Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa
File:                     7993d267-af3b-37cd-8527-dfc865e86277.roa (raw, json)
Hash identifier:          R1o+gLVxTxfh7b8GuoVvFyia2o8PrvPZAkF9H05O/c0=
Subject key identifier:   D4:21:AC:5D:98:02:4E:4B:FE:A9:EC:0A:82:04:6A:A8:8A:C4:66:3E
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584D60E4FC75A7B7FA69A825A080
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        170.176.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fc:75:a7:b7:fa:69:a8:25:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=32bb2260-c1a2-4ad5-a606-28eec18e3b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:1f:4e:62:3c:e3:10:93:77:74:1f:c2:c5:
                    bf:c2:96:7e:b1:08:cf:fe:86:6e:7b:9f:28:9e:46:
                    15:de:f7:39:77:6c:cb:60:af:12:7e:72:62:8d:a8:
                    49:8f:bc:59:7a:e5:cb:e8:ce:c2:25:56:80:2d:1a:
                    24:60:c5:4f:b0:bc:b7:61:6c:ba:b8:fa:1b:37:54:
                    85:6f:6b:cc:b9:b4:61:ba:5b:cf:54:9c:97:2a:6c:
                    15:e6:df:ba:32:41:fc:de:71:40:9d:1c:31:d7:44:
                    44:0c:58:c4:08:77:02:ed:82:19:d4:d1:73:42:42:
                    16:9d:fc:ec:db:37:b7:79:61:44:56:fe:7c:56:9c:
                    25:6e:e4:66:68:ca:f7:34:07:f2:81:64:92:a4:50:
                    7e:ba:9a:f4:aa:ba:b9:41:d7:a8:66:1b:ab:62:a8:
                    f6:16:eb:2b:c1:e8:9e:e6:0f:eb:c0:8e:06:2d:be:
                    e8:99:f8:2a:0f:99:e5:7c:64:62:54:a0:e2:ca:c7:
                    09:41:a2:1b:37:63:16:7d:6d:f0:04:5c:6a:d1:a3:
                    f0:cf:c4:cd:04:b2:63:d7:11:db:bb:c0:f9:b6:3d:
                    f2:f5:95:77:ca:0b:88:c1:9e:72:44:d8:f7:cd:c4:
                    00:d3:42:d9:da:6c:c1:14:a9:34:37:d9:32:5d:87:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:21:AC:5D:98:02:4E:4B:FE:A9:EC:0A:82:04:6A:A8:8A:C4:66:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/7993d267-af3b-37cd-8527-dfc865e86277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:cf:f1:ae:a7:fe:28:84:ec:95:17:09:a3:cf:cb:67:60:
         44:f9:21:d0:55:0c:62:b0:71:57:7f:8f:6c:00:e9:00:9f:d0:
         bc:f2:4e:d7:63:1d:90:99:46:88:f0:f2:83:79:27:b6:bf:b5:
         ff:34:54:93:a0:21:0b:47:d4:48:41:d5:1b:b7:d5:79:f9:23:
         16:03:0b:fc:73:ab:91:26:43:5e:bd:4b:84:5d:8a:dd:e6:80:
         ec:1d:18:b4:04:c9:fd:4b:4e:a8:c4:39:32:27:99:09:9d:17:
         e3:fb:10:a3:d4:fe:8d:37:86:76:78:17:2f:8e:0f:0b:69:42:
         24:af:70:aa:a6:1e:95:4f:ba:e5:b3:50:9a:83:d8:46:53:db:
         6b:42:50:be:64:4e:33:b4:53:3f:49:41:9a:d9:4f:5a:2f:e5:
         61:2d:f2:14:ba:3f:1f:ce:48:8e:b0:61:59:89:26:23:82:20:
         68:7a:d1:71:8f:e1:a2:da:01:a8:9d:9b:d9:21:f8:0a:12:dc:
         48:d9:87:ab:fe:1f:ee:75:26:cb:14:5b:39:52:84:9b:11:7e:
         59:61:97:91:4e:f2:98:4a:34:19:58:55:ad:fb:00:37:f9:0d:
         ca:0e:d8:16:a4:2d:48:76:a5:ae:23:d7:a6:56:e5:82:d3:9f:
         43:16:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:19 2026 by rpki-client