Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/1b0cde98-02ad-30c8-af97-ddf231515a69.roa
File:                     1b0cde98-02ad-30c8-af97-ddf231515a69.roa (raw, json)
Hash identifier:          /uDkPWUfFi3obo0ir6npDi9DzosTdeAmbZ9bedd0ck0=
Subject key identifier:   28:D7:BD:1D:8C:F9:DB:9F:C8:42:7D:B9:43:2C:33:46:64:DC:F7:B6
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584D80FFDFC055E0F56043308200
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/1b0cde98-02ad-30c8-af97-ddf231515a69.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        170.176.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:df:c0:55:e0:f5:60:43:30:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=df39d48e-be05-46bc-a6c6-60608e1a981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:87:27:d7:c7:80:a8:7d:a6:15:72:b6:cf:
                    a1:77:63:71:60:94:8e:05:06:3c:5f:ce:aa:5b:aa:
                    9c:f3:a8:81:d5:33:85:80:3b:c6:56:5e:a6:5c:c6:
                    8c:1a:11:07:57:a9:57:d8:46:64:03:b1:ab:05:31:
                    1b:8a:a4:e7:0c:b7:98:3e:f2:e5:07:81:96:7f:d1:
                    35:a8:3d:9a:e6:ed:4b:3f:88:2e:5f:8d:1f:9f:d5:
                    48:db:2e:91:7b:12:d7:97:d8:47:87:91:d8:b6:a7:
                    76:4f:b1:87:c6:b9:8d:33:ff:25:63:4a:a8:f1:92:
                    31:c0:dc:de:f1:1d:60:b7:44:f0:c1:de:54:f1:4b:
                    44:3f:4e:c7:fc:d0:a6:4c:e2:e3:f4:55:81:79:21:
                    3a:7c:1c:15:25:7f:9d:79:a1:16:06:3a:a5:ed:8f:
                    cd:63:ae:cf:f8:54:70:75:81:2e:78:fa:4e:65:60:
                    23:5e:ac:af:28:dc:45:96:4e:06:53:42:cb:2d:fc:
                    f9:f2:44:e3:b2:ba:48:24:36:a7:23:89:03:5b:09:
                    cf:0d:49:b7:f4:83:d8:a7:84:9a:20:2f:7d:05:04:
                    19:df:b8:8c:1a:c1:ec:90:eb:db:43:38:df:15:ec:
                    99:e7:24:93:67:fb:51:d5:52:d2:4d:2a:d9:ed:a6:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:BD:1D:8C:F9:DB:9F:C8:42:7D:B9:43:2C:33:46:64:DC:F7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/1b0cde98-02ad-30c8-af97-ddf231515a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9a:28:ac:20:59:37:f7:57:ad:97:77:f6:90:e6:8d:54:5a:
         98:c9:d7:2b:ec:7c:3b:6b:cc:0c:52:56:db:8c:42:9f:9a:71:
         31:e7:a5:29:62:50:2e:33:1f:20:f1:3d:24:75:4c:76:96:2d:
         f2:19:26:7a:ac:4f:15:13:4d:aa:92:d2:9e:37:c3:73:28:26:
         5e:2d:46:e2:a9:cd:82:3d:55:27:82:a9:45:72:28:6c:1e:8b:
         eb:f6:24:6e:85:59:cb:4b:3b:31:4d:4a:f2:19:a9:8f:8a:9d:
         87:78:20:a1:57:de:d3:1b:02:57:32:f9:0f:6a:9d:25:c4:fe:
         b8:c8:64:7e:d1:38:31:71:e1:cb:2b:cb:cb:3e:04:7d:f6:cf:
         a6:cd:cc:b1:f5:dd:ba:8d:41:f2:d4:8a:37:c5:09:84:22:3a:
         27:70:76:d2:43:dc:75:fd:cc:ff:bd:02:ab:fe:d4:00:27:ca:
         aa:72:76:4d:61:be:b8:bb:3c:3d:8b:0d:63:05:9b:59:a9:f2:
         10:6d:71:24:3d:b3:2d:f4:c3:9d:da:b8:00:57:06:6e:93:94:
         0d:53:b4:8d:2e:3a:fe:26:c8:68:3c:dc:a8:d6:1f:85:af:76:
         ef:fd:0e:4b:80:de:62:f2:25:fd:ee:ec:aa:74:ed:1c:e7:be:
         4e:e4:d9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:28 2026 by rpki-client