Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
File:                     a470d1cc-8d3f-3e49-813f-a96c3c389107.roa (raw, json)
Hash identifier:          3bHwL26HUGYojWrJRqtWia9plnQIBKbjS40OuNr+D8Q=
Subject key identifier:   A7:B9:83:DB:A0:ED:09:E2:D5:52:9F:89:43:15:63:CA:A2:28:04:45
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F4328584EA8EC48F4F830F8C56D7F0400
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     397606
IP address blocks:        147.160.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:48:f4:f8:30:f8:c5:6d:7f:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=a432b3da-7fb7-4bcb-8a30-0d9d69929752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:2a:89:dd:68:38:db:ea:e0:36:0b:07:8c:
                    24:bc:39:55:c9:c5:29:54:ef:09:9c:ac:0c:ac:7b:
                    9a:19:22:02:cb:26:79:7c:08:80:32:90:f1:1c:4f:
                    18:43:59:67:e5:b3:b0:5b:08:47:46:d3:13:ad:4c:
                    51:a9:f8:eb:e2:49:ee:83:ac:70:69:bf:e9:25:f0:
                    e1:33:df:7b:78:03:bb:25:55:fb:87:04:04:e8:41:
                    70:8f:33:f3:99:c5:5b:b6:29:1c:de:bd:0c:37:86:
                    4d:af:0f:47:d3:36:17:32:71:e2:38:a5:3a:ee:10:
                    3b:94:e7:ce:b6:4a:de:78:5a:87:24:b1:5b:52:a9:
                    f7:27:e9:af:a4:e4:61:35:98:ac:42:7d:7f:3e:ea:
                    8e:c1:7b:4f:46:42:b9:d2:0a:f1:25:65:be:c0:22:
                    d2:3a:22:19:fd:f4:38:08:1b:d2:06:89:3b:4e:92:
                    c0:1a:27:05:7e:40:12:3a:cb:89:4d:bb:f2:c6:38:
                    ba:52:8c:17:91:76:2e:d3:84:3a:23:9f:3f:84:6c:
                    2e:69:57:c0:e0:70:ca:ca:ba:65:27:02:11:1f:85:
                    7a:18:76:6f:0c:ac:29:c7:f1:b0:cf:d4:b4:c9:1d:
                    f8:db:b4:30:6f:0c:bb:8b:a2:33:0a:73:1c:22:d7:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B9:83:DB:A0:ED:09:E2:D5:52:9F:89:43:15:63:CA:A2:28:04:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:20:a6:98:8c:f2:d6:28:98:97:ad:f4:93:b2:ff:62:f9:
         ac:85:7a:61:f5:24:0d:86:8b:ae:20:a8:cb:4e:57:07:63:35:
         9e:3b:14:4b:dc:d8:97:75:bd:d6:02:60:e3:b6:f0:08:11:9c:
         8d:9d:f8:bf:7f:55:ba:e0:ab:f3:74:eb:17:a8:32:5e:a9:5d:
         e2:91:6a:4e:9a:7e:0b:d1:8e:10:f8:b3:af:73:d3:c1:d7:3f:
         cc:ab:f9:1c:3c:00:20:0e:b6:6a:1a:7e:42:0f:1c:c9:27:22:
         13:fa:0e:2b:16:fd:74:8c:4c:69:5b:e9:2c:cc:e6:06:d0:05:
         33:31:9f:00:8b:ab:31:e9:79:5e:27:67:f1:2b:65:fc:71:ce:
         22:40:1b:ca:f7:93:8d:3f:08:45:74:da:b7:db:21:f7:b1:3c:
         0c:f0:e8:b6:94:fe:c2:9a:ee:3e:af:85:c1:82:3b:3d:02:17:
         b7:3b:e8:3c:c5:7e:df:a8:6b:f2:02:66:50:ba:d6:75:ed:04:
         bf:e1:bf:ba:0a:5e:a9:6d:8e:94:09:35:89:9c:a3:64:3f:c7:
         0c:bf:37:c5:b9:c5:4c:f3:cb:bd:f3:35:36:1d:5d:95:01:f3:
         dd:7d:e8:7e:3a:d6:59:63:ee:1d:db:fe:bd:26:9c:39:a0:fc:
         40:8a:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:32:54 2026 by rpki-client