Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/44b6e66a-ea42-3076-b66b-84e73f16efd9.roa
File:                     44b6e66a-ea42-3076-b66b-84e73f16efd9.roa (raw, json)
Hash identifier:          r+xdyIQPccHm8pjJE2DUmvKlyRKMEoqlyfJ7ftjO25U=
Subject key identifier:   92:98:D2:04:C4:89:75:57:BF:5B:C0:66:13:76:AF:B9:B6:8D:18:9E
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F4328584D774868ED9A2A2A2BC3950400
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/44b6e66a-ea42-3076-b66b-84e73f16efd9.roa
Signing time:             Sat 11 Apr 2026 01:28:40 +0000
ROA not before:           Sat 11 Apr 2026 01:28:40 +0000
ROA not after:            Fri 10 Jul 2026 01:28:40 +0000
asID:                     62044
IP address blocks:        161.151.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:48:68:ed:9a:2a:2a:2b:c3:95:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Apr 11 01:28:40 2026 GMT
            Not After : Jul 10 01:28:40 2026 GMT
        Subject: CN=d2536f41-62fa-4242-8529-59d20a252976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:41:af:2a:a9:58:cf:f3:14:b6:b3:e9:33:
                    ae:71:b5:8e:ef:97:bf:03:1b:f3:c3:77:32:43:9f:
                    ca:8b:e1:2b:8d:90:e6:74:8c:1d:9e:f8:58:f9:da:
                    b0:cf:bc:a5:ce:85:86:2a:86:e3:ce:68:6a:e2:ff:
                    2b:5e:ce:31:4c:f7:8a:df:15:f4:72:af:25:20:f4:
                    1c:b1:bd:66:b0:6c:29:ec:7f:60:16:16:81:6d:15:
                    ce:d4:c0:9d:99:d2:a7:e1:77:a1:22:d9:6d:9c:8e:
                    09:50:dd:3d:9c:67:82:45:dd:9c:a0:16:c2:9e:26:
                    bf:b8:ee:5a:46:24:c2:96:94:cd:91:a9:60:de:73:
                    e5:7a:f4:9c:90:50:08:6b:d9:b8:1d:41:03:b4:3d:
                    84:c5:b9:8c:88:f5:d0:a1:da:35:41:d3:8f:31:38:
                    02:dd:bd:39:0c:bd:36:22:35:dd:7f:57:79:57:2f:
                    dd:85:62:62:7c:da:42:83:7f:f4:f3:8c:5a:6d:e8:
                    01:81:f1:e2:d6:a2:01:b4:be:19:3b:8e:e1:22:0a:
                    6e:2d:09:1b:11:29:45:22:b2:af:3b:e8:7f:07:de:
                    96:42:3a:a5:24:c4:49:4b:b5:16:fb:1a:eb:31:60:
                    5e:89:fc:1a:15:4e:17:d8:60:6e:47:74:d0:d2:7e:
                    8a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:98:D2:04:C4:89:75:57:BF:5B:C0:66:13:76:AF:B9:B6:8D:18:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/44b6e66a-ea42-3076-b66b-84e73f16efd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.151.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:32:2d:9d:88:a1:99:b8:34:57:f0:35:7b:38:9b:ab:0e:e5:
         33:bd:3c:1b:a0:58:e3:a1:64:08:72:da:0f:b3:96:08:9b:7e:
         2f:e1:89:ac:68:82:f1:00:cf:e7:0d:bd:73:31:74:07:10:48:
         bd:dd:96:d9:af:82:f4:3b:12:f1:2d:1f:90:ec:3f:fa:ad:bc:
         21:86:c4:a2:2b:ab:b2:a8:54:af:1b:27:ad:7b:34:e7:56:54:
         3a:c4:72:66:11:8c:1c:6a:2f:d5:db:3b:0a:d4:35:52:3d:9f:
         7f:02:65:cf:e0:7b:b0:8b:c4:5a:fd:8b:66:ce:82:bb:22:20:
         e5:df:40:3b:d6:17:22:e8:da:72:1b:80:e0:5b:32:64:1a:88:
         b8:6d:1c:25:6b:a9:32:24:54:95:b2:61:16:22:1f:1b:f3:30:
         7d:1b:1b:ce:0a:09:d8:2b:84:ec:9e:c2:f3:31:c9:02:ed:75:
         8d:10:ba:16:f1:9e:96:6e:95:22:fa:bf:77:2e:cf:af:5c:4b:
         54:9d:1a:43:c6:54:ee:4b:1e:8c:38:f2:64:ee:e4:4b:14:b4:
         87:d1:3e:6e:90:cf:a7:a6:06:09:e8:a2:92:1d:4f:7f:26:44:
         1a:d4:3d:78:ee:ad:fa:0a:b8:73:68:74:b8:6d:2a:c8:37:5b:
         68:af:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:36 2026 by rpki-client