Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
File:                     d212f7d8-713f-3286-9603-26498524616d.roa (raw, json)
Hash identifier:          RoYwDmCpacQXEalVnoXY8YBiCAe0I4kNOB6fnFJ4F8w=
Subject key identifier:   51:CD:3F:86:35:98:8F:F4:58:7E:6E:E4:40:3D:57:BC:F9:BB:5A:34
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584E11B427D331F5B79A297A8F80
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     21433
IP address blocks:        170.248.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:27:d3:31:f5:b7:9a:29:7a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=79d5c27a-9f85-4a94-b0a7-739554f1a52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:1e:6d:60:d7:ab:cb:ff:cc:06:62:13:bf:
                    b9:be:ae:67:e8:82:94:8b:f9:bd:99:6d:0f:04:92:
                    2f:be:5e:fd:36:39:81:e2:4b:1e:5f:38:8c:12:49:
                    de:8e:1e:76:75:4e:c2:bd:2e:ab:32:d9:e6:61:f2:
                    1c:39:d9:24:ae:cb:55:84:70:a1:a0:64:aa:9b:96:
                    4c:40:bf:8a:0b:e8:80:af:83:67:f4:7c:d5:0f:34:
                    bb:6e:50:7b:f3:a3:8c:3b:ac:3a:c2:32:54:d4:91:
                    87:40:72:ce:f0:80:c6:d2:1b:9b:bc:c3:64:09:01:
                    83:b9:67:dc:8c:f2:21:01:f7:62:f9:05:98:22:c5:
                    07:69:b0:bb:2b:9d:5e:98:83:22:28:82:23:15:df:
                    74:56:42:b3:e3:38:af:02:d4:76:18:d7:ee:3c:26:
                    81:d2:de:08:66:a4:37:e9:40:75:4d:03:27:2f:85:
                    f4:c4:be:a1:a6:1a:4f:a4:01:fd:7a:94:a1:65:da:
                    31:db:93:19:54:7a:fa:f2:0a:43:a2:8f:8e:75:01:
                    62:25:e4:f6:94:c9:13:5d:1b:10:33:6d:ec:2a:e8:
                    a7:1a:18:cf:fa:1d:fc:7d:f6:a1:eb:bd:1c:d2:a2:
                    2d:e7:62:29:a5:67:e4:2f:43:43:69:7c:2b:c5:f7:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CD:3F:86:35:98:8F:F4:58:7E:6E:E4:40:3D:57:BC:F9:BB:5A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:a9:9b:82:87:39:33:72:b6:3d:5f:a1:19:8c:47:e6:47:
         04:1c:c7:72:09:4a:15:72:fa:5e:73:44:5e:6d:77:f5:78:6c:
         ba:d4:16:0b:af:c2:5f:f7:2f:5a:a3:27:10:55:de:e4:20:55:
         72:9c:fe:d2:88:ed:fd:e3:24:b6:d9:36:25:55:18:c0:92:d5:
         db:0f:70:e6:f2:78:8f:0c:df:e4:4c:f9:5c:5a:d5:73:79:0e:
         5d:0e:a2:1f:2a:7a:d9:5e:b7:0f:4c:f3:67:5a:60:74:d4:42:
         a9:d9:0b:f4:2b:c9:e8:c4:a9:34:11:3e:bf:7a:16:0e:eb:45:
         62:e5:6b:08:e2:b0:86:eb:9a:e8:e4:52:54:d9:4a:ca:2c:f3:
         7f:43:5e:75:f9:76:73:31:69:2d:7a:2e:d4:9a:72:5e:26:40:
         4d:42:ea:28:d9:c7:eb:89:82:61:d8:e6:fc:60:82:b5:0d:14:
         fe:db:e2:10:20:2a:2d:96:0b:8d:1e:d0:16:91:8b:f3:c1:d2:
         dd:9a:f1:bb:a0:7d:f8:17:53:ed:63:88:8f:7c:94:e5:3b:87:
         1d:14:86:10:50:1d:92:b8:f4:12:e5:d4:1e:e6:60:d9:a2:db:
         49:fb:ff:a0:05:38:ff:80:c0:90:44:c5:e1:9a:c5:51:96:db:
         c0:c7:80:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:36 2026 by rpki-client