Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa
File:                     bde58f87-486e-3511-a7ec-9f8ee003a894.roa (raw, json)
Hash identifier:          VhhOM6WGRjXYMWTakFa8CXTRmelQDRfkl3pbsdF3b4g=
Subject key identifier:   4D:2B:74:F4:9D:61:AC:1E:8C:CD:80:CF:DA:AC:03:02:72:95:3E:2D
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584D773A81063D8EE6F32B688840
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     19886
IP address blocks:        171.162.48.0/20 maxlen: 20
                          171.162.48.0/24 maxlen: 24
                          171.162.49.0/24 maxlen: 24
                          171.162.50.0/24 maxlen: 24
                          171.162.51.0/24 maxlen: 24
                          171.162.52.0/24 maxlen: 24
                          171.162.53.0/24 maxlen: 24
                          171.162.54.0/24 maxlen: 24
                          171.162.55.0/24 maxlen: 24
                          171.162.56.0/24 maxlen: 24
                          171.162.57.0/24 maxlen: 24
                          171.162.58.0/24 maxlen: 24
                          171.162.59.0/24 maxlen: 24
                          171.162.60.0/24 maxlen: 24
                          171.162.61.0/24 maxlen: 24
                          171.162.62.0/24 maxlen: 24
                          171.162.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:81:06:3d:8e:e6:f3:2b:68:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=dfbaaf2b-a0a4-4b82-80ca-fa4599be953a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1b:fa:4c:3e:32:a1:34:34:29:34:92:06:dd:
                    16:e7:23:04:9d:fb:32:9a:c1:d5:e6:52:82:b1:ec:
                    7c:dc:6a:3f:e9:6f:7a:f8:fd:08:04:46:5c:d0:22:
                    01:ae:1f:14:c9:52:ca:b0:e6:3a:d8:47:4b:e1:c8:
                    ae:2b:58:c8:f2:6d:fe:fc:9d:94:f8:b4:2c:95:cb:
                    68:ba:26:2c:15:74:84:fa:8d:79:82:a5:39:e2:90:
                    6c:f0:ce:6c:93:4c:e0:d2:08:d3:85:9c:76:16:a7:
                    d7:55:17:bb:5b:d0:e1:b1:32:67:92:2f:90:d3:80:
                    b4:53:2c:71:dc:69:87:ec:3e:3a:b1:b7:0b:1e:72:
                    90:8b:d6:5c:4c:20:69:cf:ac:f6:21:5c:05:3d:dd:
                    50:a4:de:c9:f9:19:33:e4:76:77:70:62:2d:43:0a:
                    bf:7b:2c:1c:79:91:cc:97:b2:89:e4:ea:95:2c:1e:
                    3b:82:21:d9:b4:20:48:5d:0f:ac:ed:ea:dd:f9:1d:
                    ef:61:52:c5:b2:9f:fa:3e:ca:0a:c3:1b:f3:06:dd:
                    b7:f4:3e:bb:83:73:5c:f8:44:50:05:49:f6:f0:3b:
                    5e:48:e9:7a:bb:90:79:a5:ae:1a:56:d1:30:d0:e8:
                    14:ac:e1:de:c7:fa:2b:e6:7d:fc:de:8a:9a:ba:dc:
                    53:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:74:F4:9D:61:AC:1E:8C:CD:80:CF:DA:AC:03:02:72:95:3E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bde58f87-486e-3511-a7ec-9f8ee003a894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:69:b8:23:ca:c5:ca:0d:1a:36:31:2c:ec:e9:04:47:72:
         36:9e:6c:5a:42:68:55:d6:2e:c2:f2:56:63:df:0d:2e:09:17:
         b6:09:86:b1:ea:fb:b4:5d:75:a7:da:e0:fe:c5:80:5e:73:3d:
         49:7d:c2:39:5c:a0:27:52:3f:69:de:ce:9c:f9:e8:7e:63:2e:
         c3:18:31:92:31:3a:89:9f:bc:5d:75:f7:1e:08:ba:52:b0:33:
         93:7d:3e:ae:f8:5c:76:2b:df:fb:51:48:d7:17:90:e1:b0:f1:
         37:b0:28:24:1c:3c:3c:d3:f1:cf:b7:3e:e5:51:9e:ac:1d:ea:
         38:14:48:6e:88:a9:ab:66:b8:c5:b2:4c:8b:73:93:75:86:6d:
         b5:56:2d:5b:a5:ff:db:73:01:59:11:f5:ee:b1:3a:7c:19:5c:
         46:48:20:2a:7f:4a:fa:62:8b:a8:c9:2c:cc:14:40:12:35:3d:
         0b:1e:5f:83:a4:e2:8d:d6:09:3a:cc:32:ab:04:0f:92:0f:df:
         a5:af:b1:de:aa:68:40:03:ea:d9:7f:5e:69:9c:7a:2a:f8:55:
         5f:ec:80:eb:bd:35:88:fd:54:35:6c:90:41:08:07:16:36:ff:
         9f:65:20:9f:2a:e8:ce:68:8e:37:6a:6b:e2:87:c0:a0:ad:b8:
         b2:3f:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:23:09 2026 by rpki-client