Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/acc70ff4-9fa9-33e2-bb13-cb04959c343c.roa
File:                     acc70ff4-9fa9-33e2-bb13-cb04959c343c.roa (raw, json)
Hash identifier:          PAA80Kf0PUmBzlFk4qvBvfTrqbTsqUBjUYYFlF3kVd4=
Subject key identifier:   4B:E8:CC:F9:A5:E8:64:4D:ED:43:C7:CF:06:F4:03:D9:BC:5D:46:5D
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584E870DE3F0E79671EE5FBAF000
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/acc70ff4-9fa9-33e2-bb13-cb04959c343c.roa
Signing time:             Fri 17 Jul 2026 09:50:38 +0000
ROA not before:           Fri 17 Jul 2026 09:50:38 +0000
ROA not after:            Thu 24 Sep 2026 11:25:53 +0000
asID:                     397641
IP address blocks:        161.195.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:0d:e3:f0:e7:96:71:ee:5f:ba:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul 17 09:50:38 2026 GMT
            Not After : Sep 24 11:25:53 2026 GMT
        Subject: CN=b8f9b39a-f262-482b-abaa-349d3c6c1f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:6d:c8:0b:04:53:7b:a4:a7:76:80:96:27:
                    6a:2e:f3:0d:eb:00:51:96:b5:30:e6:37:3c:fb:99:
                    bd:9c:b1:ea:68:bd:2e:0d:d7:af:87:02:7d:e2:c0:
                    60:6a:63:00:af:43:2d:13:9b:27:90:90:70:cb:ed:
                    81:79:c1:97:cc:7e:9d:86:e7:be:94:6c:df:df:a8:
                    97:14:be:52:25:28:b2:e6:a1:de:06:4d:75:62:82:
                    aa:02:f4:ee:b6:16:91:2d:11:88:b4:ba:86:dc:f4:
                    09:12:ff:05:78:cf:6f:7b:eb:c1:06:61:a5:40:01:
                    fc:20:27:b9:9b:ed:a2:5a:19:88:fd:8e:b8:43:06:
                    1e:1f:77:a9:9a:a1:6c:da:94:30:2a:91:4c:15:67:
                    49:0c:5c:1a:45:c1:ab:bb:41:e0:ee:b5:84:c4:87:
                    5b:6c:46:69:c3:5a:75:46:5a:fa:99:cb:5c:df:67:
                    91:fd:b2:d2:a2:95:50:a6:6f:48:78:8d:f7:9d:75:
                    7c:1d:d6:e9:78:7a:6b:dd:e1:b9:4b:27:34:16:82:
                    8c:cf:e5:1f:01:04:bb:ee:b6:bb:ae:49:a0:b9:53:
                    b6:37:89:ed:b4:79:fd:75:26:25:fd:c4:ec:c1:12:
                    b9:86:68:9e:38:3b:62:f6:e0:3e:89:b9:89:ee:72:
                    69:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:CC:F9:A5:E8:64:4D:ED:43:C7:CF:06:F4:03:D9:BC:5D:46:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/acc70ff4-9fa9-33e2-bb13-cb04959c343c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1a:8c:e9:e5:e1:a3:42:6f:0d:92:b9:12:4f:28:04:30:43:
         90:c7:6d:53:a0:15:82:2a:0c:3b:f9:f9:7d:d7:99:59:07:50:
         b2:07:9e:66:aa:78:fc:54:e6:d9:b6:da:13:f4:0e:a5:d0:2b:
         1d:98:e1:c3:a0:06:41:0d:15:09:e2:79:3e:19:48:20:f2:38:
         17:c2:e3:6e:ca:3a:44:e4:9b:1a:84:4c:c7:5a:cc:22:ea:4c:
         44:f6:a0:b9:24:cb:0a:82:15:02:d2:37:b7:e2:76:0f:db:63:
         09:af:8b:bb:a6:bc:17:1b:e7:4f:2e:2b:ed:5a:d9:73:3d:fb:
         d1:bc:fa:b7:ef:33:31:91:3e:cc:7f:4f:10:d8:ff:e4:49:06:
         44:d9:bd:06:8f:12:9e:a6:57:7a:7d:88:9d:92:a5:d7:b7:df:
         94:c7:74:44:3f:cc:07:38:36:e7:de:a1:6f:76:24:9d:15:4d:
         0e:aa:4c:99:13:c5:8e:c8:b2:79:64:dc:bb:82:e2:95:74:51:
         40:67:71:39:47:3b:93:bb:5f:fc:7d:8e:54:e7:2e:fb:f8:0d:
         17:02:8b:27:a7:76:7f:08:71:1c:9d:e9:08:70:55:52:26:a9:
         17:5f:18:06:ff:ff:05:0c:f2:50:1b:f2:62:58:31:3c:b6:da:
         36:b3:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:03 2026 by rpki-client