Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa
File:                     9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa (raw, json)
Hash identifier:          9w71L05yxgzRmh5mI7jdGtpVO/crWMCcUPnFi9qE4wk=
Subject key identifier:   5F:EB:13:46:3F:EF:2D:2E:0F:B4:4D:7C:42:BA:4C:9A:FD:8C:B1:17
Certificate issuer:       /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial:       010D0C9F4328584D703FD58A0C747E73C4D67180
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     11404
IP address blocks:        208.70.146.0/23 maxlen: 24
                          208.70.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d5:8a:0c:74:7e:73:c4:d6:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=709b43ef-7bdf-4900-b43b-c2153e245069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:98:69:79:bc:c0:4b:02:5b:f8:57:f6:2a:
                    27:23:5a:0a:f7:dd:4e:2c:5d:cf:e6:c8:74:48:76:
                    68:7d:08:51:78:2b:8e:35:b9:c5:b8:eb:33:3b:bc:
                    6f:6d:77:c8:50:9b:9d:f0:dd:67:54:67:01:e8:42:
                    dc:7b:67:fa:35:1f:72:00:8e:19:65:66:ba:fc:fe:
                    25:54:bb:66:1d:df:23:b2:68:30:dd:47:ae:c9:7e:
                    d5:fb:b3:a6:75:56:e0:f5:2e:89:56:2f:bf:eb:31:
                    5b:0f:83:c2:c1:df:c0:b2:d6:fc:4a:2c:32:93:85:
                    ac:bc:4e:1d:8c:b3:8e:91:18:7f:50:19:8d:c2:b8:
                    c6:39:a4:cf:ef:e3:c1:b8:3a:a0:8f:a4:1c:ef:7b:
                    e6:c1:03:31:70:91:18:8b:23:83:e8:5f:f7:ff:8b:
                    29:32:59:18:38:9c:58:a3:5b:66:6c:f6:22:36:93:
                    ce:20:1d:32:39:ee:c5:b0:fb:42:0d:5b:87:7c:f4:
                    39:21:e2:e5:65:4d:2b:b0:92:fe:00:d8:62:2d:f0:
                    43:cb:65:01:d8:6e:cb:20:20:a6:5a:55:91:8f:74:
                    7b:24:07:86:15:ba:2c:54:26:1b:6a:bf:d9:53:7a:
                    f2:b0:14:a0:dc:7d:65:a4:6a:c3:cb:47:11:8c:14:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:13:46:3F:EF:2D:2E:0F:B4:4D:7C:42:BA:4C:9A:FD:8C:B1:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.146.0/23
                  208.70.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:ef:68:2a:79:3a:8f:c5:dc:ae:f7:52:e6:17:b3:12:0b:
         ba:92:de:8a:89:c2:45:95:93:80:e4:3d:74:03:9f:69:8f:a6:
         17:b8:9c:b0:53:e4:ac:b1:de:77:d3:6a:5d:3d:66:c6:6d:c9:
         24:79:52:d2:22:9a:ea:9d:9f:e5:76:d8:06:60:87:be:fb:9e:
         48:2a:30:3e:2e:83:a3:b5:49:8e:aa:c9:50:7b:d0:62:bf:4b:
         95:cc:11:2b:80:39:12:11:f2:34:69:6a:b8:b5:a5:8c:24:06:
         51:46:d3:92:07:fc:8a:48:b3:73:92:ef:72:15:b5:91:e5:69:
         d5:78:70:c8:69:f0:a0:a8:fa:ba:19:8f:6a:1d:c4:4f:50:1c:
         1b:b7:c0:2f:cd:55:1e:56:d9:c1:57:9a:04:80:20:0f:50:52:
         a6:e1:4a:08:07:3d:8c:86:f3:2c:5e:68:df:4b:4b:9b:a4:ec:
         e6:06:62:5b:64:b3:b4:6f:9a:9c:4e:a6:47:d8:ce:a9:ef:fa:
         1f:1c:9b:51:bd:3d:04:e9:ae:05:31:c0:f5:e2:de:78:35:a4:
         5c:1f:45:36:4f:6b:dd:25:25:71:e2:53:a2:dd:27:57:9e:69:
         f7:e6:19:fc:18:12:71:d8:d7:fb:17:17:25:a8:49:46:f3:74:
         42:c2:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:44 2026 by rpki-client