Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
File:                     5eda4636-65ba-33d9-aa37-2ae89912698e.roa (raw, json)
Hash identifier:          kszfv0QuJiS3QI2hdIgUtnhxVCPNwiZiiOTxhfdM+Gc=
Subject key identifier:   88:82:83:63:CB:94:93:AE:EA:39:36:13:D3:FB:6E:ED:5A:EA:40:33
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584E9A7FD280B7F9E6874C6BB380
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     209242
IP address blocks:        170.176.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d2:80:b7:f9:e6:87:4c:6b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=66e74c30-16a2-4586-9fcb-cd7023c8bfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:0e:0e:b1:3e:0d:96:06:35:d3:19:b0:6f:
                    fa:b2:c8:2b:34:a6:60:99:3e:f0:2d:a2:99:3f:b6:
                    fd:4c:58:e1:ea:0c:83:e5:fb:66:d3:45:8e:ac:15:
                    30:70:22:57:21:88:d0:97:01:1b:45:78:66:a4:82:
                    30:63:68:2a:00:3e:31:7d:08:b1:2f:08:8b:d9:f2:
                    5f:80:a8:c2:18:17:9b:bd:eb:1c:65:cd:ac:06:3c:
                    54:f4:5b:62:49:6b:7f:38:ad:90:43:68:c5:a7:7b:
                    4d:ea:27:f8:1d:e4:9a:3e:2c:7b:7d:3a:c6:ab:53:
                    5a:51:0a:f7:f0:5e:15:f3:81:8a:e8:90:f5:1a:98:
                    a1:e0:77:d2:2d:24:bb:b0:91:59:82:6d:c7:1f:b6:
                    c9:7d:c2:c8:1d:1b:96:98:ee:6c:90:e1:d1:d2:a3:
                    2d:c4:11:d9:c8:4d:a9:3a:36:28:1a:55:ac:b8:37:
                    56:0b:a0:a3:e6:40:42:5b:a5:5d:61:77:e4:59:f6:
                    54:40:6c:4a:a9:67:88:83:6e:16:84:7b:96:32:4f:
                    dc:8c:36:60:d7:f4:94:e9:96:7f:94:fe:84:27:36:
                    c1:8e:9e:f0:d2:57:d7:73:3c:92:d6:4b:9e:ee:b5:
                    9c:00:74:2d:c5:d5:8a:04:f7:37:d3:de:9c:23:2c:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:82:83:63:CB:94:93:AE:EA:39:36:13:D3:FB:6E:ED:5A:EA:40:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:00:91:c0:a5:b2:5e:5b:fa:20:c6:b3:0b:67:3f:ab:44:9e:
         96:9d:e0:0e:3c:8c:5c:51:9a:17:95:1f:9a:49:85:69:d9:19:
         47:21:da:48:d2:80:04:99:9e:7a:18:5a:ca:22:c9:36:eb:72:
         9d:09:87:2d:02:08:fe:04:b4:52:17:bf:fc:a9:af:c2:6d:6d:
         52:05:e7:1c:83:24:e2:93:80:04:56:b4:7a:c5:72:e4:f0:97:
         b9:8e:93:76:e3:f8:ab:71:4e:43:d6:96:ad:17:76:f3:e7:36:
         42:c0:ee:94:9a:22:5a:dd:ec:8c:6e:5c:fa:f3:9d:6b:b0:f9:
         9f:ff:a3:6d:f0:dc:f0:71:e1:b8:84:53:ee:29:bf:d7:43:71:
         c7:a8:1c:e8:85:52:22:cb:75:6c:78:2e:f5:79:36:b4:06:b5:
         27:27:dc:9d:66:e6:d2:4f:60:dd:3e:d1:20:bb:05:2d:e3:cf:
         df:e3:4b:8e:39:fd:8d:41:f6:7a:e2:73:f7:cb:6f:35:0d:aa:
         ea:c5:9f:52:d6:6e:76:b8:0e:f5:93:3c:ed:91:81:c3:9b:b5:
         b8:6a:15:cc:d1:09:3e:af:ef:2b:00:1f:be:d1:f0:48:ea:05:
         56:49:ff:54:bb:fd:df:e1:cf:6c:23:94:70:f4:a5:90:7c:1b:
         0d:25:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:30 2026 by rpki-client