Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/47868d49-22ba-3c2c-b778-44362e0fd17f.roa
File:                     47868d49-22ba-3c2c-b778-44362e0fd17f.roa (raw, json)
Hash identifier:          HEWptYczoeb5+rkORyySYI3ptUJ1ZYfIL5YJCmexbGs=
Subject key identifier:   B6:06:7D:71:33:7B:23:F8:36:35:57:C6:C1:58:3F:38:9C:CD:14:2C
Certificate issuer:       /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
Certificate serial:       010D0C9F4328584E11B437E0D69650965458FD40
Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/47868d49-22ba-3c2c-b778-44362e0fd17f.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     17275
IP address blocks:        161.107.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:37:e0:d6:96:50:96:54:58:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=9c5f440a-d420-4cae-966d-e78ae72bc7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:7f:51:5e:67:2f:b5:c0:4c:35:6c:ae:07:
                    a8:0f:fa:ff:78:17:ae:40:47:4d:94:cf:32:e0:18:
                    5e:ec:f8:1e:0e:5c:fd:7d:50:d3:98:70:27:c1:2d:
                    c9:41:71:5c:98:d7:54:68:63:ca:c2:81:ef:53:82:
                    ab:b8:27:02:91:97:c1:12:d8:10:52:79:be:74:29:
                    b2:c9:78:91:58:9c:3f:3b:13:d8:1c:7e:ab:e2:02:
                    64:b1:29:8b:c9:49:e7:2a:a0:c8:7f:5d:80:bc:bb:
                    be:0d:8e:69:a4:39:67:5c:fe:59:a8:5c:ff:6c:72:
                    51:c0:b3:48:cc:4b:82:8a:09:33:69:1e:b8:71:3b:
                    46:21:cc:10:97:3b:47:84:ac:a0:65:a0:9c:62:8d:
                    4a:fb:c9:06:59:b3:ed:a0:69:1a:59:b0:b5:4b:3c:
                    44:5f:49:6d:af:1b:b9:0d:cd:64:cb:b3:8c:c7:db:
                    10:cd:11:b7:6d:0c:16:c1:ec:69:d9:76:f4:58:77:
                    04:03:6f:d4:e7:48:9a:c7:96:36:5e:5e:22:f4:4a:
                    f4:47:9a:18:b2:9f:21:92:5a:19:28:de:86:4e:8d:
                    c7:78:87:f6:7d:18:39:b5:74:04:c8:9e:dc:5b:72:
                    1f:d6:4e:7b:4d:4f:64:19:55:90:8b:aa:3c:bb:91:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:06:7D:71:33:7B:23:F8:36:35:57:C6:C1:58:3F:38:9C:CD:14:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/47868d49-22ba-3c2c-b778-44362e0fd17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl

            X509v3 Authority Key Identifier:
                keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.107.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:7c:bd:83:84:55:45:47:39:5a:b8:69:b5:25:07:fc:e1:
         b9:82:0b:ed:11:88:c0:ad:f1:a0:a5:66:15:e3:c0:23:f6:56:
         b3:e0:2f:74:87:61:ec:a4:35:d4:9d:90:77:e4:93:38:ea:56:
         bc:7b:2a:12:d9:cc:cc:9b:04:98:e7:ac:d8:80:c4:36:82:81:
         20:61:84:b8:46:e9:c6:7e:b6:62:63:25:aa:37:16:56:43:9a:
         63:da:c3:5a:46:61:35:19:62:9e:32:ea:65:9e:f6:83:6b:c4:
         1e:64:4e:d3:2f:5f:a1:f1:b0:8b:24:34:75:dc:b9:65:19:49:
         83:bb:d0:88:3c:3b:34:f4:f5:98:6d:bc:b0:4d:b9:33:0f:ff:
         69:42:79:48:98:a0:0b:88:27:40:c8:3f:24:99:be:bf:05:d4:
         38:b8:a2:f4:e5:e1:9d:ad:df:2d:22:bb:0a:be:74:0c:27:c2:
         24:cd:4c:d3:33:af:4c:ab:89:f1:c5:f5:97:f5:a1:3d:99:ed:
         03:3a:4d:f8:2f:26:2a:bb:45:93:f2:f9:87:49:b3:d3:61:06:
         ac:fa:9e:00:eb:a3:9c:cc:d8:2b:59:03:76:43:af:2f:3e:83:
         1d:ba:66:83:3f:64:66:cf:cd:f0:77:f8:59:67:fb:24:7e:22:
         51:91:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:30 2026 by rpki-client