Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/c96e783c-c1b1-3101-bcc2-def5cb47c301.roa
File:                     c96e783c-c1b1-3101-bcc2-def5cb47c301.roa (raw, json)
Hash identifier:          51KbDYJWrcrS5Gls8J2xhnEiDm5vF5V1v3bcVjufIrE=
Subject key identifier:   A5:99:01:98:12:A9:3B:98:0D:3B:F3:1B:49:CF:CB:55:6D:4D:03:6E
Certificate issuer:       /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial:       010D0C9F4328584E09CB433BDA09A72B4D1C5100
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/c96e783c-c1b1-3101-bcc2-def5cb47c301.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     22260
IP address blocks:        160.254.108.0/24 maxlen: 24
                          170.61.0.0/24 maxlen: 24
                          170.61.1.0/24 maxlen: 24
                          170.61.2.0/24 maxlen: 24
                          170.61.3.0/24 maxlen: 24
                          170.61.4.0/24 maxlen: 24
                          170.61.5.0/24 maxlen: 24
                          170.61.6.0/24 maxlen: 24
                          170.61.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:43:3b:da:09:a7:2b:4d:1c:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=f472fd8c-fbe8-4661-bf3c-1744d4b07594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:55:b2:a5:02:f8:51:6f:2e:49:8f:de:20:
                    4e:3d:8f:d5:83:45:d1:c9:e0:37:9a:89:85:21:6c:
                    3f:3c:28:c6:0a:95:56:3c:fc:33:ac:87:23:a3:b3:
                    92:a3:41:e2:ab:40:2f:24:9b:7f:be:04:2c:9d:29:
                    e4:24:2a:e3:f9:6e:ac:fe:95:1f:c0:33:be:e0:42:
                    a3:2f:ff:57:23:5b:e4:41:0b:78:e3:a0:7d:28:11:
                    cb:30:63:b2:01:c0:2e:2c:44:44:c8:a0:ac:f4:96:
                    bd:37:54:a7:35:ca:b8:f7:23:23:26:3c:35:86:4b:
                    d1:36:c4:ad:12:a2:98:f2:57:b0:fe:66:90:36:5b:
                    64:58:34:d1:08:e3:25:ee:64:3f:02:0e:bc:9d:9d:
                    ad:99:cb:85:b9:3c:b9:56:98:15:f2:b9:89:f7:ce:
                    9a:73:a5:de:31:1b:d0:f7:46:81:8b:32:2e:4c:7f:
                    bc:de:b0:19:9a:91:37:80:b8:65:91:89:32:83:9b:
                    60:a0:96:e9:dc:ba:72:07:89:9f:db:0e:c8:e9:10:
                    bc:bc:71:71:59:4d:18:c5:41:53:aa:af:7f:df:be:
                    f1:47:af:de:7a:2a:18:45:cf:c5:93:c7:b7:29:a6:
                    6d:7c:44:f7:d7:4f:49:b8:a6:a0:43:18:5f:a5:74:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:01:98:12:A9:3B:98:0D:3B:F3:1B:49:CF:CB:55:6D:4D:03:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/c96e783c-c1b1-3101-bcc2-def5cb47c301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl

            X509v3 Authority Key Identifier:
                keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.254.108.0/24
                  170.61.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:14:d2:57:38:b8:84:5c:e6:92:24:38:f6:0d:d1:82:12:
         81:02:3b:ea:04:d9:fc:4a:88:9a:4e:70:58:41:58:66:b8:f3:
         d4:45:4f:da:b9:03:66:d4:fb:9e:da:48:c7:ad:0b:ac:3b:52:
         41:27:cd:b5:21:9e:f4:44:1d:2e:53:73:1b:af:08:e9:92:53:
         4c:c3:3b:27:f2:cb:c2:61:1a:17:c4:ea:05:9f:92:8b:65:cb:
         4f:38:12:0b:7d:ad:e0:87:62:c0:14:77:9c:41:67:e2:fb:92:
         15:e6:03:38:34:e7:90:be:81:06:8b:12:32:c9:ec:5b:25:d4:
         5d:81:01:e9:b5:98:b8:4b:e4:ed:73:f8:a6:45:be:58:62:f0:
         80:a8:1e:52:4a:b6:99:93:04:27:68:e8:f4:41:3d:2f:ea:5d:
         ab:2c:0c:17:49:99:c8:73:f6:09:c9:53:4e:49:24:5b:c5:68:
         b3:4f:a2:72:88:5d:f9:78:6e:9d:e9:b2:d0:ff:9b:30:06:73:
         eb:26:8c:95:cc:a1:3e:27:68:95:fe:e1:96:c3:0e:5d:81:0f:
         04:98:45:53:56:5b:b7:ac:ac:5d:b0:e3:bb:c9:99:66:73:f4:
         3a:ea:56:3b:ba:f0:5f:76:3d:ae:52:d2:e0:13:89:57:f8:91:
         07:ce:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:11 2026 by rpki-client