Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa
File:                     4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa (raw, json)
Hash identifier:          UxI5thh5CXz3j+4CVOtrV93HkwPbr/jGABARHozjdgU=
Subject key identifier:   28:E3:7F:FB:79:54:FA:CC:CC:E8:35:DE:15:AC:8E:70:CF:3D:E7:A6
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584CDF32435A97DF02C7B530BB40
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        199.187.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:43:5a:97:df:02:c7:b5:30:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=453c3328-ee2b-4a22-ae0d-d7580c6ba992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:62:f1:d1:83:94:e7:fe:d8:f5:c3:9d:ca:
                    8f:8d:c6:d0:50:7f:c9:da:f0:95:c6:e0:0f:79:40:
                    8a:80:e4:9f:8f:c7:c8:1c:d7:d3:84:90:32:d8:6f:
                    ba:ed:78:26:2b:af:95:98:fc:b5:57:24:fb:c0:09:
                    b6:e0:22:e7:8d:84:f8:aa:da:41:6e:9b:12:a7:0c:
                    92:5d:84:08:90:fb:54:c6:e7:d8:75:ac:3b:2b:ea:
                    69:d3:4d:b2:ed:4b:97:98:a6:26:3e:4a:e3:5a:b4:
                    78:ab:3a:da:0f:bf:e1:fb:d7:27:5b:58:b9:ed:3b:
                    da:dd:4f:57:73:8c:89:31:d5:76:8f:49:1d:ac:b3:
                    c3:3f:b2:ea:46:69:a2:e1:32:71:bd:27:49:92:65:
                    66:38:82:09:e4:b6:5b:fc:7f:d6:60:e8:0f:31:a1:
                    9c:50:c6:9e:72:98:6b:0c:f2:95:90:1f:70:d9:a0:
                    85:f5:77:f8:c9:6f:a7:16:e7:88:89:a0:a1:13:86:
                    7b:cb:64:b4:f2:0c:25:93:41:c9:2d:ef:a2:e2:5c:
                    e9:6a:76:01:3b:3e:e5:66:95:c9:f8:b7:57:15:16:
                    1e:1e:b8:07:2d:cb:a0:5a:fc:7d:4b:04:05:11:8c:
                    62:ae:64:56:54:3f:24:eb:dd:79:d1:01:4d:ab:44:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:7F:FB:79:54:FA:CC:CC:E8:35:DE:15:AC:8E:70:CF:3D:E7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:69:d2:d6:86:5f:d5:ff:82:b6:05:26:e1:34:68:f7:50:
         cb:7e:8d:61:f6:ac:2f:15:d5:a1:79:af:08:ee:da:30:c7:f6:
         0e:05:f1:c6:2b:ba:c6:f5:37:d8:ae:ca:c3:a7:f0:ae:e0:0c:
         4f:86:f9:ed:08:a9:5d:97:17:63:b3:b8:03:c4:63:f9:79:4e:
         f2:a7:ef:5d:7e:93:c3:d8:3c:95:7b:d9:d2:cf:72:61:8a:e3:
         f9:5f:8b:6d:b5:d7:b9:df:f3:96:86:c7:78:b8:c2:0f:21:7a:
         83:57:4c:8b:1d:e4:dd:69:87:60:58:4c:17:2f:a2:b9:08:1d:
         cf:2a:a3:18:b6:64:a1:83:64:cb:bc:f3:40:32:57:7a:97:72:
         c3:12:1b:83:fd:3d:01:e1:4e:f2:4f:98:70:a7:da:fb:f8:7e:
         8e:4d:62:b1:18:c5:2a:e9:22:49:6f:77:8c:c5:e1:0d:61:64:
         0d:d2:c9:03:40:96:49:df:b1:89:6c:51:40:0c:c4:49:6a:db:
         ac:4a:4a:96:db:1a:b3:21:01:b1:2f:98:65:6c:26:15:25:75:
         55:a1:37:8f:54:e1:d8:d7:16:2e:10:e0:14:6c:ea:35:15:fc:
         f6:29:16:7d:87:68:ae:71:38:3e:2e:0c:1e:9e:f9:5b:11:65:
         ff:a2:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:16 2026 by rpki-client