Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa
File:                     962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa (raw, json)
Hash identifier:          4heO7SUy43QL4MpIW9hDQw/FWPxYUPm21LtMBnLPfjI=
Subject key identifier:   EF:C0:89:EF:A2:57:46:6D:6A:1D:B7:69:3B:95:23:DD:3B:D4:78:D6
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D65152E565FE4DC5E2D11D970
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16696
IP address blocks:        170.199.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2e:56:5f:e4:dc:5e:2d:11:d9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=4a99172f-7f66-4042-a207-4e8b2822ead5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:ae:1f:62:6e:5c:e6:09:69:12:5a:54:8e:
                    0c:4c:5c:ba:47:84:ee:f9:6a:09:3f:14:58:42:93:
                    e2:25:ba:7a:b4:8e:dc:4e:7d:bb:bc:ad:36:e5:9a:
                    fe:46:6d:b9:0d:4b:60:f1:6f:6d:2b:e5:64:3a:29:
                    58:8d:fd:5e:fb:14:f6:08:47:4b:55:8b:bc:9a:02:
                    af:c6:6e:e1:e4:5d:5b:82:09:34:b2:c0:f4:d2:4f:
                    b1:0a:a6:a0:aa:86:50:27:cb:13:16:ff:a6:1e:68:
                    b9:78:b8:32:35:9b:42:95:a1:99:5a:4f:ed:3c:90:
                    1b:42:f9:35:91:17:be:7c:98:ab:b7:9d:80:08:22:
                    92:89:1b:4f:2a:78:e6:01:07:3c:05:d2:cf:46:85:
                    79:01:26:b0:0c:6c:08:0a:18:f4:c2:73:e5:4e:6a:
                    f4:83:07:d3:0d:5b:a8:6b:c5:fd:f2:df:17:16:1b:
                    ef:82:51:d1:9b:a1:7b:e2:1c:17:4b:e3:8c:29:9e:
                    d0:be:94:21:b6:2c:c5:3b:45:3d:1d:82:eb:6e:88:
                    73:32:9a:5c:9b:ec:9a:1a:70:ae:45:e3:ea:d5:85:
                    6b:6e:6b:45:9a:d1:fc:33:a0:81:10:42:0f:70:3e:
                    85:e8:c0:fd:ed:0b:ba:a7:39:25:a9:3b:78:9c:49:
                    7c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C0:89:EF:A2:57:46:6D:6A:1D:B7:69:3B:95:23:DD:3B:D4:78:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/962a24c5-1ca9-38e4-bc73-aa2cd3fdcf8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:24:48:48:d3:ce:0f:f9:00:8c:3d:a5:0a:e2:31:f6:48:ea:
         f2:90:db:c8:10:5e:96:2c:ce:a9:af:01:29:e8:01:0e:57:fe:
         ae:9f:ce:30:e9:95:08:13:27:61:92:37:55:55:38:e0:19:8d:
         ed:e2:5a:ff:4d:57:7f:ca:e8:8e:bd:74:12:9f:0d:33:05:64:
         9b:4a:af:f3:2d:34:dc:cf:c6:60:08:9a:5e:1a:0e:f1:a7:31:
         0d:b1:62:89:17:30:1a:04:f4:58:ce:da:fd:6c:8e:11:7e:97:
         3e:23:aa:43:62:ef:7c:26:79:d3:65:6c:e2:fc:32:2e:c5:a2:
         ae:8a:5b:d7:0d:2f:83:56:95:4d:19:d5:20:b0:7e:8d:6c:6b:
         93:d0:82:53:24:6b:c0:41:38:0f:6c:1b:4a:bd:46:22:bb:ad:
         1b:d7:08:d1:67:27:7d:45:74:23:e6:ce:b3:ab:81:a7:75:c5:
         68:d4:85:c1:a6:a2:e8:e3:aa:ee:3b:bd:3a:29:cf:ec:47:98:
         39:b5:2b:2b:2d:51:5f:14:2a:30:08:ee:8f:41:b9:39:2c:0b:
         32:84:3a:48:71:aa:f0:e2:60:84:44:dd:dc:9a:81:c3:77:a9:
         cc:54:58:38:30:62:49:ff:bb:c0:c8:33:0b:57:ca:77:6e:df:
         05:b7:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:44 2026 by rpki-client