Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa
File:                     e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa (raw, json)
Hash identifier:          ld0Dxy664cMVIa1E36UAlFbkcog9oUzgLcx6lvTo1Wg=
Subject key identifier:   41:21:7B:7F:F4:EF:2C:F8:7B:0B:E6:A1:CB:C4:B6:79:35:21:A4:08
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584E016B30E38355F4AB299B0A80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa
Signing time:             Sat 30 May 2026 13:00:10 +0000
ROA not before:           Sat 30 May 2026 13:00:10 +0000
ROA not after:            Fri 28 Aug 2026 13:00:10 +0000
asID:                     931
IP address blocks:        170.39.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:01:6b:30:e3:83:55:f4:ab:29:9b:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: May 30 13:00:10 2026 GMT
            Not After : Aug 28 13:00:10 2026 GMT
        Subject: CN=0b15d40e-9cd2-45ed-8794-e5b8540a1c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:53:45:fd:23:d6:eb:8d:a2:ca:4f:09:77:
                    72:dd:78:d0:7f:fb:35:1b:95:7d:82:6c:be:b1:aa:
                    87:fd:31:ec:86:10:23:ac:72:90:08:51:80:9b:32:
                    9d:33:1e:b6:c3:b1:9b:8b:b1:1b:d0:e2:f7:d6:2b:
                    4c:81:f8:71:76:94:5d:1c:e4:a5:9b:18:81:39:c2:
                    a7:0a:eb:f2:49:6d:af:ec:f4:8f:f3:19:07:c2:9d:
                    43:f0:b8:e0:18:7a:ac:03:64:6c:dd:a4:57:b8:c7:
                    b7:8a:79:b8:93:fc:9f:dc:6f:40:f0:91:2c:50:cf:
                    c6:1e:f7:31:51:78:00:ab:33:01:e5:56:48:48:c8:
                    00:1e:6a:10:88:e6:57:43:85:da:47:71:99:4d:34:
                    f7:58:63:a3:62:04:b5:f4:18:51:0b:ec:05:3e:de:
                    f3:eb:af:70:38:1f:91:56:07:1a:2e:fc:fc:c7:b4:
                    f6:1a:d0:bb:1d:de:16:3a:5f:6b:a2:5a:f9:24:26:
                    e0:05:f3:ab:67:a5:40:e5:22:aa:19:29:23:c5:73:
                    7d:ee:08:98:b1:9d:89:24:fd:63:6d:f5:bc:0a:3b:
                    18:22:f6:f1:a2:20:a5:55:3b:be:8b:48:88:45:26:
                    41:05:9e:05:80:df:c1:1c:d1:29:a3:b9:fd:d5:e5:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:7B:7F:F4:EF:2C:F8:7B:0B:E6:A1:CB:C4:B6:79:35:21:A4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/e3efcc8d-473c-3337-a7b3-91ccf2cbd2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:88:3f:20:b6:75:25:44:00:c0:91:5b:38:3b:4e:07:81:
         a3:06:9f:8b:0a:db:8c:f9:d0:d6:09:ee:8e:f2:24:6f:d9:1d:
         6c:01:dd:09:8a:04:ca:00:ab:f7:00:38:bd:a7:7e:67:8a:27:
         48:6f:85:c5:e3:09:65:71:1c:6e:53:94:65:17:f8:4a:bf:f7:
         ed:89:57:6b:3d:74:70:1e:14:ae:4d:78:46:ad:f3:d4:89:a0:
         6e:ae:d3:c0:89:2e:01:1d:2e:19:d1:10:fb:d2:98:72:01:d7:
         cf:13:78:77:3c:31:c5:2c:bf:a5:56:d0:69:47:81:09:bf:37:
         b5:c0:76:60:35:d6:50:b8:6b:e7:b3:5b:73:40:79:bb:a5:8b:
         91:2e:eb:fd:a9:c4:65:79:88:43:d5:2c:73:9e:48:89:4a:2a:
         df:2a:d1:ac:1b:c0:ad:47:76:19:00:f8:38:45:40:0f:2e:d5:
         91:e2:e0:bb:ec:73:74:55:fa:9f:2e:f2:54:91:73:cf:4c:51:
         e9:2d:73:0f:92:3a:65:06:cb:5a:48:ae:b2:65:ad:ec:7d:ce:
         61:d3:a0:0b:a1:f2:82:7d:d5:c9:fd:fd:25:11:e3:3f:ae:8d:
         1e:40:71:cf:d8:fe:89:76:d5:50:12:8b:4e:99:81:9d:40:91:
         ff:e5:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:32 2026 by rpki-client