Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa
File:                     aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa (raw, json)
Hash identifier:          BHQhD8V8c3axCCfDLxOwmstrDi1qy5v7snkicMJHIxM=
Subject key identifier:   AE:18:26:6A:1B:15:43:3B:62:2B:97:6E:AE:DC:DD:42:C4:E3:87:83
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584E0435F39146EAE6A40987CF80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     10794
IP address blocks:        171.161.120.0/21 maxlen: 21
                          171.161.120.0/24 maxlen: 24
                          171.161.121.0/24 maxlen: 24
                          171.161.122.0/24 maxlen: 24
                          171.161.123.0/24 maxlen: 24
                          171.161.124.0/24 maxlen: 24
                          171.161.125.0/24 maxlen: 24
                          171.161.126.0/24 maxlen: 24
                          171.161.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f3:91:46:ea:e6:a4:09:87:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=4026747a-6f2d-4d56-9124-2918df054242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:ba:7d:27:e9:c1:8a:fd:2c:69:2b:c0:c0:
                    93:e7:65:1e:8a:76:97:38:d7:e0:9b:20:20:e3:cd:
                    fe:f8:b7:11:a0:ee:7c:1d:49:2f:43:8a:9c:ed:ea:
                    f7:24:a9:a4:b7:0f:79:c9:b5:39:bc:ec:77:f0:d1:
                    cf:18:1c:63:e2:73:ff:fa:3e:17:66:5c:4d:07:91:
                    d6:13:57:47:1d:74:8a:36:04:45:86:d4:84:5f:c7:
                    6e:25:b0:c9:79:d9:2c:c0:84:3d:8e:f3:fb:c0:77:
                    cf:af:54:50:b9:03:c7:a5:43:ee:08:99:99:e5:84:
                    85:69:73:c9:53:a3:ed:9b:c8:d0:60:96:9d:d5:11:
                    ba:6a:8e:27:fa:01:db:5a:36:65:c4:af:28:54:c3:
                    fb:06:2d:96:a5:da:5c:e6:b6:e3:a6:49:ea:8a:70:
                    a0:e6:55:f2:f3:43:07:84:8b:86:9a:d0:00:c5:39:
                    e6:09:36:c9:a9:66:b6:0f:54:54:c2:f8:df:bc:0b:
                    98:90:8b:17:c5:9f:d4:84:e1:ba:f5:d2:c2:dd:24:
                    28:28:25:67:8b:9c:bb:87:ea:c5:72:d3:c7:54:45:
                    e7:93:d0:35:35:a1:db:2b:7a:78:92:c4:a7:c5:f9:
                    7a:2f:66:2f:d0:4a:95:54:a5:2e:34:57:d9:58:2f:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:26:6A:1B:15:43:3B:62:2B:97:6E:AE:DC:DD:42:C4:E3:87:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b6:51:18:f7:ec:88:07:91:0b:22:cf:c8:8a:d1:2a:2f:4d:
         15:60:d8:83:2f:c5:2b:31:40:d4:46:c0:a2:70:7e:30:e8:2c:
         99:5d:eb:f3:1d:08:9f:8c:e0:0f:44:4d:23:94:cc:50:00:e4:
         c2:6c:78:4b:e9:d8:24:e5:04:c3:fc:c2:62:32:ba:d7:6b:e5:
         17:15:3f:22:08:b3:7e:b9:29:17:63:00:4a:b8:c9:cf:b3:8b:
         71:12:61:d8:8a:87:a0:83:d1:29:7b:75:02:c2:d3:a8:02:07:
         97:ae:85:77:a0:5c:09:7d:cc:80:ac:ee:84:3f:31:0f:3c:c9:
         f1:4a:da:4b:a9:9a:13:5e:f4:e7:86:9a:d0:c6:92:08:48:76:
         68:8d:c1:0d:30:19:da:49:bb:4e:51:46:8c:c0:83:93:c1:b0:
         10:1a:18:50:6d:78:dc:a3:23:19:5b:ae:1e:17:90:e1:34:65:
         1d:cd:8f:83:ee:47:2f:84:f1:28:53:56:49:74:c3:5b:81:18:
         e7:75:a6:0d:e2:92:fc:d2:c2:53:64:5f:f2:f8:a9:81:b0:ac:
         1b:31:f3:3f:ba:dc:53:77:a8:61:cc:6d:3b:0b:f7:1a:35:14:
         b9:51:d8:e9:0c:78:3f:d4:54:42:e6:b7:8d:97:2c:35:45:7a:
         19:8a:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:18:50 2026 by rpki-client