Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa
File:                     b53b1711-dad1-3ffa-b45e-b8a228976663.roa (raw, json)
Hash identifier:          uk7Zy50i/cTJ77Cq6JIBfZcvwxfStJttPsNxo3rXysI=
Subject key identifier:   CC:22:B8:3B:7F:33:6D:BC:8C:70:F3:86:58:71:85:AF:E1:F4:F2:B6
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584D4EBFAC7C3E3C998EABA57720
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     7018
IP address blocks:        170.39.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:ac:7c:3e:3c:99:8e:ab:a5:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=ee3f584c-72b3-4f3e-8f03-c871d11d164d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:70:f0:db:42:47:1a:ae:a1:c9:12:b8:05:
                    4a:60:45:6d:d0:33:66:e9:54:f9:53:5d:8c:26:77:
                    92:42:c9:76:23:99:c3:5e:b8:37:58:ac:ed:30:a0:
                    a3:aa:81:a7:96:71:bf:71:82:65:77:a3:fa:67:f3:
                    f8:ae:03:87:8f:96:52:27:e4:be:bc:e2:a6:14:a4:
                    04:44:cc:8e:75:19:bd:96:c3:db:0b:ad:1e:56:b9:
                    5a:1d:b5:51:19:ee:4f:22:e2:02:fe:e2:65:a7:d2:
                    7f:6d:52:8d:bc:f0:7c:47:bf:c2:d8:4c:2e:32:7f:
                    e4:f8:a8:26:a1:96:02:ba:12:11:40:37:59:59:b7:
                    7b:b0:d9:9f:22:b6:39:cf:ea:ae:cd:ec:8b:48:66:
                    9a:dd:d3:fa:97:48:f2:24:a6:2c:d9:99:39:6e:79:
                    d7:76:28:7b:ec:c9:af:fd:cf:8d:39:31:42:9b:65:
                    f9:2f:a3:5d:ac:c5:8b:dd:29:cd:74:c2:d1:c6:c2:
                    93:19:70:ab:ca:92:be:d3:4d:9b:01:15:71:76:b7:
                    78:0d:73:7e:61:bd:3f:81:ea:4b:ae:19:bd:3f:d6:
                    35:7f:b3:f1:65:14:3c:ef:74:ff:0b:da:e7:23:1e:
                    86:c9:68:50:39:5e:ec:8c:22:14:d9:fc:e5:12:59:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:B8:3B:7F:33:6D:BC:8C:70:F3:86:58:71:85:AF:E1:F4:F2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/b53b1711-dad1-3ffa-b45e-b8a228976663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:a7:49:e6:f1:20:cd:58:11:33:11:25:69:79:ee:9a:cf:
         12:94:8c:da:5c:b6:e6:45:df:64:82:6b:80:7e:80:61:ff:e7:
         a7:40:fa:0c:77:36:36:4d:62:2b:72:76:d6:61:d2:ce:86:5b:
         45:9d:3f:ab:d4:25:b4:4d:a5:d6:a1:63:09:2a:81:23:d9:2f:
         3b:31:22:49:0a:17:01:03:bd:0c:f5:b0:34:77:3e:67:38:8b:
         a3:4d:b8:2c:9c:31:c8:42:85:1d:40:d4:1c:83:e8:5b:ed:c2:
         05:af:f5:80:46:66:fb:e7:1f:ee:12:04:b3:dd:87:84:2f:e7:
         74:86:6b:3e:17:14:a5:29:66:3b:98:6a:29:93:f0:2e:89:04:
         56:6c:f4:4c:80:ad:5f:88:93:d8:12:72:cf:45:0b:f5:a6:56:
         70:57:06:27:b2:95:9f:d3:05:7d:12:80:c2:91:72:ef:c6:8a:
         67:01:eb:22:5f:20:0c:9b:49:3e:67:ed:dc:28:e7:75:c4:ac:
         49:2f:ef:bb:6f:25:5d:9b:cb:6a:f8:c2:84:56:eb:71:93:23:
         a4:81:4a:d2:bc:bd:c5:6e:b6:55:6b:4e:eb:b1:3d:eb:64:ce:
         e0:52:5e:41:75:f0:a6:dd:2c:ec:07:1a:43:70:62:13:32:97:
         8f:65:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:19 2026 by rpki-client