Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa
File:                     ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa (raw, json)
Hash identifier:          kiSTtfey07ujFA2SPirWoXpKBZC7tPTz1MmGarqL3D4=
Subject key identifier:   FA:9A:A7:F1:4E:F9:2A:04:AC:30:B4:64:F6:71:6A:64:DB:B8:08:6B
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F4328584D6AAA6C1BAF7D9C39C350DC40
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        167.124.104.0/24 maxlen: 24
                          167.124.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6c:1b:af:7d:9c:39:c3:50:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=efa814b0-ec64-4d5b-abf4-f402dbb5d93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:67:6d:df:94:e7:69:e5:ec:57:86:cf:00:26:
                    cb:33:60:aa:3b:a6:94:45:97:a9:4d:66:53:5d:28:
                    5c:d1:61:e9:10:92:68:db:9a:00:23:33:24:12:0c:
                    72:06:08:f4:d8:d3:80:17:04:f0:91:ea:01:69:5a:
                    2a:a6:2b:e8:1c:99:af:90:40:62:4d:90:6f:92:3c:
                    a4:ac:e2:9c:0c:f9:f0:89:69:5a:f5:05:09:11:66:
                    05:9e:48:ca:a9:9c:9b:5c:12:b2:60:9b:20:54:23:
                    32:f4:52:31:00:e3:d1:c1:51:1e:8d:4b:14:26:04:
                    45:6a:a6:cf:be:70:8a:cc:f0:77:1f:d0:da:7d:a9:
                    00:6e:67:ad:b1:7d:d3:42:c0:77:5a:56:3d:e3:a2:
                    d0:64:6d:89:3c:15:84:d1:61:e8:d3:3f:6a:3d:87:
                    ce:7e:ab:90:80:a3:11:f1:1a:db:45:33:f7:63:2e:
                    1a:b3:3e:37:38:22:48:10:68:a3:90:bd:03:d9:81:
                    d7:a5:b0:02:cc:5b:24:72:5d:65:f3:8d:7a:8e:e6:
                    9e:e6:2a:d1:31:2e:17:b0:06:c1:98:46:12:71:6f:
                    43:af:00:b6:29:9a:74:1c:1e:a7:ed:45:6c:ad:db:
                    c5:c5:2f:c9:a2:58:73:c1:ef:1f:35:3c:6c:4f:82:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9A:A7:F1:4E:F9:2A:04:AC:30:B4:64:F6:71:6A:64:DB:B8:08:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:ef:76:de:8b:b9:89:c0:64:78:85:6b:7e:a1:d9:07:90:
         45:9b:98:24:7b:e9:a8:ea:db:d7:b8:7a:ec:f1:fb:ea:c1:53:
         90:73:e7:28:83:82:20:b1:3e:b4:79:89:70:aa:90:33:64:25:
         e8:05:80:07:aa:8d:16:ca:32:18:63:eb:b3:0a:bf:57:6b:7c:
         a7:18:2c:14:a3:3d:7d:d3:c3:1e:bd:99:2d:cb:ff:85:0d:f3:
         58:ab:00:ef:ad:65:86:41:03:33:f6:a9:11:ad:ed:ca:0a:d3:
         b4:b8:c3:bc:4d:40:2b:2d:05:12:ae:43:08:40:fb:26:b2:35:
         d9:d1:19:f5:f9:7f:51:49:41:a6:89:ff:a4:e0:0c:ee:3d:5b:
         70:6d:d9:69:76:77:db:da:94:19:5c:97:aa:72:06:a3:70:07:
         2a:be:f2:68:46:5e:f7:7f:ca:49:11:f5:da:8c:1a:95:27:99:
         71:54:f2:70:31:24:5a:15:f9:df:83:23:b7:35:d6:a2:fd:d0:
         87:3f:0d:00:c3:03:6e:58:29:92:ab:ff:fb:0f:cf:05:b4:6b:
         0e:d7:1c:96:48:e6:cd:a8:f2:8f:62:ad:17:b8:c3:85:8b:9b:
         50:8e:6c:51:fe:60:58:77:d4:1b:0a:9d:4c:ed:83:e7:35:ec:
         7b:59:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:18 2026 by rpki-client