Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ec6d915-a27f-39ba-b7d3-5fa21b72f107.roa
File:                     6ec6d915-a27f-39ba-b7d3-5fa21b72f107.roa (raw, json)
Hash identifier:          WykhFIKFkFWzvowN8RDubdwDF8OaTD70pUQ0tHlyViY=
Subject key identifier:   DB:1C:EC:9C:63:C7:1A:E3:AD:DC:CA:10:DB:0C:EE:92:66:BB:EA:30
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584E7FFA31ED213CA0034189EF80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ec6d915-a27f-39ba-b7d3-5fa21b72f107.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     11178
IP address blocks:        8.20.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:31:ed:21:3c:a0:03:41:89:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=165ce021-7c8f-4935-8353-bff001635d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:3e:9e:b7:a6:7a:4a:cc:63:51:8a:a8:9d:
                    4c:67:cd:4f:ee:6c:04:99:5e:58:a9:57:8e:68:a4:
                    6f:4c:00:94:41:0f:31:16:c2:5a:b5:77:fb:89:dd:
                    9d:f4:94:0e:1c:2b:37:20:d0:67:ce:cf:82:c2:c9:
                    86:3c:88:6d:45:11:d5:c8:43:7e:86:35:b9:70:9f:
                    4e:58:44:cf:aa:a6:39:92:da:99:1d:cc:0d:d0:24:
                    e6:c8:98:45:5b:c7:e8:03:47:83:29:39:40:6e:7f:
                    b1:13:b6:6a:9a:e6:3a:d5:ca:87:32:89:0b:d1:4a:
                    4c:c4:b0:05:1c:45:b2:12:77:a1:ca:24:6b:40:6d:
                    32:7f:f1:98:ee:ad:61:4d:b4:4a:93:93:6e:9f:b1:
                    5d:4f:d8:91:23:97:73:fe:fc:3f:46:bf:57:35:0c:
                    68:7d:ef:81:36:31:d9:56:11:ff:42:45:32:fb:00:
                    70:5f:31:dd:2d:e2:4d:fa:4b:ac:92:2c:e7:37:5a:
                    0e:c0:21:f5:28:eb:94:2c:3b:2a:20:38:cb:38:15:
                    44:48:78:46:f8:0a:d9:24:be:eb:e5:0e:1c:5d:b8:
                    ce:23:43:35:e3:0c:b8:c7:ca:ec:03:97:9d:80:b1:
                    5a:59:03:2e:f6:d5:93:c2:01:3a:db:b5:ab:ef:f3:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:EC:9C:63:C7:1A:E3:AD:DC:CA:10:DB:0C:EE:92:66:BB:EA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ec6d915-a27f-39ba-b7d3-5fa21b72f107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.20.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:50:94:a9:e1:00:e4:41:eb:af:88:28:41:2c:3c:a3:ca:05:
         6a:14:0e:28:ca:16:d2:c0:9b:df:cd:02:0f:09:e7:53:9c:c8:
         04:a8:74:65:0d:62:f5:ff:2a:6b:83:ad:5c:bc:23:fe:eb:bb:
         4a:2a:b8:8f:6a:3d:e7:a7:bd:bc:14:ab:50:2a:e2:6b:7a:bc:
         b0:af:ee:96:fa:47:a1:6d:f0:0c:90:f7:70:b8:58:5d:b9:a9:
         1e:79:07:86:c1:eb:c3:85:9c:d3:9c:36:db:4d:43:ca:62:dd:
         5f:2f:0f:74:f2:5f:e8:63:de:f1:2c:3f:fe:20:a8:49:75:98:
         2d:5a:6a:26:e4:fd:5d:65:37:2a:d8:30:c1:0c:ea:0f:67:33:
         b7:71:5a:d6:d4:57:1d:bd:2a:47:d0:ac:50:ff:2a:69:17:98:
         e9:1e:72:82:33:e2:47:1f:3a:45:6c:91:fc:bb:be:c6:ff:a6:
         07:b5:7e:5c:cd:f0:33:bc:9c:28:82:b9:50:09:77:77:b7:19:
         e1:cf:4f:59:96:df:8f:4e:82:df:25:0c:1c:8f:07:04:ab:d0:
         75:ab:7c:39:99:74:77:e7:58:93:9a:51:1c:72:a8:2b:bf:f1:
         f7:be:ba:88:d7:d0:14:c2:c2:7e:a7:b4:63:f8:06:f2:bd:a0:
         80:30:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:47 2026 by rpki-client