifier:   CF:0F:C7:11:63:68:55:AC:0E:13:7C:57:CA:CB:48:B9:85:48:4A:CE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A51336D8F5AF1CDEE70E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        172.70.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:13:36:d8:f5:af:1c:de:e7:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=f7014112-6d41-4daf-98ae-d7f8e3c09d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:ba:d9:a7:82:bd:92:a3:5d:ad:ef:bd:6c:
                    90:94:9b:70:ad:fd:af:1c:e7:07:dd:2d:61:aa:80:
                    f4:10:7f:c5:b4:fd:78:5a:9e:53:c1:37:3c:b5:27:
                    9f:d5:cc:56:8b:c7:bf:77:37:bf:84:c4:11:83:70:
                    f6:42:5a:d7:e5:ba:8d:a4:25:33:6f:9b:76:6e:c1:
                    f9:c8:de:a3:7c:7a:67:e6:3a:63:a2:0d:bb:fa:16:
                    eb:20:6c:5b:0b:9b:de:42:92:f8:6e:94:51:11:79:
                    b3:64:83:4a:4c:28:ac:08:b3:94:63:84:28:83:23:
                    72:c1:42:de:fa:96:f7:40:be:94:94:ff:c9:ce:5f:
                    e5:07:12:01:66:06:95:7d:08:dc:ba:d8:66:01:15:
                    1a:a7:2d:91:f5:d7:e6:4f:7b:eb:7d:5e:98:37:38:
                    2a:47:a3:18:e8:cb:d6:f6:1e:45:7f:36:9a:99:40:
                    d4:56:d5:06:32:82:f9:7d:2f:64:9d:d9:2c:0e:ef:
                    00:4e:0e:2b:95:b0:5a:80:fa:af:13:e6:33:64:8f:
                    59:89:0a:14:f1:e7:89:e0:93:67:af:53:7f:07:f4:
                    77:c5:05:92:6c:5b:30:84:46:8a:18:7f:e5:0e:90:
                    5e:32:31:63:63:de:bc:2c:c6:61:a4:e1:b5:8a:a4:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:C7:11:63:68:55:AC:0E:13:7C:57:CA:CB:48:B9:85:48:4A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e6:8a:d0:af:d5:e0:ef:6e:52:1f:dd:79:e5:4f:11:fb:b0:
         37:4a:8c:a3:b0:dc:76:6a:a4:04:3c:1d:f4:9c:f3:6d:f7:1f:
         49:12:4c:6a:37:a6:5d:b1:d4:da:58:85:31:30:65:33:56:9a:
         e5:08:65:e5:32:b1:57:23:a8:07:78:de:40:a6:ab:15:9c:fd:
         d1:aa:f0:b5:59:46:1d:4a:d7:3e:e9:cf:56:eb:f5:d8:ce:e6:
         1e:6a:a1:ed:f3:24:49:34:c9:65:8b:d8:8d:a4:45:08:e0:a2:
         0e:52:22:46:d0:d5:90:17:db:d0:1b:c1:66:76:0f:36:24:2e:
         bf:70:38:72:9d:ae:18:66:20:6b:2b:39:d5:13:79:27:30:55:
         6f:9d:f8:a0:05:0b:96:a6:9b:ae:a2:8d:66:7b:81:0b:c8:5f:
         5e:f5:ce:2b:53:ea:30:60:6f:74:13:05:28:5f:5f:69:42:7f:
         04:df:d7:03:57:58:be:e4:30:c1:88:c6:c3:c6:3a:d2:10:14:
         82:a9:f9:36:82:96:62:e4:d9:3e:4c:eb:d5:2b:60:e4:48:d0:
         09:5a:1d:5b:5a:45:d6:9f:7f:33:97:e0:c6:43:ea:02:63:6b:
         9d:b0:db:b1:8b:98:01:5a:11:6f:92:fb:4c:f5:83:e1:0e:61:
         46:d2:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:28 2026 by rpki-client