Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e361069f-2894-3c91-8475-ea41298c1252.roa
File:                     e361069f-2894-3c91-8475-ea41298c1252.roa (raw, json)
Hash identifier:          uCFb4i2mc0cFEkuAqDhdiLl2gjKvhkbTQ+iczXyyVpY=
Subject key identifier:   91:B6:B0:51:6B:C5:4F:2A:CF:2D:70:79:A7:21:76:5B:47:A8:4D:26
Certificate issuer:       /CN=61f164dd-db39-470d-8805-3aa514d5e7b0
Certificate serial:       010D0C9F4328584D65150733CDAC7E91474827E0
Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e361069f-2894-3c91-8475-ea41298c1252.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     52347
IP address blocks:        162.217.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:07:33:cd:ac:7e:91:47:48:27:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=75a1ed65-422c-44a5-8c0e-18cf955cb01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:f3:74:6b:73:09:90:c3:d1:c8:a1:66:e1:
                    2d:76:d7:37:7e:d2:c5:c8:f7:63:21:99:97:39:06:
                    30:42:52:ec:b7:ee:fe:d9:39:0d:e7:9d:e7:35:26:
                    d7:2d:c6:45:1a:cc:75:d1:b3:1c:c1:cf:a2:b0:5f:
                    ac:06:0a:97:aa:66:80:a4:45:3b:dc:21:51:c3:dc:
                    c8:8f:7e:2a:47:4d:ab:0a:ba:26:0c:c0:a1:51:9b:
                    ef:9d:52:7a:ae:2e:26:7d:d2:0a:1c:57:b4:17:11:
                    37:a6:3e:27:cd:f5:3d:f0:13:f1:d8:fe:2f:92:1c:
                    35:7f:9b:a6:9b:4d:a6:08:86:b7:f9:77:f1:06:a3:
                    84:f9:f0:40:d9:8f:5d:30:63:1a:a2:04:a7:73:bc:
                    0a:61:7c:d0:71:96:27:8f:97:dd:40:62:2e:30:5a:
                    ca:fc:6c:c4:ad:c8:d6:14:85:b1:53:27:43:45:c3:
                    88:80:e4:b5:88:23:c2:8d:d0:91:c0:fe:94:2c:ea:
                    ea:3a:a2:e5:26:97:31:0e:3a:96:b7:1e:25:2a:df:
                    7c:9b:bc:a3:d9:8d:5c:9d:6c:82:a5:e7:5d:bb:02:
                    bd:4d:59:c0:2e:28:e4:5b:3f:63:98:8b:f8:47:70:
                    25:61:3a:8b:6e:7a:4f:15:c3:da:38:30:94:a3:3d:
                    a9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:B0:51:6B:C5:4F:2A:CF:2D:70:79:A7:21:76:5B:47:A8:4D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/e361069f-2894-3c91-8475-ea41298c1252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:e4:b2:2f:d7:72:df:21:78:1d:8f:8f:bb:ce:03:11:4f:
         c5:25:6f:d2:23:4f:14:06:59:6f:22:0f:81:bd:27:f2:17:c5:
         b3:b6:1f:26:3d:22:f5:1c:5c:7e:5b:ce:7f:81:fc:67:37:b2:
         99:98:c9:a1:12:fe:c4:0b:13:b8:9e:d0:e0:04:3b:a9:b4:4a:
         c9:97:39:a4:36:ef:2e:de:5a:5c:3f:ef:ce:0a:7d:4c:01:15:
         e3:d6:29:65:d3:87:38:67:b4:b5:d5:4c:35:23:dc:4e:4a:98:
         ef:15:53:d9:f8:99:df:46:6d:62:af:5f:84:c4:ac:63:62:b0:
         cf:57:33:bd:43:51:7b:26:f0:8a:0f:c2:83:de:f4:a2:32:fd:
         b5:ab:13:15:68:c5:ed:13:4c:6e:7b:a2:ba:6a:f3:1f:84:de:
         17:af:a0:ba:9b:e2:b0:35:89:df:c1:f5:17:92:53:07:95:51:
         b0:73:cc:d5:7b:eb:c2:f8:b4:c9:22:5c:aa:ee:22:0a:b6:2b:
         99:5e:ff:58:ad:07:4b:db:96:10:9e:44:3d:24:34:fe:7d:e3:
         b1:bf:36:71:c8:8a:4f:40:55:9d:3f:d6:b8:ad:d7:70:76:6b:
         50:00:6b:59:08:fa:bf:74:69:db:91:7b:a2:ae:ae:71:81:83:
         78:f2:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:32 2026 by rpki-client