Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0a2c5d6f-0e8a-3e69-96e4-e4c131096867.roa
File:                     0a2c5d6f-0e8a-3e69-96e4-e4c131096867.roa (raw, json)
Hash identifier:          pF0cGEH4Aofq0U7DyvLLqNO9rmQNwh8khusyNns8RFk=
Subject key identifier:   5C:DE:F7:6D:FA:F5:93:D6:50:0C:30:C9:77:EB:81:61:9E:E6:2E:4F
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F31B7B9755145A7445C9CF500
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0a2c5d6f-0e8a-3e69-96e4-e4c131096867.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        170.101.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:b9:75:51:45:a7:44:5c:9c:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=3423ce21-6b4d-49cd-bd12-90dacdf5b726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:13:17:c9:10:92:6b:b4:8d:53:96:5b:35:79:
                    93:73:3c:99:be:5f:2c:aa:ca:ad:d6:68:bc:b1:68:
                    18:e2:8c:24:e6:fd:61:1b:63:c1:66:5f:bf:d4:77:
                    51:38:1d:dd:33:ac:00:e6:6d:47:15:6c:45:23:2a:
                    f9:4b:e3:2e:cd:04:7d:b2:f6:d6:04:bf:94:cb:a0:
                    d8:39:e6:06:04:32:8b:bf:2a:73:76:6d:00:5d:dc:
                    f5:79:98:96:48:b2:a9:70:6e:ed:de:d9:cf:f5:dc:
                    6d:d6:bc:b7:62:86:50:99:39:20:db:10:af:bf:ad:
                    65:7e:74:23:64:cc:17:8e:9f:b5:37:1e:34:45:c6:
                    ae:cf:97:88:c1:af:d9:83:86:70:15:01:42:ca:ff:
                    ff:4e:ed:8b:67:15:63:39:d6:2e:25:4d:9e:ad:4a:
                    6f:54:6a:3b:16:c7:59:48:1b:9c:98:69:0a:01:0a:
                    4a:c8:bf:6c:84:8f:66:60:29:b1:ca:e5:4d:03:a7:
                    0e:2c:9c:ca:1d:01:e9:5d:49:b6:d3:0d:2e:03:6a:
                    85:b5:95:55:e2:55:37:f7:8a:e8:67:a0:28:a8:da:
                    1f:2e:df:f5:ed:f0:2f:ff:bb:55:15:04:cf:c3:07:
                    11:f9:15:42:c9:4c:28:43:5e:91:a7:ec:73:0d:0f:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:F7:6D:FA:F5:93:D6:50:0C:30:C9:77:EB:81:61:9E:E6:2E:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0a2c5d6f-0e8a-3e69-96e4-e4c131096867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:8c:86:25:78:04:34:aa:d0:80:77:b6:cf:a2:a5:9c:2a:
         17:a0:a7:27:c1:4c:c4:01:34:2c:57:97:34:30:89:93:aa:63:
         5e:99:b9:67:7a:dc:db:8d:d1:b2:c2:e8:31:21:36:9e:27:51:
         b0:99:12:31:11:87:6d:e1:e1:db:fb:8d:9a:64:8f:73:3a:49:
         71:d1:91:be:f2:1a:bc:c5:d6:41:d0:bf:21:10:cf:d7:fc:05:
         8f:a6:a1:ba:96:be:7f:d9:2b:89:e3:77:4a:36:6a:26:22:c0:
         97:96:a3:9d:ea:1e:00:3a:e0:18:db:27:55:a6:24:57:a6:c9:
         a3:fb:68:3d:06:a5:e0:41:24:fc:20:11:58:89:41:57:d9:1d:
         24:b6:f8:ae:a0:b7:bb:28:da:61:23:90:c2:75:d5:7d:2b:41:
         72:f1:01:ca:fc:2d:43:85:ea:b8:c9:69:e2:fd:13:3a:0d:52:
         6b:ad:f7:d5:03:fa:04:4e:6c:c8:92:e9:45:0b:e3:d3:de:d3:
         bf:43:82:24:14:97:be:9e:b9:1d:b0:84:14:d1:bf:a7:ce:b9:
         bd:77:f3:e1:e4:d5:2e:bb:b3:1a:7e:92:f0:6a:19:10:7a:48:
         f4:6f:35:cb:08:7a:65:38:ac:07:3d:50:4b:a1:a4:72:06:3e:
         34:61:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:02 2026 by rpki-client