Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa
File:                     3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa (raw, json)
Hash identifier:          ayAiyneaWZ/DA86l2HNphSSjByxSHpxyjaLQlE/MOOk=
Subject key identifier:   BC:CC:A8:20:42:43:38:2D:7D:D1:F8:58:62:82:59:8A:2D:21:80:09
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D6AAA69E982E634B4E8E2A820
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        192.184.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:69:e9:82:e6:34:b4:e8:e2:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=0abb2ad9-651b-43aa-809e-e33747534577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:62:01:c5:76:83:74:4b:d8:08:8b:76:6c:
                    28:70:6f:1f:08:54:54:c6:51:59:2a:cb:7f:a7:7a:
                    c8:86:90:98:61:fb:14:50:22:ef:81:d2:a8:87:f1:
                    39:72:29:73:2a:97:8a:36:a3:36:4e:67:70:c0:e9:
                    01:fc:2c:37:81:63:21:29:b3:63:e1:29:50:4a:66:
                    29:3e:95:ff:6b:7f:14:7d:c8:e6:a5:06:44:98:c8:
                    b4:69:34:07:2d:90:27:f9:ed:ff:37:5e:ba:24:8e:
                    1d:6c:85:20:a9:45:00:4f:d4:6b:bc:53:cb:7b:c7:
                    6d:a9:b3:ae:69:10:cb:ff:7b:d6:da:6f:bd:16:23:
                    8c:5e:0e:c1:d3:3e:d8:3e:f6:ba:ae:20:77:f5:8f:
                    27:6e:e8:7f:9b:3b:27:8d:9d:61:8d:ca:8f:95:3a:
                    09:1b:b0:f9:dd:94:7f:7b:af:07:ed:42:0c:8a:cb:
                    d3:a5:32:88:8e:bd:a1:5e:8a:bf:69:2a:e0:5a:4d:
                    81:3a:05:82:fb:2f:b4:d1:c5:2c:52:d2:0e:36:58:
                    21:5f:eb:9e:79:ab:34:a3:c9:8a:f4:db:74:d2:9c:
                    9f:a6:bc:ce:be:77:bc:38:1b:18:67:0b:88:f2:41:
                    41:de:d7:b8:d2:a6:07:d6:da:6e:02:05:ed:a3:36:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CC:A8:20:42:43:38:2D:7D:D1:F8:58:62:82:59:8A:2D:21:80:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:11:c2:ea:11:37:f3:02:fa:16:54:fc:dc:a7:f8:7c:65:
         a6:91:90:65:b3:54:70:73:2e:12:4e:18:5c:f7:3e:ad:46:13:
         05:2f:0d:54:f7:01:e9:36:3a:b3:f4:e3:e2:4b:2e:0a:f8:de:
         46:92:2c:24:a2:ae:ae:4c:a3:2e:e3:6d:0e:b3:56:98:50:cc:
         3e:5b:de:43:65:86:22:c9:0d:42:e5:22:5a:28:4d:72:0e:45:
         b4:bc:26:57:de:9c:92:8f:2f:d3:10:44:1a:1b:f3:d8:bd:b2:
         e9:06:ac:b5:6a:60:d6:75:5c:63:1c:ff:e5:5f:6b:b3:69:4a:
         d8:85:e6:b3:5a:ea:8b:26:e1:4b:84:e4:43:52:b7:f7:55:af:
         c8:a6:cc:20:da:39:d7:14:ee:f0:dd:3f:65:db:8b:da:2f:10:
         8b:90:52:b7:4a:96:3d:d7:b7:e8:44:1b:3c:c1:0d:bc:1b:4d:
         9b:06:2f:56:47:3f:20:19:f9:16:37:f4:d6:9b:1d:4e:dc:3f:
         18:d7:fa:14:7a:23:49:70:f4:61:c0:0c:7a:a7:da:06:31:04:
         81:b5:ec:ae:f5:c7:81:51:c5:22:2e:c3:06:29:41:01:ea:c7:
         5b:7f:5d:39:f2:f4:a3:9d:b5:71:84:11:7a:c2:a0:20:41:a6:
         9a:c0:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:54 2026 by rpki-client