Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c21df20d-d0de-3450-8ddb-0d5d4315b258.roa
File:                     c21df20d-d0de-3450-8ddb-0d5d4315b258.roa (raw, json)
Hash identifier:          dBXLjsxvZw3xNy4rfv7a0NMPo27kCD/7dUDII/C/LGU=
Subject key identifier:   BD:91:40:96:E9:41:EB:C4:E5:D5:06:88:9D:0D:5F:29:51:5E:73:2A
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584E016B4D7D13F8F66B63BE41C8
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c21df20d-d0de-3450-8ddb-0d5d4315b258.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     10794
IP address blocks:        171.162.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:4d:7d:13:f8:f6:6b:63:be:41:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=1f921e9d-53da-4916-9a92-40bc663586d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:d1:79:7e:97:71:1b:2c:04:f7:d6:5c:db:
                    8b:84:6a:df:e5:6e:92:91:ea:97:a4:c8:e0:b4:5a:
                    cb:80:31:74:db:95:f3:91:88:1e:5a:a4:12:3d:f1:
                    d4:97:35:b2:8c:f1:f9:89:98:f9:12:f0:30:e6:c0:
                    a2:cb:ba:f8:2d:8e:45:e5:7c:dd:d2:d5:7a:2c:1c:
                    92:8a:43:d2:aa:05:9c:16:4f:8f:de:90:aa:09:bf:
                    30:d0:94:fa:ba:56:30:ea:32:0e:28:e7:e9:11:51:
                    b6:bb:54:5e:4f:98:a9:45:29:4c:d1:a8:ca:39:24:
                    ce:f7:04:f8:13:91:b0:1d:d4:d7:f4:db:c8:da:87:
                    8b:b4:fd:90:4c:84:71:c2:a0:37:64:f2:96:f7:14:
                    66:99:4c:06:08:18:fd:44:f5:63:f8:12:ea:7a:f9:
                    c6:90:f7:37:b5:49:54:07:2b:2e:34:25:f4:96:1d:
                    5e:1d:88:a5:eb:f5:5d:d1:b8:64:e6:19:a7:88:6e:
                    3a:b8:e4:97:4d:f1:7e:1c:42:8a:04:c3:3f:f1:cc:
                    10:d2:15:f7:e5:70:bc:26:94:7a:28:4b:a7:d5:ad:
                    c5:c8:21:73:19:99:09:c8:bf:a5:81:8d:51:67:a3:
                    38:35:a7:78:73:9a:2a:28:1b:a9:9d:e4:e3:6d:e3:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:91:40:96:E9:41:EB:C4:E5:D5:06:88:9D:0D:5F:29:51:5E:73:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c21df20d-d0de-3450-8ddb-0d5d4315b258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:31:19:d8:6d:b3:50:d2:c6:a5:a5:79:61:66:68:86:db:b1:
         97:14:6e:e9:52:de:46:5f:56:8e:52:a2:11:d0:4d:39:4f:99:
         25:07:45:2e:f6:10:f0:88:06:d4:f9:50:08:98:4f:22:ce:92:
         dd:a7:7a:3d:82:d3:7f:b4:24:18:87:ed:72:45:0b:a3:7b:e1:
         78:0e:c0:6d:ca:ad:69:b0:9f:3b:e7:45:a4:54:a8:cc:9e:3d:
         a5:34:a9:9f:f5:48:b9:c0:92:54:18:c3:ae:d3:55:cb:35:7e:
         7c:ce:e6:2b:85:32:42:17:e8:9f:5f:40:cd:c5:0c:f3:47:6f:
         3f:07:1d:d6:88:62:26:e6:2e:ae:e5:3c:4f:7b:be:06:94:3e:
         53:e8:9d:61:34:54:0d:9e:26:fa:91:8d:1f:33:3e:19:62:2f:
         c5:42:38:19:ef:32:c0:3b:c0:69:d3:d3:34:b8:b6:d2:59:7f:
         fd:52:0a:ab:b8:d5:2e:9d:24:6d:50:14:bc:04:b0:7e:42:bf:
         77:fd:c2:20:69:9e:d4:67:ef:93:06:4f:d9:04:25:c1:ca:24:
         c0:23:6e:82:9a:7b:f2:d8:d1:e1:de:04:7d:00:de:fe:ce:2b:
         86:ed:db:24:aa:df:f2:e5:23:2f:c5:74:e2:f7:64:99:4b:7a:
         95:38:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:56 2026 by rpki-client