Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/ade109cd-4f70-35c4-8b5c-98d3b0961e04.roa
File:                     ade109cd-4f70-35c4-8b5c-98d3b0961e04.roa (raw, json)
Hash identifier:          5K/Qih7q9Jiel+U75YmpYgC4glg0Fi/UwHAsnRL6aeY=
Subject key identifier:   83:0C:29:F3:57:47:E6:FC:AF:AE:A8:B1:A2:29:9B:D9:28:A8:39:94
Certificate issuer:       /CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647
Certificate serial:       010D0C9F4328584E15E488135C1CBCE2CBA9EB70
Authority key identifier: 17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/ade109cd-4f70-35c4-8b5c-98d3b0961e04.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     11243
IP address blocks:        168.100.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:88:13:5c:1c:bc:e2:cb:a9:eb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba3e15-3fe1-4634-8e3b-838e9f2ae647
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=adc05eaf-3b41-44ed-b227-dd104ec2bc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:53:71:fa:a9:b5:10:f6:a2:b4:47:b0:a3:
                    6d:f7:68:49:96:17:69:da:a5:d1:40:48:8b:67:4b:
                    3a:75:c5:82:50:35:03:ae:77:49:dc:69:93:ea:94:
                    7f:43:93:74:6b:42:66:de:65:e3:6e:5a:27:be:9d:
                    cc:9b:d9:bb:28:2c:0c:18:b3:0b:b7:69:15:21:22:
                    20:2d:d4:ee:1b:3a:58:7d:6a:6e:ba:65:ba:40:c1:
                    73:e4:a4:a6:30:e7:3e:5e:c3:9c:35:bd:b5:4c:f5:
                    b9:a4:0c:e3:09:ac:2f:26:cd:f9:c1:a0:c1:81:77:
                    9d:3d:46:d2:0e:08:27:ac:13:37:27:53:a7:76:98:
                    9f:b5:51:ee:22:8c:da:81:69:75:75:d2:e1:13:be:
                    b9:e6:36:1d:17:00:13:f6:9a:10:0c:0a:51:01:6e:
                    d3:46:93:e3:d6:6b:4a:cc:69:5b:03:f8:d1:20:c2:
                    00:ac:24:ee:83:3d:59:2c:6d:32:d6:32:23:37:11:
                    69:85:3f:48:5a:49:a2:56:86:fc:d8:04:29:30:0c:
                    38:93:b3:1e:79:d0:65:57:23:cc:d8:09:5e:35:23:
                    75:b5:df:b4:22:72:5a:83:4c:07:2e:e9:eb:56:f5:
                    e2:25:79:f9:8d:9c:69:32:d0:cb:75:e4:5c:1d:3e:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0C:29:F3:57:47:E6:FC:AF:AE:A8:B1:A2:29:9B:D9:28:A8:39:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/ade109cd-4f70-35c4-8b5c-98d3b0961e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.crl

            X509v3 Authority Key Identifier:
                keyid:17:8A:2C:4A:22:5C:75:BB:7A:7B:F4:B0:8E:30:51:B7:20:11:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfba3e15-3fe1-4634-8e3b-838e9f2ae647.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:66:1d:28:02:33:27:f5:e5:f0:df:73:5e:12:77:6c:48:
         20:e0:ec:89:99:02:37:7a:a1:6e:d4:a9:1e:16:67:06:6d:1e:
         12:ce:7a:b7:d5:5d:be:1b:80:39:98:f6:1a:3e:68:ae:2f:ce:
         f3:34:5d:5d:a7:ca:3f:60:e6:2e:1b:65:9c:58:8f:7b:1c:dc:
         32:51:e3:59:46:9d:ca:f2:e7:55:0c:c9:c0:ae:64:6d:53:ad:
         8b:57:7a:1f:40:8c:eb:51:12:d7:84:c2:47:4f:9d:b7:61:65:
         ba:29:53:c5:4c:e9:73:c6:7f:64:c1:2b:13:16:5c:ff:e6:4c:
         75:6d:a2:60:89:8f:82:71:3f:d5:e3:09:8f:28:0a:93:df:8b:
         37:4f:a6:5c:7d:9b:4c:0c:38:dc:c6:14:81:d8:f5:c3:c3:4f:
         7d:33:af:ad:5d:f6:a4:1b:49:bb:43:1a:d4:6e:7a:9f:17:d9:
         68:b9:02:c9:07:d0:c1:bc:c0:cf:1c:02:d8:18:36:cc:05:0e:
         1e:07:0c:76:bc:25:f3:fc:24:6b:c8:6c:19:88:98:79:d5:23:
         a3:c8:b8:d9:da:78:63:3b:ce:df:ae:60:a0:df:14:47:c0:9c:
         61:55:ca:3c:49:05:b4:3a:fc:ce:f3:06:09:24:36:6c:be:33:
         fc:8b:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:31 2026 by rpki-client