Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f42da403-4ab1-342a-b8c0-989968dbfb29.roa
File:                     f42da403-4ab1-342a-b8c0-989968dbfb29.roa (raw, json)
Hash identifier:          26EeOf0cJyyvtL3bt2VAbqx9uedPTj2M3RI+Rpp/4uQ=
Subject key identifier:   8C:CB:39:B0:73:32:B2:0E:42:7C:4D:B0:65:E8:F1:DE:1D:58:AB:9E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D81DCE28964102C3D9ABA39C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f42da403-4ab1-342a-b8c0-989968dbfb29.roa
Signing time:             Tue 14 Apr 2026 20:25:54 +0000
ROA not before:           Tue 14 Apr 2026 20:25:54 +0000
ROA not after:            Mon 13 Jul 2026 20:25:54 +0000
asID:                     14789
IP address blocks:        172.70.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:dc:e2:89:64:10:2c:3d:9a:ba:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 14 20:25:54 2026 GMT
            Not After : Jul 13 20:25:54 2026 GMT
        Subject: CN=00e3c0bc-1227-40a3-9147-91f5947fc3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8e:1e:5d:57:47:94:f7:05:02:e2:da:b3:59:
                    3a:8a:50:26:2a:4a:f8:43:74:1d:55:e8:27:19:8d:
                    cd:13:37:14:a1:a2:8e:79:fd:26:ed:4a:50:c4:82:
                    c1:43:d9:ea:af:2c:d1:04:97:41:5d:11:10:8a:84:
                    99:a0:0a:61:ed:2d:7b:88:94:28:28:97:af:0f:fb:
                    bc:48:86:bc:7c:d2:f7:8a:61:70:d7:71:58:65:be:
                    6a:b9:bd:43:66:30:94:60:58:d5:ee:45:0c:2d:36:
                    18:a7:fe:2d:d3:ff:05:cc:2b:37:4e:b0:5b:05:f3:
                    9e:5e:eb:7a:fd:19:ae:7c:6f:51:52:43:34:22:4c:
                    1f:dd:0f:64:49:49:12:47:12:ec:c4:82:0f:4c:77:
                    3c:70:3f:42:18:85:b8:b9:1f:67:08:7c:a7:ac:ae:
                    25:1a:4f:e2:9a:19:9d:45:58:86:6b:9f:c4:4e:60:
                    39:e4:f8:eb:fe:71:bc:a9:ef:75:48:17:08:ab:08:
                    80:77:37:44:86:a4:27:b3:6b:b0:2b:79:eb:52:6a:
                    88:72:2b:67:8c:d7:75:2d:c4:67:b5:9a:8a:f8:fa:
                    81:33:32:86:13:37:53:c5:09:b6:eb:f6:64:2e:ff:
                    09:20:b2:bf:54:4e:1b:96:94:a2:31:dd:e0:30:88:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:39:B0:73:32:B2:0E:42:7C:4D:B0:65:E8:F1:DE:1D:58:AB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f42da403-4ab1-342a-b8c0-989968dbfb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.70.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b1:e0:28:32:c7:8a:29:f1:95:5e:9c:e9:3c:35:b8:c4:6a:
         e8:09:68:63:80:e9:60:d2:59:c9:93:6a:cc:21:20:60:ce:c5:
         8f:a5:60:5a:27:4c:c8:5b:09:53:a1:8b:55:5c:81:07:33:17:
         79:9d:e0:64:1d:c2:d1:79:fe:92:76:62:36:19:98:95:6d:dc:
         a2:00:7e:95:9c:a9:78:67:d0:4a:bc:d4:f5:40:5f:cf:2c:19:
         cb:90:45:cb:d4:ac:77:91:33:51:f4:79:6a:69:f5:b4:24:d7:
         fd:92:02:c9:92:0f:3c:ad:9f:66:13:f2:1a:f4:97:e3:47:aa:
         17:26:9e:70:e2:e6:6b:2a:86:e7:ab:36:73:94:1e:4c:0e:55:
         3e:13:32:89:8f:be:4e:a8:0a:ad:96:f2:a1:f5:86:3c:01:3c:
         23:96:de:1d:c1:d8:5e:c7:9d:41:7f:20:61:5b:e1:cb:47:0a:
         4b:f7:57:ba:4c:4f:a6:05:c9:b6:11:f8:9a:37:58:76:72:aa:
         eb:e4:11:5b:07:7a:98:fe:f6:00:91:7b:67:3a:d7:29:c2:60:
         c0:af:d8:19:cc:94:f2:78:e9:5d:1d:5b:40:e0:67:7b:34:a6:
         87:a6:e5:c4:84:74:a0:c7:cb:4d:ab:63:26:7d:b2:ca:c2:d2:
         61:0d:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:40 2026 by rpki-client