Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/275e0e02-effc-3bc7-91fa-e498b049cb0e.roa
File:                     275e0e02-effc-3bc7-91fa-e498b049cb0e.roa (raw, json)
Hash identifier:          c2ecZNtl7v82UVtFcXaHkcxqsvQ8/qi6SusQEz0286Y=
Subject key identifier:   11:92:D7:A4:EB:2A:79:FB:E0:FF:98:0B:BC:08:17:5C:A2:F6:1D:68
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584E5FDF53108D57013932A92B80
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/275e0e02-effc-3bc7-91fa-e498b049cb0e.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14593
IP address blocks:        170.203.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:53:10:8d:57:01:39:32:a9:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=9d5242e8-e7a8-435e-a85c-adb1afc6715f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:27:7e:b1:c6:19:0f:c0:cd:04:af:b4:ba:
                    dc:1d:bb:25:33:bc:d8:14:3e:35:41:f8:69:09:04:
                    56:14:4e:0b:3f:f0:c7:39:bf:67:4d:42:f0:67:80:
                    a7:3a:73:85:b6:5e:6c:d6:c8:11:a4:1b:3a:29:c0:
                    4b:c6:81:bf:75:5d:3a:1d:8e:40:10:49:eb:74:1a:
                    a5:fa:00:b1:95:da:a4:6b:47:4b:fa:fe:b5:cc:3a:
                    eb:92:5c:ed:e8:28:08:5e:ff:7e:53:95:b5:22:45:
                    b1:0a:39:74:6b:e7:6f:d6:a9:14:1a:76:69:61:90:
                    42:5a:3f:9a:1d:48:54:a1:74:9c:89:81:95:52:c9:
                    77:24:0f:ff:e5:20:cf:b2:1e:35:95:00:fe:c9:08:
                    66:2c:05:f7:37:b0:36:88:64:8a:46:e3:8c:23:af:
                    2d:8a:e0:30:34:26:15:9b:9b:c5:41:cc:92:07:7c:
                    c8:23:4a:fa:4e:f6:c6:02:9f:d6:cd:a1:2b:cd:b1:
                    73:3a:15:5a:3a:6d:16:66:91:63:d8:b5:1a:1f:cd:
                    e7:5d:c9:13:dc:09:8a:b1:ce:df:d3:2f:37:1c:db:
                    8e:2d:18:6d:55:35:81:47:9f:e5:ec:0a:53:d4:da:
                    2a:08:9e:d3:ef:d1:4f:ad:fe:8d:2c:22:3e:ee:0b:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:92:D7:A4:EB:2A:79:FB:E0:FF:98:0B:BC:08:17:5C:A2:F6:1D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/275e0e02-effc-3bc7-91fa-e498b049cb0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.203.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:9a:0f:f1:3b:81:ff:a2:a4:9b:d6:e6:0e:0c:11:8f:a4:
         5d:50:5b:8c:d3:4f:52:2b:75:65:63:d1:6f:f1:4b:f9:0f:17:
         f2:5e:27:d1:2a:96:60:32:89:e0:2d:34:53:4b:16:28:98:91:
         9c:ab:27:32:f4:99:20:7e:fe:27:69:77:02:69:61:70:31:b5:
         ac:95:7b:77:c0:a6:50:f8:71:cc:a8:3d:36:65:64:9d:d1:b2:
         30:a1:ed:c6:fd:6d:3f:ac:c0:99:c9:5a:4e:f0:65:11:24:43:
         40:08:6a:ab:9f:1a:90:d4:e2:bb:63:11:c6:83:3e:d9:bd:2a:
         75:2f:5d:2d:22:b4:74:fa:05:e7:54:c4:0f:46:06:c6:f2:0f:
         de:ec:29:bc:be:99:a0:21:fe:0a:72:6c:f7:42:28:9d:33:d1:
         90:e0:43:15:c5:69:d9:fa:75:6e:de:8f:9a:8b:e2:f0:e2:cd:
         42:48:f4:25:3b:f3:95:a0:66:53:2d:7d:87:60:24:c2:7e:ad:
         41:01:8e:d7:12:45:89:ab:c2:d9:97:a7:8b:5b:4f:53:17:38:
         b2:62:1c:06:30:db:e4:26:03:b4:84:2a:90:97:63:c7:a6:b7:
         61:4b:fc:6a:19:53:a3:b6:54:36:ce:1f:a0:b3:d3:c2:77:cc:
         22:6c:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:24:19 2026 by rpki-client