Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/d4a6602c-b939-3998-82bc-decadeefdd3b.roa
File:                     d4a6602c-b939-3998-82bc-decadeefdd3b.roa (raw, json)
Hash identifier:          2ho9f4wdjtunQ9E2MHy+eWiif5pWvYVi7cSJVwPOc/E=
Subject key identifier:   6C:18:98:12:A1:C1:04:6C:DB:21:E9:F1:CA:FD:6D:7E:F6:72:0B:FC
Certificate issuer:       /CN=cc2bfc06-2668-422c-ab3c-525935f88619
Certificate serial:       010D0C9F4328584D65152F55B393941175B1AD68
Authority key identifier: 6D:CD:1F:EA:8C:A4:4B:87:A1:E7:0D:C7:D7:D1:66:45:01:C0:74:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/d4a6602c-b939-3998-82bc-decadeefdd3b.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        165.124.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2f:55:b3:93:94:11:75:b1:ad:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2bfc06-2668-422c-ab3c-525935f88619
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=7f1f96e9-a373-41ea-8c19-a59ceafe5122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:d2:53:e6:ed:e4:23:c5:d2:2f:76:0d:52:
                    f8:bf:b6:b2:d1:4a:56:13:fb:01:e7:e1:67:a7:68:
                    0e:44:f3:bd:5c:b5:9a:f6:fc:84:78:f0:9f:90:af:
                    26:27:38:63:0b:b1:bf:d8:21:73:c0:e5:59:9b:6a:
                    dc:0c:63:92:9e:ee:85:3c:71:b9:19:52:c7:b0:00:
                    47:cb:0c:d4:0a:70:a3:5d:5c:68:7a:91:4f:4a:0f:
                    c5:ec:68:9d:6c:5b:12:f3:7c:ea:ac:e8:99:58:0a:
                    b2:9a:cf:f8:19:a1:32:eb:a4:47:56:02:6c:7b:a3:
                    f6:39:46:b0:df:c1:a5:59:96:ed:ae:9a:a5:4f:85:
                    3c:3b:c1:d8:81:d4:16:18:5e:88:f6:37:e5:d2:3f:
                    51:d3:29:52:e0:fc:32:5b:73:74:3f:fe:e3:27:0a:
                    5d:cd:e4:2e:b5:a8:ec:7a:d4:74:f1:9a:a6:c1:5e:
                    81:dc:16:d5:8d:6d:01:f6:ec:dc:00:4f:a5:11:e2:
                    20:f2:bc:12:8b:0e:03:f1:45:42:00:3c:a4:73:f5:
                    bb:e8:97:39:c5:5b:ab:c8:cf:87:f1:b7:c2:1c:c6:
                    96:5b:e5:af:0a:b1:3c:e2:d1:02:57:79:67:22:4f:
                    f4:ac:02:6d:c3:f2:40:09:96:62:ec:09:0b:bb:11:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:98:12:A1:C1:04:6C:DB:21:E9:F1:CA:FD:6D:7E:F6:72:0B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/d4a6602c-b939-3998-82bc-decadeefdd3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.crl

            X509v3 Authority Key Identifier:
                keyid:6D:CD:1F:EA:8C:A4:4B:87:A1:E7:0D:C7:D7:D1:66:45:01:C0:74:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.124.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:58:2c:7b:ce:de:a7:71:e9:70:75:8e:fd:b1:a5:01:c8:
         a1:ad:4f:eb:47:e3:b7:c6:19:e6:6c:7e:a6:f2:2b:a1:a7:a4:
         b2:d4:15:13:96:49:51:4e:58:ef:6a:d5:67:a2:67:0d:41:b6:
         e6:4e:68:f3:cf:7d:ea:52:af:48:37:40:52:63:95:65:89:af:
         2e:56:56:c7:31:3e:5f:78:95:91:51:ae:e6:a8:07:a2:5a:12:
         97:56:b5:17:9a:81:ab:53:63:1c:8b:f5:a9:5e:39:17:04:3b:
         f9:9d:32:46:50:43:b4:df:8d:fe:fb:cb:76:7b:2a:b6:a7:41:
         eb:98:35:cb:3e:d9:67:ed:ba:5b:31:b0:35:3f:c6:f7:56:e9:
         9a:d5:69:d4:0d:6d:03:90:0b:87:d3:34:5a:d9:ac:e5:28:d1:
         9b:61:ed:12:4f:04:d0:81:01:9b:14:0e:ea:f5:d8:9e:d2:b3:
         90:20:f4:a8:91:89:43:a2:34:e8:11:b5:02:11:5a:0c:86:56:
         f3:ee:c6:66:37:0d:ae:0a:8b:d1:04:9c:c7:23:18:9c:b2:9f:
         fa:f6:30:1d:11:a2:68:55:25:ea:93:b0:24:39:e4:b0:7c:e4:
         be:7c:ed:96:bd:e1:d8:25:ac:2f:7f:93:90:d3:8b:15:37:27:
         4a:6b:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:05 2026 by rpki-client