Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/c82f0220-18b3-38b3-8687-ac5b175b39a1.roa
File:                     c82f0220-18b3-38b3-8687-ac5b175b39a1.roa (raw, json)
Hash identifier:          0Op+h/EpCAqlU29t4YWCPTx1vwZ5jDrLVibcKSAGHWE=
Subject key identifier:   B6:EE:48:EE:0F:DC:52:13:BC:66:38:51:DA:28:6C:8B:5F:F7:CD:0E
Certificate issuer:       /CN=1ec223ee-1e0d-426c-9970-c00985634a4d
Certificate serial:       010D0C9F4328584D80FFF89130A53A6AE5881580
Authority key identifier: 62:6C:A7:99:7F:B8:32:3B:58:22:5C:7E:37:93:AB:B0:DC:2B:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/c82f0220-18b3-38b3-8687-ac5b175b39a1.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        205.166.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f8:91:30:a5:3a:6a:e5:88:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec223ee-1e0d-426c-9970-c00985634a4d
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=f4b0158d-3293-440f-9952-75169178d431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7d:2a:11:53:cd:e4:73:46:56:ed:d0:20:0d:
                    f8:65:4a:d8:be:f0:21:08:68:76:73:30:f8:e3:ba:
                    f9:21:4c:05:35:d4:9e:18:41:7f:77:9d:ce:f7:d4:
                    5e:e2:ec:74:d0:37:fc:32:3d:38:4a:32:8c:2f:3b:
                    cd:38:fb:b9:7f:f4:80:a4:59:0f:a4:ac:f4:44:dd:
                    fb:b5:54:ea:9a:4a:17:55:75:7b:3b:3a:67:07:58:
                    ed:92:89:16:86:67:66:c0:5a:26:19:cd:2c:ff:5e:
                    4c:28:fd:96:17:02:a7:cc:ce:bd:60:52:50:fe:ca:
                    8e:84:73:12:2a:5f:ea:0e:05:79:02:4e:62:7e:20:
                    0b:89:51:b1:0e:18:ec:b6:67:de:f7:8d:f5:f0:d8:
                    77:27:aa:4f:65:0d:21:b6:a0:e6:b7:75:1e:bb:16:
                    b4:07:57:4a:ab:4c:ef:15:2b:fb:ab:fa:a3:74:6c:
                    12:3f:94:9b:7e:26:6e:ae:ea:07:9a:ff:ac:c2:7c:
                    27:20:9f:f4:94:bd:b4:59:88:2c:1b:13:bb:ea:80:
                    05:1a:bd:34:56:11:16:bb:84:d8:19:b3:27:48:00:
                    1b:b3:01:94:73:2d:f5:bc:64:70:80:f9:91:f0:e0:
                    f7:f6:35:3c:2e:68:35:85:13:ed:89:77:28:a9:e8:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:48:EE:0F:DC:52:13:BC:66:38:51:DA:28:6C:8B:5F:F7:CD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/c82f0220-18b3-38b3-8687-ac5b175b39a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.crl

            X509v3 Authority Key Identifier:
                keyid:62:6C:A7:99:7F:B8:32:3B:58:22:5C:7E:37:93:AB:B0:DC:2B:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:25:b4:a1:9f:e2:f7:29:d7:9c:8e:23:31:c2:3b:e4:79:21:
         7b:da:33:73:eb:49:3f:bf:86:2d:84:96:95:98:5f:b5:1b:42:
         25:b4:cd:e8:31:f2:d0:8e:0f:c3:ba:ec:31:31:81:ef:f6:14:
         6f:15:18:12:66:df:bd:b0:95:58:b5:e9:8e:23:d5:7a:c7:1f:
         ce:44:b7:33:0f:68:41:c3:8c:59:ae:47:bf:c4:e5:11:32:23:
         cf:ed:91:cd:24:9e:63:83:4e:05:17:49:f1:72:13:4d:2a:f8:
         45:78:29:38:47:56:e3:f2:16:e1:ce:6f:ff:82:b0:2a:03:df:
         55:c3:77:d8:b3:b6:fd:d0:b9:9e:f7:11:f5:e6:bd:3a:c6:c0:
         d1:f5:43:40:4c:93:51:8e:e2:ae:fa:77:5c:1a:2c:07:1d:52:
         cf:7d:0a:a0:e0:ea:4f:77:7c:d3:c7:fb:12:27:89:06:0c:39:
         3d:f0:27:4c:cf:ef:e6:4d:d2:a4:3d:35:98:7c:c0:c4:51:e8:
         fd:4d:e0:36:f8:d3:50:4b:c7:ca:1c:95:08:ef:b4:bb:4e:c9:
         a5:a7:68:ec:62:6a:81:02:88:a3:38:f1:98:60:db:80:b1:fd:
         a1:c4:c8:24:51:4e:e9:3f:cd:3a:7e:3e:cc:99:d6:d9:27:4b:
         7d:af:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:01:40 2026 by rpki-client