Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa
File:                     a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa (raw, json)
Hash identifier:          7UKpKlGx1Fk1IuoQNoXZFzgs9nfsEQk3JUWDXiZbjLA=
Subject key identifier:   70:19:F9:84:13:8B:DD:C0:C1:AD:C4:B6:92:06:9D:B1:C2:D8:8F:DC
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D7A052290226D64BFC478BA00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        134.224.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:22:90:22:6d:64:bf:c4:78:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=25219685-80d7-4801-ac1e-0d897fdc6d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:94:5b:ae:de:0e:a7:26:a0:dd:f2:1d:00:13:
                    1e:47:5d:c6:c3:25:75:3e:ea:b3:14:69:f3:06:3f:
                    9d:9a:b1:8e:a2:a7:83:b2:dd:b2:78:50:c7:c5:d7:
                    a1:5c:29:e8:6a:67:fb:2b:e8:0f:a5:14:c9:9a:71:
                    9c:da:d1:cf:52:b8:ee:ca:2e:4c:01:ee:04:ca:43:
                    de:3b:ae:e4:9e:23:56:e5:a1:f8:5a:d7:75:b0:13:
                    e1:85:b8:e7:49:fa:ff:e7:ca:4d:b4:12:ba:5c:ac:
                    4b:eb:a6:a3:8d:34:12:c8:4c:d7:fa:03:2f:48:1d:
                    7c:2d:b4:e9:40:38:85:6c:e8:b2:01:b8:89:87:e3:
                    eb:6f:05:b6:03:e0:fe:c9:1d:74:e2:7a:5a:3c:82:
                    02:4d:94:02:aa:c8:f4:6e:06:b7:b3:bc:09:47:52:
                    2e:bc:7c:13:28:23:ab:24:5b:ce:78:e1:c3:9b:47:
                    b7:ec:ba:aa:5a:81:a4:cf:bf:56:12:50:a1:d6:73:
                    d3:2e:38:f7:3a:5b:cc:21:5f:ce:42:ce:cf:a7:55:
                    42:f4:72:aa:5b:06:34:bf:2d:c1:e7:13:e8:40:27:
                    45:68:c1:6b:12:08:1d:cf:35:de:0f:3a:01:e3:93:
                    7d:c7:b4:6f:64:ad:bc:0a:d0:1e:50:f7:be:a7:c4:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:F9:84:13:8B:DD:C0:C1:AD:C4:B6:92:06:9D:B1:C2:D8:8F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a21c28df-3844-3c40-bf1b-c34b3db6eefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:05:0f:6e:b0:22:1c:55:65:1d:a7:15:81:7a:5d:20:bd:45:
         65:0b:95:13:0c:15:e8:34:e2:92:44:40:a8:be:89:b6:6b:b3:
         ef:74:51:a1:9c:67:f8:1c:af:cc:b4:61:c8:11:16:14:5d:f9:
         fb:51:59:4a:87:30:26:88:95:42:5d:bb:c5:18:74:18:98:d6:
         cd:4a:18:ee:89:4a:a4:a6:03:a6:4d:a3:13:5b:18:e7:fc:fc:
         67:8b:b8:1a:c0:db:f2:c7:9b:68:17:b2:22:1e:14:66:f5:98:
         49:46:29:e1:69:b0:90:6c:f3:10:bf:75:57:27:f2:32:d6:8f:
         ef:6f:9a:f3:b2:c5:e2:44:12:54:3f:76:45:4b:2d:6b:7b:cd:
         20:59:c5:9f:06:2d:00:92:27:eb:cf:8f:b1:57:49:74:55:2e:
         e5:ed:72:02:94:b7:48:41:1f:fa:b4:1b:ee:1a:38:9a:a0:20:
         54:01:3a:69:ed:c2:f7:ca:ab:ce:93:07:dd:af:8b:00:f7:61:
         dc:b9:bc:a6:a9:3c:93:04:4f:9e:05:0e:99:e1:63:69:73:9c:
         f7:47:fb:e4:5e:f7:95:67:9c:69:f2:d9:6a:d6:3e:b8:94:69:
         e6:12:2c:c8:bf:f8:5d:46:b0:c7:1a:69:90:fd:f5:1a:1b:7d:
         79:db:5e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:20 2026 by rpki-client