Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa
File:                     9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa (raw, json)
Hash identifier:          AnDWL6XpGj9JwA3CvkS+ZvgKRyEPkvj9wS5sih4dIdA=
Subject key identifier:   69:AB:2E:43:A8:5E:E0:75:2E:7A:8C:75:78:41:8D:F6:96:90:B0:14
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584CC07C96F58002F05F39C2E740
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     852
IP address blocks:        161.184.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:96:f5:80:02:f0:5f:39:c2:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=78acbd12-9059-4f90-9a74-077c2717bd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:21:05:5b:dd:5c:02:20:c2:1c:ed:b1:9d:
                    53:a7:ab:dc:6b:a1:de:12:5f:d0:be:c6:01:97:cd:
                    da:88:97:5e:15:e1:ed:ed:c6:0c:f5:a8:ff:8f:a6:
                    f8:f1:39:8a:2e:4c:43:b9:65:61:f1:6d:74:84:7d:
                    01:1e:0a:01:a9:8c:b1:4d:3e:e4:76:46:61:ad:0f:
                    d4:1d:9d:11:ad:df:8d:3b:de:e3:93:a1:c4:92:8f:
                    b6:55:b6:25:29:46:04:c5:86:3b:f3:07:8a:c7:c8:
                    ba:75:93:d3:79:0d:36:18:0e:2b:61:7e:2b:9d:58:
                    ef:d3:61:da:61:db:9e:30:26:93:10:81:af:8b:4d:
                    87:9a:81:e5:2b:ea:d9:c3:fd:08:fc:60:80:f1:cc:
                    86:ce:ec:a1:f7:20:92:61:d9:7f:cb:5c:a2:6b:a4:
                    0e:6a:c8:3c:99:fd:04:b4:9f:59:ab:ec:7d:cf:d9:
                    07:32:6e:5c:28:79:85:ca:6b:d3:00:b2:cc:9c:b7:
                    d9:72:26:d7:12:d4:ce:9e:40:19:be:d1:1b:6f:cd:
                    9b:98:b8:b0:23:68:13:60:4e:4c:7d:f8:53:f7:e6:
                    e1:5b:38:61:22:c6:8e:da:4d:e1:6f:41:89:95:21:
                    77:82:f4:da:01:93:c0:62:13:4c:14:aa:e1:b3:7b:
                    76:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AB:2E:43:A8:5E:E0:75:2E:7A:8C:75:78:41:8D:F6:96:90:B0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.184.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:29:db:52:51:aa:fd:92:29:fa:9b:95:95:26:b1:22:03:60:
         97:8b:6e:42:af:58:8c:0d:8c:f9:11:ce:06:ac:15:97:67:b2:
         b7:41:2c:0e:9b:09:96:2c:be:38:04:a0:66:f3:73:c6:29:4e:
         00:40:ef:d3:09:56:f3:cb:9e:21:2c:6c:1b:25:ed:ab:d0:3d:
         0c:a7:4d:1f:7b:53:02:44:47:3c:69:3e:b7:10:24:f0:db:a3:
         cd:4e:31:f8:0b:f9:57:11:36:02:d6:a2:8d:f1:f4:a3:02:85:
         2c:aa:5d:c1:67:be:23:c0:19:a4:e5:83:cc:d8:03:28:a0:0e:
         44:82:21:86:c0:47:9f:79:92:50:00:9f:66:7b:d4:1a:dc:0c:
         08:5e:ad:cf:fe:7e:86:25:f9:81:30:b3:d5:66:a2:6e:a5:2a:
         4b:d6:94:71:88:05:de:6d:e5:61:6f:b2:ac:de:f6:13:a8:66:
         5b:ec:2b:15:75:77:ee:8b:b0:ba:4e:5e:d2:28:d0:e6:c9:5f:
         57:df:59:b6:78:66:26:60:1d:56:ee:69:cb:1e:6d:5f:32:c7:
         fb:c4:78:c7:1a:8a:31:ff:eb:34:12:c3:de:c1:e2:da:67:73:
         5d:22:08:69:e9:21:05:b5:16:19:20:05:47:d9:c1:55:08:b8:
         13:7e:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:47 2026 by rpki-client